
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136382e302f32342d3234203d3e203338373635.roa
File: 3131362e39302e3136382e302f32342d3234203d3e203338373635.roa (raw, json)
Hash identifier: ZOwTWMcyX/WHqiE0+q8Pw3azPazp+jqM7cmya2sou8Q=
Subject key identifier: E4:63:2D:30:21:07:8B:FF:F2:3E:ED:F3:69:3D:16:38:E3:AF:7F:85
Certificate issuer: /CN=67239F5E47D123019D26807163E6542441401507
Certificate serial: 50075FE6B002897943F5815C0B5D304B67634E73
Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136382e302f32342d3234203d3e203338373635.roa
Signing time: Sun 03 May 2026 03:03:52 +0000
ROA not before: Sun 03 May 2026 02:58:52 +0000
ROA not after: Sun 02 May 2027 03:03:52 +0000
asID: 38765
IP address blocks: 116.90.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:07:5f:e6:b0:02:89:79:43:f5:81:5c:0b:5d:30:4b:67:63:4e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67239F5E47D123019D26807163E6542441401507
Validity
Not Before: May 3 02:58:52 2026 GMT
Not After : May 2 03:03:52 2027 GMT
Subject: CN=E4632D3021078BFFF23EEDF3693D1638E3AF7F85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2d:70:c5:5c:a6:f6:5d:8f:2e:be:ff:04:59:
78:b2:77:4e:87:2f:10:ad:3b:36:ef:bb:d3:a8:fa:
c9:e2:8a:20:61:75:2e:e5:40:b4:68:93:82:20:6b:
51:a1:26:1f:5e:61:46:ba:ba:32:42:53:ca:03:25:
71:cd:95:f8:4f:9b:47:d8:3c:e0:6c:e4:04:b5:88:
cc:21:a1:43:0f:b2:67:f9:9d:fa:96:86:57:9d:be:
a7:18:60:ba:3e:84:34:da:42:75:1d:8e:ee:9f:91:
7d:5b:85:25:ac:04:cd:da:58:96:fb:a6:27:0d:b4:
d5:43:b1:f3:78:3f:73:16:27:40:c7:28:87:29:28:
0c:6b:b4:c7:06:d0:7e:88:6f:75:2f:0e:f2:95:d5:
73:70:85:51:14:5e:53:24:a6:58:d4:19:0a:8a:56:
a2:0a:5a:f1:55:56:bd:2d:77:25:73:39:b4:dd:be:
47:30:60:e6:40:37:ea:f1:4e:7c:19:da:17:5f:78:
b0:2a:a5:66:8a:f5:e8:82:96:78:7f:8c:e7:f6:ab:
6e:4d:48:74:d7:e8:b9:be:10:89:bd:90:c0:b1:77:
b1:0d:ce:b3:fd:41:ba:a2:0d:82:01:37:48:5c:0f:
8c:6c:25:33:d4:49:1c:c9:d9:3d:b2:99:78:26:73:
4b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:63:2D:30:21:07:8B:FF:F2:3E:ED:F3:69:3D:16:38:E3:AF:7F:85
X509v3 Authority Key Identifier:
keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136382e302f32342d3234203d3e203338373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.90.168.0/24
Signature Algorithm: sha256WithRSAEncryption
70:88:fa:3e:67:16:e4:91:31:38:cd:da:00:10:0f:07:cb:0e:
4d:36:58:43:76:f2:08:43:41:61:2c:26:c7:f2:ac:f4:c2:20:
a2:13:52:35:ae:eb:5e:c9:72:3b:31:73:0a:01:56:1f:2a:9b:
6a:7e:0b:f6:78:59:38:1d:41:73:90:81:ec:33:df:43:ea:61:
dc:9d:32:00:2b:18:61:df:b8:2d:20:f5:59:1c:0d:d4:87:c2:
2f:fb:d5:68:b6:ca:7d:94:f1:48:9b:91:e5:0d:33:41:eb:27:
77:48:f7:9f:52:19:f8:22:7a:e1:69:47:d1:a9:e6:dc:52:f1:
6a:89:f4:dd:7e:d2:01:51:96:44:2d:ea:ba:f9:3e:82:82:44:
1c:96:66:69:68:dc:87:0f:88:dd:eb:53:98:6d:6e:3b:db:ee:
8e:fe:d3:ab:41:6b:b4:b7:74:7e:fa:4c:96:c2:23:74:d6:1d:
7f:88:3a:b6:a7:64:3d:fa:ab:f4:1e:dc:63:d5:8a:fb:fb:8b:
eb:3a:e5:7a:cf:36:69:03:68:61:b8:57:3f:6b:24:f4:65:a4:
4c:62:76:b7:b3:75:b5:a5:37:b1:96:55:d5:13:94:d4:a7:20:
dd:25:23:99:b0:41:33:61:e4:40:c9:cf:da:39:68:9d:f5:8d:
64:c8:66:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:09:24 2026 by rpki-client