
$ rpki-client -vvf rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131362e3235342e3131352e302f32342d3234203d3e20313439373436.roa
File: 3131362e3235342e3131352e302f32342d3234203d3e20313439373436.roa (raw, json)
Hash identifier: mWXCbPzsFa1dYvWDE7xWkSjrlwuLQgJdcVPGB0v1f6U=
Subject key identifier: C9:9E:3C:D5:A8:33:80:A1:CE:3F:B4:E2:19:70:EF:F3:85:EE:E8:71
Certificate issuer: /CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
Certificate serial: 6C18B78658B07EFDB8A37E15F2EC740798AA59AF
Authority key identifier: 8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131362e3235342e3131352e302f32342d3234203d3e20313439373436.roa
Signing time: Sun 03 May 2026 02:59:32 +0000
ROA not before: Sun 03 May 2026 02:54:32 +0000
ROA not after: Sun 02 May 2027 02:59:32 +0000
asID: 149746
IP address blocks: 116.254.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl
rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:18:b7:86:58:b0:7e:fd:b8:a3:7e:15:f2:ec:74:07:98:aa:59:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
Validity
Not Before: May 3 02:54:32 2026 GMT
Not After : May 2 02:59:32 2027 GMT
Subject: CN=C99E3CD5A83380A1CE3FB4E21970EFF385EEE871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:03:1e:50:69:cf:66:bc:01:8e:3d:50:20:c2:
ed:22:a5:76:54:b8:28:26:67:2e:9b:d5:6d:1a:e8:
a6:1f:e2:f0:04:fc:82:44:0c:80:5a:e1:71:4a:bd:
60:f3:d8:1f:68:82:ab:7d:1d:a2:38:93:f3:64:2d:
97:e3:a5:4d:b5:ac:a7:66:ae:71:1b:8a:e2:1d:2f:
49:aa:1e:1c:e0:76:0b:b9:b5:27:96:0b:db:40:20:
07:ce:1d:c9:1e:69:12:6d:ea:14:fd:ca:3a:4f:23:
51:de:19:52:56:fc:08:95:9f:ed:2a:4a:a9:fe:c2:
3b:22:3c:05:e6:68:e2:db:24:ce:0a:f5:c0:85:de:
0a:11:10:6a:0e:e5:17:c1:d4:7d:84:55:f0:09:e5:
62:d4:4d:c3:4b:52:44:20:ea:32:88:65:f9:da:62:
d7:63:f6:73:29:01:a4:f3:3c:df:23:81:d4:60:32:
1c:6c:07:49:82:10:44:3e:7c:3e:66:05:f6:89:a3:
78:d0:0a:7a:13:e9:87:1a:5f:2e:c1:51:44:fc:6f:
88:a2:17:a5:cf:3a:56:44:d2:12:79:2d:76:a0:23:
80:60:8d:1b:4d:d3:a4:32:96:2f:a3:2a:5e:45:23:
08:a1:fe:39:fc:8a:44:bf:ae:ea:59:40:7b:5d:cd:
55:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9E:3C:D5:A8:33:80:A1:CE:3F:B4:E2:19:70:EF:F3:85:EE:E8:71
X509v3 Authority Key Identifier:
keyid:8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131362e3235342e3131352e302f32342d3234203d3e20313439373436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.254.115.0/24
Signature Algorithm: sha256WithRSAEncryption
96:af:21:8d:55:6e:81:4b:9e:44:c6:c3:4e:78:e7:58:94:ab:
2a:4f:93:1a:a5:01:52:00:3d:ae:df:98:d0:f2:92:e5:7f:83:
78:37:a9:99:15:37:2b:ae:35:9c:d9:8f:33:6f:fe:52:a3:13:
47:5a:47:4e:75:05:c7:50:0e:fc:1b:8e:10:40:a0:01:03:02:
1c:b4:66:0b:60:da:26:61:27:ae:f8:42:6f:3b:af:d2:d8:73:
67:ec:52:20:24:86:98:10:7f:cf:e1:c5:bc:11:d2:52:69:c1:
0f:ae:70:7d:4d:d1:4c:c2:29:89:89:6b:77:f2:fa:af:ab:81:
d8:4f:1a:24:0a:1a:31:4b:b3:2c:7a:3d:91:34:2f:f9:18:c8:
83:45:67:40:ec:d6:f4:e1:7f:fb:39:0c:87:06:ce:0b:90:5d:
b2:d0:e9:28:bd:d5:93:38:42:db:f2:d7:09:11:38:41:cf:0f:
60:95:70:19:97:23:1c:94:59:b8:aa:4f:29:10:3a:8b:69:92:
4c:94:36:dc:96:87:18:56:4b:8e:3e:85:dd:74:df:1c:2f:68:
aa:14:0a:d6:bf:c8:d6:6f:40:4d:f1:17:d2:e8:f7:c4:e2:a2:
08:42:92:b4:ef:1b:34:bc:46:c5:b5:e5:bd:58:12:47:b1:ae:
71:f8:3e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:39:50 2026 by rpki-client