
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3234382e302f32342d3234203d3e203338353030.roa
File: 3131362e36382e3234382e302f32342d3234203d3e203338353030.roa (raw, json)
Hash identifier: AG2Q6pzgP+HqyelGclNKXX649yJBqPgdzMvlDtH+m5A=
Subject key identifier: 42:2D:E7:72:6C:A6:DE:FF:EA:A2:47:8A:D9:DD:48:2B:BE:19:0D:E0
Certificate issuer: /CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Certificate serial: 3B5A9A77D12E77AF8ABEAA7839C6BBCF2327B055
Authority key identifier: FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3234382e302f32342d3234203d3e203338353030.roa
Signing time: Sun 03 May 2026 03:00:05 +0000
ROA not before: Sun 03 May 2026 02:55:05 +0000
ROA not after: Sun 02 May 2027 03:00:05 +0000
asID: 38500
IP address blocks: 116.68.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:56:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:5a:9a:77:d1:2e:77:af:8a:be:aa:78:39:c6:bb:cf:23:27:b0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Validity
Not Before: May 3 02:55:05 2026 GMT
Not After : May 2 03:00:05 2027 GMT
Subject: CN=422DE7726CA6DEFFEAA2478AD9DD482BBE190DE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1d:60:12:13:21:87:fa:51:bd:32:e7:da:db:
bf:66:49:31:7f:5e:50:11:44:41:e1:d2:26:c1:7d:
6d:55:ec:74:16:24:61:f6:db:b6:e5:53:18:3a:07:
f0:2c:ea:9d:20:e9:54:08:85:c1:00:c0:f5:b6:1c:
27:ca:a3:28:98:a4:d7:46:09:06:f4:2a:7a:5c:d9:
38:2e:05:b4:c7:f9:61:69:38:ef:b7:61:57:49:c4:
22:db:f2:68:3c:47:14:86:c3:c6:21:a1:f6:0c:d4:
b4:48:53:6e:f6:0e:8b:d5:43:5e:2c:16:ff:12:df:
66:c9:6e:dd:95:59:53:99:5f:66:39:a5:2e:72:dc:
e4:85:96:ff:b6:7b:a8:99:85:5d:6f:c8:ac:4e:38:
9d:80:3c:a1:7c:37:55:ec:2e:90:9a:aa:bc:8c:1b:
0e:5e:4b:bd:57:68:4c:4e:c9:a7:aa:56:09:41:09:
f6:81:d9:4f:57:82:04:79:1e:68:2c:d3:95:20:ea:
9e:bb:6b:d3:d1:d6:0f:1f:3d:16:72:20:83:a2:a6:
fd:86:58:80:c6:28:c4:9a:26:ff:1c:46:de:98:a0:
0d:0f:f3:28:17:8d:54:eb:39:1c:da:8d:4c:26:26:
86:13:ec:dd:73:0c:88:53:6c:91:55:9d:6d:2c:7e:
55:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2D:E7:72:6C:A6:DE:FF:EA:A2:47:8A:D9:DD:48:2B:BE:19:0D:E0
X509v3 Authority Key Identifier:
keyid:FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3234382e302f32342d3234203d3e203338353030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.68.248.0/24
Signature Algorithm: sha256WithRSAEncryption
81:35:8c:c6:29:38:58:9e:6f:30:bc:20:62:99:94:98:bc:fc:
bc:db:fa:cb:ef:a6:aa:d9:a5:ea:e2:17:06:17:db:1f:6e:06:
ee:0c:17:08:8b:3f:2a:da:89:c7:09:45:c9:cd:c2:d6:ca:f3:
39:38:00:3d:d5:de:e6:d6:f6:57:a8:df:13:7b:79:72:74:19:
d2:a1:1c:c3:b6:6d:ec:5d:3b:e3:3c:69:a7:11:d9:0a:1c:84:
a5:20:19:45:09:61:42:77:29:cd:a2:f2:57:05:ef:04:90:c6:
fa:5d:a5:15:f3:0b:22:3b:f3:25:f1:25:45:26:5e:eb:9b:d4:
08:3a:57:ae:8a:8c:e3:44:2e:93:07:37:ad:35:41:e7:0e:c1:
38:28:3f:a9:6c:32:17:16:9a:2b:4c:e0:17:6b:2e:6f:64:fa:
07:98:ce:bf:b2:0c:eb:48:9d:f8:fe:a3:8b:5d:11:10:45:b6:
65:00:63:66:a1:d0:e2:3f:ca:6c:2e:b3:61:d5:71:5c:a8:34:
f5:e2:17:44:c2:8f:39:8b:10:74:c2:41:d1:67:34:39:b4:b9:
d3:5e:69:ab:b2:fd:de:9d:c4:1a:f6:1a:6c:aa:17:2d:6a:83:
4f:6e:e5:a2:82:60:f6:a2:c1:5b:56:11:a9:d9:29:c9:61:bd:
d2:c5:5c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:02 2026 by rpki-client