
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/3231302e38372e3131332e302f32342d3234203d3e20313532303533.roa
File: 3231302e38372e3131332e302f32342d3234203d3e20313532303533.roa (raw, json)
Hash identifier: m+uFtZihUm3fWV/iOrWY8zLaQsNI9BmUlq7mnOF09qo=
Subject key identifier: 16:EA:10:9B:D3:BF:CA:FA:74:5D:9C:D2:0B:76:48:65:1D:67:BA:E3
Certificate issuer: /CN=6D8C2202C602D4BCB9586F638744BA643908A389
Certificate serial: 1B5E9B2434BCDDECB7B73EAC28CDF991DF7A070F
Authority key identifier: 6D:8C:22:02:C6:02:D4:BC:B9:58:6F:63:87:44:BA:64:39:08:A3:89
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D8C2202C602D4BCB9586F638744BA643908A389.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/3231302e38372e3131332e302f32342d3234203d3e20313532303533.roa
Signing time: Sun 03 May 2026 02:56:00 +0000
ROA not before: Sun 03 May 2026 02:51:00 +0000
ROA not after: Sun 02 May 2027 02:56:00 +0000
asID: 152053
IP address blocks: 210.87.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.crl
rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D8C2202C602D4BCB9586F638744BA643908A389.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 12:48:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:5e:9b:24:34:bc:dd:ec:b7:b7:3e:ac:28:cd:f9:91:df:7a:07:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D8C2202C602D4BCB9586F638744BA643908A389
Validity
Not Before: May 3 02:51:00 2026 GMT
Not After : May 2 02:56:00 2027 GMT
Subject: CN=16EA109BD3BFCAFA745D9CD20B7648651D67BAE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:27:9e:24:72:a2:27:0c:9a:3c:a3:56:58:d5:
fd:5d:b3:2c:a1:b3:40:b7:66:2c:ee:45:66:b4:47:
83:fc:db:5a:20:4c:95:6e:f5:c7:36:d0:c1:a3:82:
8b:e1:70:58:2d:62:2f:1f:0f:2f:43:e3:54:b5:ac:
30:1b:20:1b:d7:85:2f:4f:f7:02:8a:15:cd:78:98:
e1:83:19:28:c8:52:33:35:19:95:ff:ac:30:c7:07:
f8:51:86:00:21:27:22:fc:70:b2:38:c0:21:92:0b:
a3:d6:d6:27:5d:3b:58:db:6d:7f:de:d2:73:6d:e7:
c6:fd:2b:0b:31:b4:d8:4d:57:cf:f9:81:d6:cc:47:
3d:fe:7d:a4:81:48:dc:a6:81:84:76:90:5b:ad:5b:
87:66:68:61:f2:67:04:71:8a:75:75:0d:a9:d1:97:
4d:af:f4:f7:cd:97:05:83:52:8b:0d:0b:17:3a:ec:
f8:a2:95:40:ea:7f:99:a9:63:30:2b:0e:22:39:30:
a1:18:49:a5:b8:16:fb:e5:24:ac:d4:2d:f9:e0:a9:
96:91:ab:8c:19:84:4a:23:b4:d9:a7:f1:b3:d9:1c:
cd:f2:1f:40:92:8b:02:bb:f6:6e:a3:4c:1f:ed:c5:
43:40:bb:8a:6b:a0:19:3e:3a:f6:3f:31:75:72:8a:
ab:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EA:10:9B:D3:BF:CA:FA:74:5D:9C:D2:0B:76:48:65:1D:67:BA:E3
X509v3 Authority Key Identifier:
keyid:6D:8C:22:02:C6:02:D4:BC:B9:58:6F:63:87:44:BA:64:39:08:A3:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/6D8C2202C602D4BCB9586F638744BA643908A389.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D8C2202C602D4BCB9586F638744BA643908A389.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/3231302e38372e3131332e302f32342d3234203d3e20313532303533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.87.113.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:b7:7e:bc:2b:6d:ec:05:3b:ab:3f:28:4f:df:db:b5:1c:1c:
ad:d0:94:fe:78:7f:f8:21:40:24:02:88:de:d3:7c:9a:f5:bf:
e5:40:58:16:8a:e4:6a:0d:e4:5d:1a:00:84:3a:2e:06:0f:39:
bb:b4:72:32:c3:e0:66:6a:e6:0a:a6:16:a3:e1:18:1a:f7:13:
32:41:d6:b2:c2:8d:be:99:e8:ba:3e:7f:2e:fe:b5:28:f0:fe:
d4:53:23:eb:01:4a:7c:dd:6e:a1:65:2c:de:29:9a:96:0d:ec:
a8:7f:af:b8:6d:0f:75:a2:77:24:71:b4:13:de:09:92:ba:0d:
e0:4c:51:97:cf:a7:33:68:61:9c:4d:00:a5:5f:78:c1:ca:2a:
06:39:eb:f4:83:38:26:b3:69:a1:83:a7:6e:b8:48:83:85:d5:
49:7a:fb:85:d5:16:b9:df:29:3e:86:71:b6:87:cf:2e:82:7b:
3f:62:2f:5d:69:26:c3:a3:d3:3b:31:b9:2b:a3:d4:50:07:01:
27:f6:22:ed:54:d9:6c:17:69:48:db:0c:50:35:d0:c2:a1:eb:
ae:ea:0d:f6:ec:ba:a2:a1:91:43:a7:e1:ce:7e:12:6c:8f:1c:
a3:0d:22:ea:7d:68:93:01:61:76:93:e7:ca:ad:6b:e4:8f:f4:
72:65:2c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:51:23 2026 by rpki-client