
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235332e302f32342d3234203d3e203338353030.roa
File: 3131362e36382e3235332e302f32342d3234203d3e203338353030.roa (raw, json)
Hash identifier: N+KdCVfQTQA8TU+ipF9ECTnCaf4HQUud3ef9cjeZ+IY=
Subject key identifier: D7:68:E8:E3:37:A8:D6:99:4C:6B:28:DD:5D:BB:DC:59:85:29:E1:E5
Certificate issuer: /CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Certificate serial: 6C2B2CB2FEAF1D7F74E3F1393E0DF177C6E515A9
Authority key identifier: FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235332e302f32342d3234203d3e203338353030.roa
Signing time: Sun 03 May 2026 03:00:01 +0000
ROA not before: Sun 03 May 2026 02:55:01 +0000
ROA not after: Sun 02 May 2027 03:00:01 +0000
asID: 38500
IP address blocks: 116.68.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:56:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:2b:2c:b2:fe:af:1d:7f:74:e3:f1:39:3e:0d:f1:77:c6:e5:15:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Validity
Not Before: May 3 02:55:01 2026 GMT
Not After : May 2 03:00:01 2027 GMT
Subject: CN=D768E8E337A8D6994C6B28DD5DBBDC598529E1E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:26:d1:27:0f:1b:dd:a0:99:f1:6b:2b:5e:73:
e3:2a:7d:c3:71:28:f3:f6:bf:7e:27:a4:6a:1f:5c:
18:d0:f5:13:28:76:13:44:46:3a:f3:71:74:0b:da:
3b:68:07:ac:6f:ec:8f:96:4e:bc:d7:b7:a7:33:44:
2d:db:86:0e:9f:2b:3c:48:1b:3b:f2:bf:c8:ee:a5:
9e:89:fa:66:20:b9:8f:8f:52:65:27:83:f5:b6:41:
62:b4:73:12:41:59:c1:be:0d:ff:63:05:89:d3:d5:
99:1c:82:b6:9d:0d:0e:7c:3f:b0:06:06:a0:69:62:
d0:b6:2e:21:aa:dd:a8:44:ed:5f:a8:a7:ee:21:18:
cc:61:59:11:fd:a1:99:70:58:8f:d1:e2:4a:fe:b3:
c1:10:c0:04:f6:be:82:fc:62:e2:29:7e:de:b0:af:
51:66:ed:d6:15:f0:19:01:b5:7e:25:4d:d0:09:fd:
f6:2d:13:ce:4a:2a:06:10:af:47:d9:83:4a:c9:c5:
84:00:09:1b:ab:f5:5d:70:88:73:4e:6e:61:b2:79:
71:92:b5:79:87:c0:0d:07:68:17:91:98:87:36:ae:
84:0b:ed:18:9c:0f:ed:2e:b9:fa:9e:26:2d:14:ba:
52:00:e9:99:20:c2:4a:26:a7:9e:dc:5f:e2:71:df:
6c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:68:E8:E3:37:A8:D6:99:4C:6B:28:DD:5D:BB:DC:59:85:29:E1:E5
X509v3 Authority Key Identifier:
keyid:FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235332e302f32342d3234203d3e203338353030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.68.253.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:41:d0:3f:34:b3:8c:0f:d4:a1:b7:7f:40:78:e1:7d:32:1a:
96:5b:01:cd:64:06:5f:76:56:16:c0:a3:88:3e:e9:5b:bb:9e:
8d:55:c5:68:1d:bc:85:f2:68:77:94:79:c5:51:0d:d7:97:be:
