
$ rpki-client -vvf rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131312e36382e32382e302f32342d3234203d3e20313439373436.roa
File: 3131312e36382e32382e302f32342d3234203d3e20313439373436.roa (raw, json)
Hash identifier: WbiPm+iTkpPEW0o79B7kdDb8z2SOPBUszZwMsNkDB2k=
Subject key identifier: 2F:09:9E:A0:1F:06:77:72:03:3D:79:A6:84:EF:EA:1F:CB:77:13:F3
Certificate issuer: /CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
Certificate serial: 6171BDDD1400ADD52E4B5AE8DA84BC43B6533620
Authority key identifier: 8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131312e36382e32382e302f32342d3234203d3e20313439373436.roa
Signing time: Sun 03 May 2026 02:59:30 +0000
ROA not before: Sun 03 May 2026 02:54:30 +0000
ROA not after: Sun 02 May 2027 02:59:30 +0000
asID: 149746
IP address blocks: 111.68.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl
rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:71:bd:dd:14:00:ad:d5:2e:4b:5a:e8:da:84:bc:43:b6:53:36:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
Validity
Not Before: May 3 02:54:30 2026 GMT
Not After : May 2 02:59:30 2027 GMT
Subject: CN=2F099EA01F067772033D79A684EFEA1FCB7713F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:23:6a:23:b8:71:55:82:7d:e8:81:b9:72:31:
97:2a:07:84:e9:42:a6:80:ed:6f:d9:df:f1:6d:1d:
59:a7:a8:e8:ae:53:99:f7:58:d3:ab:7a:9d:5e:70:
d8:fb:ee:e8:2e:f0:fb:43:d9:66:5f:97:d8:e4:e4:
4b:10:4d:dd:43:4f:51:7b:5c:26:e8:1d:32:4a:47:
b6:d8:ab:bb:93:4c:53:58:f6:2e:23:98:42:a6:38:
da:f7:ba:28:29:de:c0:bb:57:c2:0a:6f:6b:8c:0c:
67:9a:cf:64:37:2b:b4:ab:2d:57:90:8e:08:02:6c:
87:e1:a6:50:61:ec:16:cb:3e:73:1d:80:41:62:56:
9e:ef:b6:2e:82:a8:16:53:3b:e5:15:74:53:f9:1f:
47:30:b0:6b:d5:cd:76:f6:01:bf:18:40:bd:d1:59:
af:62:7f:18:e7:d7:d6:f6:10:c8:b0:39:4e:ae:d4:
0a:ef:a2:2d:cb:c6:59:3d:0d:be:bc:52:b6:a3:00:
ea:2a:81:35:0b:e6:d5:1b:05:3f:eb:b1:f0:36:56:
49:17:e5:bc:4b:cc:08:72:04:91:9c:9e:70:2d:8b:
4f:af:9c:9d:95:85:c8:9a:1b:67:3f:db:64:d1:59:
fa:25:a3:24:e5:29:29:7a:00:01:35:1b:1d:32:ed:
7f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:09:9E:A0:1F:06:77:72:03:3D:79:A6:84:EF:EA:1F:CB:77:13:F3
X509v3 Authority Key Identifier:
keyid:8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131312e36382e32382e302f32342d3234203d3e20313439373436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.68.28.0/24
Signature Algorithm: sha256WithRSAEncryption
af:e5:c9:5c:7b:15:9b:ac:d9:30:9b:24:1b:61:2c:c8:ca:a8:
4b:85:61:a9:0d:89:a6:e5:8e:9c:5f:db:78:3e:a3:49:d9:d8:
