
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3234392e302f32342d3234203d3e203338353030.roa
File: 3131362e36382e3234392e302f32342d3234203d3e203338353030.roa (raw, json)
Hash identifier: YbGEa5+7EgfU8zOa/xFFfP5gXHie0W+N991xWSvjRn4=
Subject key identifier: 99:FE:AA:E3:D1:FC:AA:DA:37:70:3B:4E:65:1A:CD:6F:DC:54:F9:CA
Certificate issuer: /CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Certificate serial: 3B8F238D160741ED9D551E8161062C1741D2A967
Authority key identifier: FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3234392e302f32342d3234203d3e203338353030.roa
Signing time: Sun 03 May 2026 02:59:57 +0000
ROA not before: Sun 03 May 2026 02:54:57 +0000
ROA not after: Sun 02 May 2027 02:59:57 +0000
asID: 38500
IP address blocks: 116.68.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:56:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:8f:23:8d:16:07:41:ed:9d:55:1e:81:61:06:2c:17:41:d2:a9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Validity
Not Before: May 3 02:54:57 2026 GMT
Not After : May 2 02:59:57 2027 GMT
Subject: CN=99FEAAE3D1FCAADA37703B4E651ACD6FDC54F9CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:13:9b:32:4a:68:2d:b6:c9:1b:90:db:16:16:
74:a4:5d:ba:b6:fb:b0:4c:bc:f1:92:be:26:21:11:
06:f8:0a:60:73:10:ca:7d:eb:3b:b3:09:73:e2:00:
ce:1c:3b:65:92:98:53:20:10:83:4c:77:e6:86:ab:
ef:c2:15:39:7f:34:3d:e6:b1:1c:6f:e8:7e:3c:12:
68:4c:59:9d:c3:90:8f:06:53:84:14:8b:db:ca:7e:
ec:f2:6e:b1:cd:a6:f2:5a:00:86:a2:e7:e4:89:9d:
12:cb:e2:75:11:9a:4a:73:49:90:18:c8:34:9d:07:
e2:d2:a3:32:d9:c4:99:d6:2a:34:a8:07:41:ee:7f:
8a:e7:aa:cb:9c:79:a3:64:77:93:a0:a6:73:9d:e0:
1d:54:b3:a6:3c:82:49:de:0e:73:cd:d5:96:47:6e:
0a:ac:60:ed:dd:ac:5b:b2:a1:bf:90:c8:93:09:85:
37:fa:93:49:30:a0:de:62:c9:65:af:13:d3:ad:26:
0a:cb:f0:bf:e6:f3:9d:ae:fb:16:d0:48:ed:31:7f:
f0:02:70:af:fb:80:4b:bc:0e:92:b4:f6:7e:72:ac:
5f:df:e9:46:09:f2:5a:4a:73:e6:63:53:c9:31:e7:
1a:96:6b:6d:4f:21:51:93:1f:21:16:56:c1:bc:c6:
e2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FE:AA:E3:D1:FC:AA:DA:37:70:3B:4E:65:1A:CD:6F:DC:54:F9:CA
X509v3 Authority Key Identifier:
keyid:FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3234392e302f32342d3234203d3e203338353030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.68.249.0/24
Signature Algorithm: sha256WithRSAEncryption
00:be:f5:b4:b2:49:d0:ec:69:09:15:bd:1c:c0:09:d0:c8:1d:
28:09:63:41:95:f1:2f:f1:3b:41:81:7e:e5:e2:5e:73:4b:fb:
1a:b1:a1:fc:3f:c9:bb:2e:c1:d9:d8:2f:86:04:26:9e:ad:b6:
54:29:b8:d7:7f:5c:b0:8d:e9:10:d1:fe:13:b3:e8:2a:01:99:
0c:a3:e1:e4:9c:c6:ae:0e:8d:97:25:f6:32:94:13:ac:8b:37:
88:96:cf:5c:12:02:d1:a5:3e:12:61:66:8e:77:c9:f3:f6:63:
b5:ae:3d:78:33:6d:36:ac:72:a7:bf:f7:07:37:0c:0f:64:29:
2f:75:08:78:8c:5e:dc:55:b8:ad:69:0a:c8:7c:43:f7:1d:9f:
af:e6:60:e4:41:87:8e:4b:e9:3d:36:f8:de:88:36:e3:14:2e:
3b:5d:7a:d6:7e:40:73:96:58:b1:e3:54:11:84:1d:73:4d:ad:
bb:f3:05:c5:f8:e5:a2:b2:24:3d:31:c0:6b:cb:e0:5c:8f:34:
dc:4e:4e:6e:01:6f:6d:1a:42:9f:68:48:cf:4b:61:04:58:6e:
dc:c9:df:f6:36:bb:8c:99:38:e6:46:27:c9:73:11:e8:05:9d:
a3:50:8b:06:13:7d:18:b9:ed:19:51:b2:43:f3:71:42:7c:8e:
2d:9b:bf:33
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUO48jjRYHQe2dVR6BYQYsF0HSqWcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIwODFDNEI5MDlDREY1NjE4NEQwNDU1QjJBQTFGNTJF
QkZDOTI5MzAeFw0yNjA1MDMwMjU0NTdaFw0yNzA1MDIwMjU5NTdaMDMxMTAvBgNV
BAMTKDk5RkVBQUUzRDFGQ0FBREEzNzcwM0I0RTY1MUFDRDZGREM1NEY5Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVE5sySmgttskbkNsWFnSkXbq2
+7BMvPGSviYhEQb4CmBzEMp96zuzCXPiAM4cO2WSmFMgEINMd+aGq+/CFTl/ND3m
sRxv6H48EmhMWZ3DkI8GU4QUi9vKfuzybrHNpvJaAIai5+SJnRLL4nURmkpzSZAY
yDSdB+LSozLZxJnWKjSoB0Huf4rnqsuceaNkd5OgpnOd4B1Us6Y8gkneDnPN1ZZH
bgqsYO3drFuyob+QyJMJhTf6k0kwoN5iyWWvE9OtJgrL8L/m852u+xbQSO0xf/AC
cK/7gEu8DpK09n5yrF/f6UYJ8lpKc+ZjU8kx5xqWa21PIVGTHyEWVsG8xuIDAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUmf6q49H8qto3cDtOZRrNb9xU+cowHwYDVR0j
BBgwFoAU+wgcS5Cc31YYTQRVsqofUuv8kpMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjA0MDY4ZjMtYTc1Yi00NzY0LTllODAtMWZhNTcyOTIwN2ZjLzAvRkIwODFDNEI5
MDlDREY1NjE4NEQwNDU1QjJBQTFGNTJFQkZDOTI5My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GQjA4MUM0QjkwOUNERjU2MTg0RDA0NTVCMkFBMUY1MkVCRkM5
MjkzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2IwNDA2OGYzLWE3NWItNDc2NC05
ZTgwLTFmYTU3MjkyMDdmYy8wLzMxMzEzNjJlMzYzODJlMzIzNDM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM1MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHRE+TANBgkqhkiG
9w0BAQsFAAOCAQEAAL71tLJJ0OxpCRW9HMAJ0MgdKAljQZXxL/E7QYF+5eJec0v7
GrGh/D/Juy7B2dgvhgQmnq22VCm4139csI3pENH+E7PoKgGZDKPh5JzGrg6NlyX2
MpQTrIs3iJbPXBIC0aU+EmFmjnfJ8/Zjta49eDNtNqxyp7/3BzcMD2QpL3UIeIxe
3FW4rWkKyHxD9x2fr+Zg5EGHjkvpPTb43og24xQuO1161n5Ac5ZYseNUEYQdc02t
u/MFxfjlorIkPTHAa8vgXI803E5ObgFvbRpCn2hIz0thBFhu3Mnf9ja7jJk45kYn
yXMR6AWdo1CLBhN9GLntGVGyQ/NxQnyOLZu/Mw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:02:36 2026 by rpki-client