
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235342e302f32342d3234203d3e203338353030.roa
File: 3131362e36382e3235342e302f32342d3234203d3e203338353030.roa (raw, json)
Hash identifier: 2NJAQRPygnAQrBXL1nzsMyZY3N177qCt+PYLTel3gTc=
Subject key identifier: 0F:D3:6F:7E:BB:07:28:00:26:21:DC:51:60:FC:67:3D:19:3B:AE:C8
Certificate issuer: /CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Certificate serial: 0E04D366D24C753656F74ACB7AD7989E7B0115C7
Authority key identifier: FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235342e302f32342d3234203d3e203338353030.roa
Signing time: Sun 03 May 2026 02:59:57 +0000
ROA not before: Sun 03 May 2026 02:54:57 +0000
ROA not after: Sun 02 May 2027 02:59:57 +0000
asID: 38500
IP address blocks: 116.68.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:04:d3:66:d2:4c:75:36:56:f7:4a:cb:7a:d7:98:9e:7b:01:15:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Validity
Not Before: May 3 02:54:57 2026 GMT
Not After : May 2 02:59:57 2027 GMT
Subject: CN=0FD36F7EBB0728002621DC5160FC673D193BAEC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:07:75:a7:75:58:bc:40:60:87:f8:06:90:42:
c4:9d:c7:1c:5a:7f:67:90:93:e9:a1:a9:bd:31:19:
67:b1:67:f4:98:7a:bf:e8:7e:90:31:58:a4:a6:cd:
64:a9:df:7c:cb:cf:73:d1:b6:9e:6e:0b:a2:2d:94:
51:f1:cc:44:e4:1e:b3:1f:cb:5a:43:18:6e:cb:8d:
64:3d:71:ae:3c:cb:a0:55:05:50:b9:5b:19:db:48:
c5:d2:4b:41:14:b3:ad:1f:be:42:54:6c:19:6f:0a:
a9:da:53:04:15:e7:bf:9d:e2:e0:44:41:fd:b1:2e:
a0:ee:02:eb:75:f4:a6:16:e9:71:00:71:40:76:34:
f0:7b:cf:ea:cf:07:40:b7:d0:61:5a:0f:a3:85:81:
99:6d:0a:4d:f3:b4:a6:fc:7e:db:f1:b8:df:48:20:
dd:db:01:ea:de:d2:f6:55:f0:1c:05:b3:f7:c3:cc:
f9:bc:98:78:ba:06:23:47:6c:fe:c9:c5:c3:e1:43:
a0:31:7b:e9:35:18:3e:a8:ac:ed:ef:97:b5:70:f4:
d1:2b:84:e1:b6:a9:9b:34:76:54:84:5c:6b:4d:84:
dd:bd:b7:87:2a:75:9a:30:75:64:4b:7a:e6:df:42:
fc:a2:3c:c3:f2:dd:b0:d6:32:a1:7f:fd:44:60:a3:
df:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D3:6F:7E:BB:07:28:00:26:21:DC:51:60:FC:67:3D:19:3B:AE:C8
X509v3 Authority Key Identifier:
keyid:FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235342e302f32342d3234203d3e203338353030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.68.254.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:15:0d:94:20:1f:20:cd:a7:11:aa:12:5b:d7:8e:53:cb:0b:
32:94:3a:5c:27:7e:6f:fe:b4:c1:32:6c:19:8f:14:f0:fe:34:
a3:e7:3f:0e:05:76:3f:71:9e:57:15:73:c1:96:8a:8b:ae:df:
