
$ rpki-client -vvf rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/3137352e3131312e39382e302f32342d3234203d3e20313338313230.roa
File: 3137352e3131312e39382e302f32342d3234203d3e20313338313230.roa (raw, json)
Hash identifier: dovyd8zV7svzteoH3lZIvs7PVqS20CF/gTgXg/sP+cA=
Subject key identifier: F9:0C:4A:15:11:9B:91:C4:4B:6D:1E:FD:75:F4:F0:9D:D6:53:A2:5B
Certificate issuer: /CN=F31173B105DDB89FBDF5A1D9E23B19FB3D32590B
Certificate serial: 78F86DFA7D26D248CD3262D1FE80B4AAB94A2417
Authority key identifier: F3:11:73:B1:05:DD:B8:9F:BD:F5:A1:D9:E2:3B:19:FB:3D:32:59:0B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/3137352e3131312e39382e302f32342d3234203d3e20313338313230.roa
Signing time: Sun 03 May 2026 02:58:28 +0000
ROA not before: Sun 03 May 2026 02:53:28 +0000
ROA not after: Sun 02 May 2027 02:58:28 +0000
asID: 138120
IP address blocks: 175.111.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.crl
rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:f8:6d:fa:7d:26:d2:48:cd:32:62:d1:fe:80:b4:aa:b9:4a:24:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F31173B105DDB89FBDF5A1D9E23B19FB3D32590B
Validity
Not Before: May 3 02:53:28 2026 GMT
Not After : May 2 02:58:28 2027 GMT
Subject: CN=F90C4A15119B91C44B6D1EFD75F4F09DD653A25B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:83:11:1f:ec:8e:21:f7:53:bd:f0:ad:e3:d5:
40:a7:d2:28:f5:d8:b6:9e:9d:ec:1f:28:99:46:96:
9e:25:05:46:17:6e:b5:41:2d:7f:83:26:27:7d:d2:
61:21:05:13:2f:70:d9:bd:f5:8f:12:ba:70:04:28:
0a:fd:dd:97:6a:de:3d:39:a7:0c:03:46:c6:07:b5:
51:80:85:31:d2:b8:69:1e:f3:6e:46:94:53:ee:1c:
d8:f1:12:3f:42:d1:46:fd:c4:3a:7c:13:c8:d2:1f:
3d:b9:40:9b:62:fb:e6:fb:8d:5a:c4:6c:3a:5a:14:
8e:c4:50:b1:c8:36:a5:d8:10:c3:f8:23:39:5c:55:
43:0f:8c:ab:1e:79:24:8d:a5:9c:68:60:f2:84:8a:
71:f1:b4:cb:d0:95:db:1e:8f:5c:6b:96:ed:40:db:
2c:c8:d6:e5:c9:69:a1:9d:61:58:20:42:d7:f4:05:
45:fc:d1:07:4f:a1:0a:c4:56:df:ea:c1:c8:c6:16:
99:bf:27:9d:e6:39:16:de:c2:6e:2d:f0:b9:05:66:
07:b3:85:b1:01:81:bf:c5:e4:db:e3:2a:22:5a:d0:
4c:92:3f:88:76:b9:80:04:03:c2:0c:1a:76:f4:72:
8b:b0:db:f3:76:5e:52:26:a1:64:82:9f:cc:0d:7a:
d6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0C:4A:15:11:9B:91:C4:4B:6D:1E:FD:75:F4:F0:9D:D6:53:A2:5B
X509v3 Authority Key Identifier:
keyid:F3:11:73:B1:05:DD:B8:9F:BD:F5:A1:D9:E2:3B:19:FB:3D:32:59:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F31173B105DDB89FBDF5A1D9E23B19FB3D32590B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/3137352e3131312e39382e302f32342d3234203d3e20313338313230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.111.98.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:80:37:57:f3:42:66:d4:03:ef:9c:ab:7e:8a:e5:14:13:6c:
33:db:0b:ce:90:17:06:71:af:bd:0d:09:f0:cb:4d:e4:10:3b:
a2:79:a3:bf:98:bd:65:40:85:e3:bd:cc:fd:4f:f4:4b:f5:b1:
a1:58:25:ea:f6:ce:50:5c:db:cc:6f:91:1d:63:60:ba:3f:eb:
d5:11:c7:66:0a:73:85:b7:f2:ec:69:1e:48:38:fb:85:0a:77:
cc:3b:c3:11:3b:d5:1f:d3:78:93:a7:5e:71:f1:0c:26:9c:ec:
64:95:18:39:2d:ce:d9:61:6c:78:31:40:1d:f5:7d:ab:31:22:
52:33:69:36:9b:c0:a6:26:13:92:1b:fb:f1:bd:ca:5a:7f:54:
17:b9:c9:22:4f:d1:f4:84:3a:bd:0c:e9:1f:89:52:1f:2d:8f:
30:03:83:52:ca:83:ed:83:b7:9b:91:ef:09:a9:43:e3:14:b2:
b1:29:ad:7b:f2:aa:fc:21:18:e8:78:6a:12:cf:1c:cf:5b:8b:
e1:17:68:65:f9:7a:a0:3d:17:aa:d0:07:da:aa:c7:bc:1b:18:
95:12:59:78:d0:df:ea:1f:37:a4:85:30:57:d4:6e:27:3f:02:
02:37:ac:c6:04:35:b2:8d:a8:04:fc:66:d9:71:15:8c:e6:a7:
ba:d3:57:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:51:59 2026 by rpki-client