6f:42:ee:90:6b:5e:1d:2d:ba:cb:3c:01:88:ad:ca:89:90:33:
aa:e6:7c:cc:35:01:f5:8f:95:e6:e3:5f:2e:cf:f1:83:86:f9:
f3:a3:5f:41:07:7c:46:b4:a2:9e:39:6f:5e:ff:25:ce:3b:16:
2d:80:e3:7a:72:0f:b9:36:08:58:b8:ad:3f:74:b7:88:b7:33:
9a:54:f7:00:0f:79:99:6f:f2:84:8a:fb:f7:81:e2:7a:79:74:
2d:ec:83:12:ff:0e:13:96:11:0b:b7:c9:00:e6:ee:a1:36:51:
50:5c:8e:ca:7a:e5:e0:5a:7c:09:68:0b:d1:30:23:e4:91:75:
8e:fa:a6:06:28:98:5e:b1:8f:6f:45:4c:50:a8:85:a5:c4:fa:
ec:4a:e4:bc:9f:88:56:c7:31:6e:a4:6d:39:fa:66:55:75:2f:
39:4c:d4:dc:59:c5:35:ff:28:e1:15:2f:c2:8b:b3:95:93:85:
e5:57:53:05:86:2f:61:cf:26:fd:f8:76:24:3f:ce:c3:fb:c9:
ba:70:27:1a:7c:f7:03:88:b1:30:a1:6e:7e:f6:6e:ba:ed:5e:
2d:bc:44:26
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUYXG93RQArdUuS1ro2oS8Q7ZTNiAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEM4QzU2RUQxRUEwQzZGOTM5MUNEOTAwOEU3OENERjM4
MUMyNzIwQjAeFw0yNjA1MDMwMjU0MzBaFw0yNzA1MDIwMjU5MzBaMDMxMTAvBgNV
BAMTKDJGMDk5RUEwMUYwNjc3NzIwMzNENzlBNjg0RUZFQTFGQ0I3NzEzRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6I2ojuHFVgn3ogblyMZcqB4Tp
QqaA7W/Z3/FtHVmnqOiuU5n3WNOrep1ecNj77ugu8PtD2WZfl9jk5EsQTd1DT1F7
XCboHTJKR7bYq7uTTFNY9i4jmEKmONr3uigp3sC7V8IKb2uMDGeaz2Q3K7SrLVeQ
jggCbIfhplBh7BbLPnMdgEFiVp7vti6CqBZTO+UVdFP5H0cwsGvVzXb2Ab8YQL3R
Wa9ifxjn19b2EMiwOU6u1Arvoi3Lxlk9Db68UrajAOoqgTUL5tUbBT/rsfA2VkkX
5bxLzAhyBJGcnnAti0+vnJ2VhciaG2c/22TRWfoloyTlKSl6AAE1Gx0y7X8RAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQULwmeoB8Gd3IDPXmmhO/qH8t3E/MwHwYDVR0j
BBgwFoAUjIxW7R6gxvk5HNkAjnjN84HCcgswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWVhN2ExMTUtYjhiOC00OTBiLTgzMjAtYzllNTlhMTAwM2RkLzAvOEM4QzU2RUQx
RUEwQzZGOTM5MUNEOTAwOEU3OENERjM4MUMyNzIwQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84QzhDNTZFRDFFQTBDNkY5MzkxQ0Q5MDA4RTc4Q0RGMzgxQzI3
MjBCLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FlYTdhMTE1LWI4YjgtNDkwYi04
MzIwLWM5ZTU5YTEwMDNkZC8wLzMxMzEzMTJlMzYzODJlMzIzODJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzQzOTM3MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG9EHDANBgkqhkiG
9w0BAQsFAAOCAQEAr+XJXHsVm6zZMJskG2EsyMqoS4VhqQ2JpuWOnF/beD6jSdnY
b0LukGteHS26yzwBiK3KiZAzquZ8zDUB9Y+V5uNfLs/xg4b586NfQQd8RrSinjlv
Xv8lzjsWLYDjenIPuTYIWLitP3S3iLczmlT3AA95mW/yhIr794Hienl0LeyDEv8O
E5YRC7fJAObuoTZRUFyOynrl4Fp8CWgL0TAj5JF1jvqmBiiYXrGPb0VMUKiFpcT6
7ErkvJ+IVscxbqRtOfpmVXUvOUzU3FnFNf8o4RUvwouzlZOF5VdTBYYvYc8m/fh2
JD/Ow/vJunAnGnz3A4ixMKFufvZuuu1eLbxEJg==
-----END CERTIFICATE-----
Generated at Wed May 13 05:24:47 2026 by rpki-client