
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235312e302f32342d3234203d3e203338353030.roa
File: 3131362e36382e3235312e302f32342d3234203d3e203338353030.roa (raw, json)
Hash identifier: 2TF0RM1n4gKfHsHGmBcuhbHP4uyfAzoLTDRjisZn5Rs=
Subject key identifier: FB:0F:C5:D0:88:48:7B:6F:9F:36:DA:C2:3B:1C:74:26:D1:19:63:46
Certificate issuer: /CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Certificate serial: 2ACB30F7A68C6D11E89A1EB11F7437AE9ABCB0
Authority key identifier: FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235312e302f32342d3234203d3e203338353030.roa
Signing time: Sun 03 May 2026 02:59:54 +0000
ROA not before: Sun 03 May 2026 02:54:54 +0000
ROA not after: Sun 02 May 2027 02:59:54 +0000
asID: 38500
IP address blocks: 116.68.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:cb:30:f7:a6:8c:6d:11:e8:9a:1e:b1:1f:74:37:ae:9a:bc:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Validity
Not Before: May 3 02:54:54 2026 GMT
Not After : May 2 02:59:54 2027 GMT
Subject: CN=FB0FC5D088487B6F9F36DAC23B1C7426D1196346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:32:0b:90:78:67:e9:36:a4:a4:cb:ca:62:9e:
36:dc:17:37:5a:f0:63:a8:e2:03:fa:45:1c:ca:54:
64:37:70:ed:90:e1:76:00:ac:f5:92:31:33:53:35:
49:5e:4b:46:c8:df:f7:b1:61:30:27:2f:5e:bf:a5:
98:46:23:41:16:71:d2:83:0c:75:3e:19:4a:cc:b8:
8c:45:7f:07:6c:a4:86:46:21:c7:87:4c:31:75:5a:
d5:b8:07:73:04:b5:93:bb:57:e1:54:22:6d:87:4c:
31:b5:7d:12:f7:b6:e0:8c:ac:d0:86:2a:67:ee:04:
eb:1e:eb:9d:5c:87:09:6c:2d:84:91:10:76:30:34:
57:a8:ec:3d:39:42:85:42:9f:a2:67:9b:eb:e2:70:
1a:d3:f7:78:52:d8:97:5d:85:1a:82:4d:a9:5d:e7:
1b:54:92:67:75:b0:0f:14:2e:35:74:40:9b:50:01:
a4:16:76:83:74:27:07:96:e6:03:15:5f:78:a8:1d:
b9:50:9f:c2:b1:c8:9a:52:96:01:ef:c4:da:2c:e7:
ea:db:3c:3a:63:9a:9a:c4:04:10:bb:88:56:66:7b:
d7:a6:86:b5:43:88:d4:58:f6:7c:be:88:d0:02:00:
a1:88:a1:44:30:30:7c:1c:ac:df:96:8c:99:32:3d:
7c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0F:C5:D0:88:48:7B:6F:9F:36:DA:C2:3B:1C:74:26:D1:19:63:46
X509v3 Authority Key Identifier:
keyid:FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235312e302f32342d3234203d3e203338353030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.68.251.0/24
Signature Algorithm: sha256WithRSAEncryption
18:0a:18:75:7a:39:68:97:2b:85:67:de:5e:e1:b5:de:af:f6:
b7:98:e2:1b:d8:2e:19:a5:4e:35:51:98:4f:76:1f:70:c6:5c:
34:83:07:1b:8f:b6:39:05:9c:9c:a6:4c:50:fd:b5:28:c9:66:
9e:f7:10:e6:b9:ea:40:91:42:41:76:62:5d:04:dd:cf:1d:77:
aa:26:a7:21:c2:0d:bd:d2:49:ce:c0:fa:c2:9b:05:fb:02:1e:
fe:80:67:43:b9:a5:df:b7:d9:c1:4f:94:56:4f:d4:46:ad:e9:
39:2a:b0:7d:d5:c7:51:87:e7:02:9d:87:a3:fd:fd:05:63:d5:
80:e3:a9:6f:c1:eb:8d:9f:27:7d:6f:6c:2a:5f:82:d0:1a:75:
74:8f:2f:df:c2:aa:d7:ca:02:76:a1:57:12:22:fb:ba:11:04:
2e:0a:e1:b3:aa:d5:e6:50:e9:b7:2e:09:39:9f:00:51:b9:cc:
91:5c:56:be:fa:ca:d4:9e:19:8d:6e:ec:eb:a5:0d:f0:ba:98:
ef:ef:4c:1d:0f:b8:4d:62:88:c2:8d:ff:29:5c:d0:0e:a5:ad:
86:a3:bc:85:28:5a:fa:45:c8:5e:78:70:73:dd:34:cb:a5:8d:
8c:43:d8:40:de:65:01:da:b4:f3:23:b9:34:e2:2a:f2:47:c7:
89:9a:a1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:25 2026 by rpki-client