2d:05:94:19:b8:32:d6:a4:6c:81:c9:68:66:b9:ab:7f:4c:23:
7a:a6:9f:d3:4c:40:38:b8:ef:92:b5:b6:b9:9c:6c:56:fa:95:
bf:37:92:a5:86:ed:ff:28:55:3c:39:e4:b8:87:6f:ac:78:9f:
4b:e1:44:cc:40:d9:08:30:70:b8:0e:08:ef:b4:7e:8a:5d:7f:
04:68:47:db:87:df:d0:61:fa:39:da:c8:6f:e6:40:b5:ff:72:
0d:ec:41:b7:7d:d5:13:ea:09:a8:7e:a9:45:ac:d6:79:72:12:
b3:6e:4d:3e:b0:86:ad:56:4e:44:ef:46:43:92:88:c5:4e:4b:
c9:6d:b9:5e:1b:9a:82:1f:be:7f:4b:78:a6:e3:8c:6a:aa:70:
d4:8c:1d:11:e8:39:8b:39:da:cf:c6:7c:94:ba:4b:a9:aa:d9:
3d:17:78:51:b6:ec:a7:5e:4d:7a:cb:9f:4c:80:f2:4e:6a:84:
78:17:50:8a:c4:8e:67:ec:e1:85:ac:ae:2e:f2:e6:67:9e:b2:
32:26:81:86
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUDgTTZtJMdTZW90rLeteYnnsBFccwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIwODFDNEI5MDlDREY1NjE4NEQwNDU1QjJBQTFGNTJF
QkZDOTI5MzAeFw0yNjA1MDMwMjU0NTdaFw0yNzA1MDIwMjU5NTdaMDMxMTAvBgNV
BAMTKDBGRDM2RjdFQkIwNzI4MDAyNjIxREM1MTYwRkM2NzNEMTkzQkFFQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSB3WndVi8QGCH+AaQQsSdxxxa
f2eQk+mhqb0xGWexZ/SYer/ofpAxWKSmzWSp33zLz3PRtp5uC6ItlFHxzETkHrMf
y1pDGG7LjWQ9ca48y6BVBVC5WxnbSMXSS0EUs60fvkJUbBlvCqnaUwQV57+d4uBE
Qf2xLqDuAut19KYW6XEAcUB2NPB7z+rPB0C30GFaD6OFgZltCk3ztKb8ftvxuN9I
IN3bAere0vZV8BwFs/fDzPm8mHi6BiNHbP7JxcPhQ6Axe+k1GD6orO3vl7Vw9NEr
hOG2qZs0dlSEXGtNhN29t4cqdZowdWRLeubfQvyiPMPy3bDWMqF//URgo9+dAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUD9NvfrsHKAAmIdxRYPxnPRk7rsgwHwYDVR0j
BBgwFoAU+wgcS5Cc31YYTQRVsqofUuv8kpMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjA0MDY4ZjMtYTc1Yi00NzY0LTllODAtMWZhNTcyOTIwN2ZjLzAvRkIwODFDNEI5
MDlDREY1NjE4NEQwNDU1QjJBQTFGNTJFQkZDOTI5My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GQjA4MUM0QjkwOUNERjU2MTg0RDA0NTVCMkFBMUY1MkVCRkM5
MjkzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2IwNDA2OGYzLWE3NWItNDc2NC05
ZTgwLTFmYTU3MjkyMDdmYy8wLzMxMzEzNjJlMzYzODJlMzIzNTM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM1MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHRE/jANBgkqhkiG
9w0BAQsFAAOCAQEAqhUNlCAfIM2nEaoSW9eOU8sLMpQ6XCd+b/60wTJsGY8U8P40
o+c/DgV2P3GeVxVzwZaKi67fLQWUGbgy1qRsgcloZrmrf0wjeqaf00xAOLjvkrW2
uZxsVvqVvzeSpYbt/yhVPDnkuIdvrHifS+FEzEDZCDBwuA4I77R+il1/BGhH24ff
0GH6OdrIb+ZAtf9yDexBt33VE+oJqH6pRazWeXISs25NPrCGrVZORO9GQ5KIxU5L
yW25Xhuagh++f0t4puOMaqpw1IwdEeg5iznaz8Z8lLpLqarZPRd4Ubbsp15Nesuf
TIDyTmqEeBdQisSOZ+zhhayuLvLmZ56yMiaBhg==
-----END CERTIFICATE-----
Generated at Wed May 13 03:23:40 2026 by rpki-client