
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3133372e35392e31342e302f32342d3234203d3e203338353030.roa
File: 3133372e35392e31342e302f32342d3234203d3e203338353030.roa (raw, json)
Hash identifier: gwCS1Cn590eohKUcT0lnQkD3IzHp0kv+BWq1n+CZ4g4=
Subject key identifier: 3F:9E:18:12:D9:37:21:DA:C6:E1:F6:2F:0E:2E:8F:DB:24:13:80:34
Certificate issuer: /CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Certificate serial: 722E70A3481A3D01EEFD9720E7A9AF21CE146479
Authority key identifier: FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3133372e35392e31342e302f32342d3234203d3e203338353030.roa
Signing time: Sun 03 May 2026 03:00:02 +0000
ROA not before: Sun 03 May 2026 02:55:02 +0000
ROA not after: Sun 02 May 2027 03:00:02 +0000
asID: 38500
IP address blocks: 137.59.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:2e:70:a3:48:1a:3d:01:ee:fd:97:20:e7:a9:af:21:ce:14:64:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Validity
Not Before: May 3 02:55:02 2026 GMT
Not After : May 2 03:00:02 2027 GMT
Subject: CN=3F9E1812D93721DAC6E1F62F0E2E8FDB24138034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d5:86:be:16:6e:0d:86:14:a4:c6:d2:ca:c4:
b3:e8:f6:a0:c1:31:54:57:99:b4:e3:a9:51:94:78:
9e:c3:97:f6:2a:9d:05:f2:dc:19:21:30:ae:6e:89:
b0:da:e3:8b:b7:38:cd:cb:b1:30:20:8e:b8:98:0c:
c2:53:83:f8:5a:1e:eb:ca:86:ce:a3:9f:64:cb:e9:
71:6e:f4:01:58:74:bc:f3:88:fd:2c:19:2f:80:bd:
13:54:bb:1c:c3:36:2b:eb:1e:53:8e:4c:8b:0b:72:
ce:bd:e6:9c:6a:d4:0a:f5:30:f7:d5:11:43:87:1b:
5f:b4:b7:8a:2f:f9:7f:92:8d:96:0f:7b:b0:a8:99:
a2:62:e1:be:21:e3:b2:57:cd:69:82:9d:6a:96:bd:
5f:43:98:ed:51:d2:28:06:be:93:06:09:47:c0:42:
1b:2f:3a:2a:6f:27:bb:07:0b:a7:a3:78:ee:06:ce:
f0:a3:dc:6f:c1:1d:2c:b9:cb:48:6d:0a:97:f8:e0:
c4:68:c9:2c:20:b2:81:d7:f7:fe:97:8b:02:5c:52:
46:60:e6:42:44:4c:25:f8:d8:55:6c:ae:4e:00:31:
26:a3:00:35:22:60:5a:5d:88:9d:1c:ca:4a:ab:36:
01:26:39:6b:38:b2:e6:41:32:24:3f:39:3e:62:55:
c6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9E:18:12:D9:37:21:DA:C6:E1:F6:2F:0E:2E:8F:DB:24:13:80:34
X509v3 Authority Key Identifier:
keyid:FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3133372e35392e31342e302f32342d3234203d3e203338353030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.59.14.0/24
Signature Algorithm: sha256WithRSAEncryption
73:c3:2e:a5:6c:fa:80:31:7e:f1:85:8d:13:bb:4a:99:ff:6f:
71:50:65:bb:ec:ef:a3:bf:e8:23:cf:a6:0d:1d:72:d4:98:34:
19:31:98:18:f6:9a:53:8f:e2:42:38:1d:cb:2c:25:7b:12:53:
b1:bd:79:3c:3d:a8:b4:78:d8:a1:b2:f5:8c:9d:6b:6a:10:36:
31:b4:fc:63:b0:98:1f:5b:0a:1a:a1:3b:3f:4b:61:43:5a:0f:
40:91:4c:7b:7a:82:29:72:ca:36:3a:04:73:17:f8:42:26:0e:
7b:8c:80:d0:c6:19:2e:b0:f5:4d:a7:72:bc:44:de:6f:cc:78:
c6:94:c5:8f:05:54:16:98:2d:cb:63:28:af:fa:ff:a3:48:67:
bf:02:f5:35:55:2b:a9:05:22:15:c0:a3:8e:d2:1d:85:0e:f6:
90:3e:32:cd:39:12:58:99:46:7d:c4:f6:f0:e8:69:6b:0e:06:
42:25:0c:41:cb:4b:71:7c:1c:bd:49:25:06:33:d5:20:e4:73:
17:a7:87:f5:bf:dc:93:e4:05:fa:41:7a:8a:f3:76:86:b8:c6:
ad:db:cd:5e:cd:d2:82:45:b2:7a:25:25:05:6c:56:f2:33:16:
7f:df:6d:2d:a0:e0:72:69:44:d1:70:c7:17:d0:d2:b3:88:10:
3d:cb:22:40
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUci5wo0gaPQHu/Zcg56mvIc4UZHkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIwODFDNEI5MDlDREY1NjE4NEQwNDU1QjJBQTFGNTJF
QkZDOTI5MzAeFw0yNjA1MDMwMjU1MDJaFw0yNzA1MDIwMzAwMDJaMDMxMTAvBgNV
BAMTKDNGOUUxODEyRDkzNzIxREFDNkUxRjYyRjBFMkU4RkRCMjQxMzgwMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj1Ya+Fm4NhhSkxtLKxLPo9qDB
MVRXmbTjqVGUeJ7Dl/YqnQXy3BkhMK5uibDa44u3OM3LsTAgjriYDMJTg/haHuvK
hs6jn2TL6XFu9AFYdLzziP0sGS+AvRNUuxzDNivrHlOOTIsLcs695pxq1Ar1MPfV
EUOHG1+0t4ov+X+SjZYPe7ComaJi4b4h47JXzWmCnWqWvV9DmO1R0igGvpMGCUfA
QhsvOipvJ7sHC6ejeO4GzvCj3G/BHSy5y0htCpf44MRoySwgsoHX9/6XiwJcUkZg
5kJETCX42FVsrk4AMSajADUiYFpdiJ0cykqrNgEmOWs4suZBMiQ/OT5iVcbrAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUP54YEtk3IdrG4fYvDi6P2yQTgDQwHwYDVR0j
BBgwFoAU+wgcS5Cc31YYTQRVsqofUuv8kpMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjA0MDY4ZjMtYTc1Yi00NzY0LTllODAtMWZhNTcyOTIwN2ZjLzAvRkIwODFDNEI5
MDlDREY1NjE4NEQwNDU1QjJBQTFGNTJFQkZDOTI5My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GQjA4MUM0QjkwOUNERjU2MTg0RDA0NTVCMkFBMUY1MkVCRkM5
MjkzLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2IwNDA2OGYzLWE3NWItNDc2NC05
ZTgwLTFmYTU3MjkyMDdmYy8wLzMxMzMzNzJlMzUzOTJlMzEzNDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMzMzgzNTMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACJOw4wDQYJKoZIhvcN
AQELBQADggEBAHPDLqVs+oAxfvGFjRO7Spn/b3FQZbvs76O/6CPPpg0dctSYNBkx
mBj2mlOP4kI4HcssJXsSU7G9eTw9qLR42KGy9Yyda2oQNjG0/GOwmB9bChqhOz9L
YUNaD0CRTHt6gilyyjY6BHMX+EImDnuMgNDGGS6w9U2ncrxE3m/MeMaUxY8FVBaY
LctjKK/6/6NIZ78C9TVVK6kFIhXAo47SHYUO9pA+Ms05EliZRn3E9vDoaWsOBkIl
DEHLS3F8HL1JJQYz1SDkcxenh/W/3JPkBfpBeorzdoa4xq3bzV7N0oJFsnolJQVs
VvIzFn/fbS2g4HJpRNFwxxfQ0rOIED3LIkA=
-----END CERTIFICATE-----
Generated at Wed May 13 02:34:10 2026 by rpki-client