ed:05:0d:bd:58:2d:33:76:e1:33:80:ad:48:e2:1d:23:c9:56:
02:8b:bd:85:78:b8:3a:9a:e6:a4:aa:1b:39:fa:2a:b6:af:52:
74:ae:cb:e2:5f:88:5d:03:95:36:56:bb:9a:96:71:86:1e:58:
9a:4e:6b:45:7c:6f:7d:cb:e1:d6:1f:1c:89:b9:ba:23:08:28:
11:56:e6:c8:4e:9d:5c:71:1a:71:65:5b:85:62:93:75:15:37:
d4:2b:07:21:b6:47:0c:41:26:af:ec:4c:6f:81:7b:36:d7:67:
f8:16:33:7c:62:a2:68:ed:28:9e:2f:70:d2:85:cc:d3:e9:03:
17:f3:8a:c8:1a:15:77:5c:e7:b6:50:6e:8e:ce:6a:58:24:7a:
73:92:f9:35:93:91:45:59:ed:74:d9:93:6a:46:8a:eb:f8:3f:
0d:29:60:cf:36:16:7e:f2:e9:ca:0e:af:b5:18:3c:8f:67:e9:
a5:bb:19:bd:1c:d4:b1:17:bd:a0:0c:d1:5b:90:d4:d0:18:b6:
1b:f2:be:72
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUbCsssv6vHX904/E5Pg3xd8blFakwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIwODFDNEI5MDlDREY1NjE4NEQwNDU1QjJBQTFGNTJF
QkZDOTI5MzAeFw0yNjA1MDMwMjU1MDFaFw0yNzA1MDIwMzAwMDFaMDMxMTAvBgNV
BAMTKEQ3NjhFOEUzMzdBOEQ2OTk0QzZCMjhERDVEQkJEQzU5ODUyOUUxRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtJtEnDxvdoJnxaytec+MqfcNx
KPP2v34npGofXBjQ9RModhNERjrzcXQL2jtoB6xv7I+WTrzXt6czRC3bhg6fKzxI
Gzvyv8jupZ6J+mYguY+PUmUng/W2QWK0cxJBWcG+Df9jBYnT1ZkcgradDQ58P7AG
BqBpYtC2LiGq3ahE7V+op+4hGMxhWRH9oZlwWI/R4kr+s8EQwAT2voL8YuIpft6w
r1Fm7dYV8BkBtX4lTdAJ/fYtE85KKgYQr0fZg0rJxYQACRur9V1wiHNObmGyeXGS
tXmHwA0HaBeRmIc2roQL7RicD+0uufqeJi0UulIA6Zkgwkomp57cX+Jx32yhAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU12jo4zeo1plMayjdXbvcWYUp4eUwHwYDVR0j
BBgwFoAU+wgcS5Cc31YYTQRVsqofUuv8kpMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjA0MDY4ZjMtYTc1Yi00NzY0LTllODAtMWZhNTcyOTIwN2ZjLzAvRkIwODFDNEI5
MDlDREY1NjE4NEQwNDU1QjJBQTFGNTJFQkZDOTI5My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GQjA4MUM0QjkwOUNERjU2MTg0RDA0NTVCMkFBMUY1MkVCRkM5
MjkzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2IwNDA2OGYzLWE3NWItNDc2NC05
ZTgwLTFmYTU3MjkyMDdmYy8wLzMxMzEzNjJlMzYzODJlMzIzNTMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM1MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHRE/TANBgkqhkiG
9w0BAQsFAAOCAQEAS0HQPzSzjA/Uobd/QHjhfTIallsBzWQGX3ZWFsCjiD7pW7ue
jVXFaB28hfJod5R5xVEN15e+7QUNvVgtM3bhM4CtSOIdI8lWAou9hXi4OprmpKob
Ofoqtq9SdK7L4l+IXQOVNla7mpZxhh5Ymk5rRXxvfcvh1h8cibm6IwgoEVbmyE6d
XHEacWVbhWKTdRU31CsHIbZHDEEmr+xMb4F7Ntdn+BYzfGKiaO0oni9w0oXM0+kD
F/OKyBoVd1zntlBujs5qWCR6c5L5NZORRVntdNmTakaK6/g/DSlgzzYWfvLpyg6v
tRg8j2fppbsZvRzUsRe9oAzRW5DU0Bi2G/K+cg==
-----END CERTIFICATE-----
Generated at Wed May 13 03:56:30 2026 by rpki-client