
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137322e302f32342d3234203d3e203138303539.roa
File: 3131362e39302e3137322e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier: cDfQVDw+VywgRVGmKf8udTykPGo/hlbRrug0IlUzAU8=
Subject key identifier: 61:A9:58:8D:55:B0:2C:EE:FD:0D:BB:83:2D:7A:50:7B:E3:88:EF:DD
Certificate issuer: /CN=67239F5E47D123019D26807163E6542441401507
Certificate serial: 58A1D11EE484BA6DDF39A488E28017F0EB107A5E
Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137322e302f32342d3234203d3e203138303539.roa
Signing time: Sun 03 May 2026 03:03:33 +0000
ROA not before: Sun 03 May 2026 02:58:33 +0000
ROA not after: Sun 02 May 2027 03:03:33 +0000
asID: 18059
IP address blocks: 116.90.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:10:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:a1:d1:1e:e4:84:ba:6d:df:39:a4:88:e2:80:17:f0:eb:10:7a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67239F5E47D123019D26807163E6542441401507
Validity
Not Before: May 3 02:58:33 2026 GMT
Not After : May 2 03:03:33 2027 GMT
Subject: CN=61A9588D55B02CEEFD0DBB832D7A507BE388EFDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e2:b9:1c:7e:85:91:7a:a1:78:70:b0:a5:77:
00:6e:b4:d0:8a:53:bf:46:31:dc:a3:db:c3:b1:dc:
6e:55:0e:ee:53:0f:3a:09:d6:0e:ef:6e:55:ce:3d:
74:36:da:05:89:40:46:da:c3:68:5b:f6:e6:09:58:
05:43:22:f5:41:83:16:ae:f4:90:b1:c9:8b:dc:de:
10:5c:91:81:1c:cc:c1:0d:80:55:97:58:d5:65:88:
67:be:32:19:d6:e5:2a:57:0b:ae:8d:83:91:ef:12:
c2:df:a9:0d:d8:ff:c6:ec:ba:ba:3f:fe:19:d1:bb:
bd:1c:11:5e:b2:6a:2d:c4:29:4f:d0:f6:f8:21:4f:
b8:46:d7:ab:1d:67:28:a3:44:3c:f1:ac:5b:99:5d:
ea:c5:eb:a4:40:38:a9:ce:26:f7:40:f4:59:19:08:
4d:7a:31:fb:1d:78:44:76:70:ba:cb:e2:fe:5f:ff:
21:7c:1c:26:55:bb:c7:ac:24:80:23:f8:7f:45:4b:
18:80:66:37:11:0a:47:0b:53:3c:24:e2:8e:7f:32:
91:0c:50:29:2a:74:7b:3b:9c:58:e9:a0:38:f2:92:
d7:78:d7:7d:2c:79:50:f7:c0:9e:1d:e6:ae:d9:31:
ed:e4:43:3b:09:61:c1:52:8a:30:89:41:cf:f7:66:
f0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A9:58:8D:55:B0:2C:EE:FD:0D:BB:83:2D:7A:50:7B:E3:88:EF:DD
X509v3 Authority Key Identifier:
keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137322e302f32342d3234203d3e203138303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.90.172.0/24
Signature Algorithm: sha256WithRSAEncryption
58:17:52:99:86:1f:78:00:e2:9b:0f:c0:57:8a:b1:51:db:af:
e7:37:95:9a:01:16:b7:5d:18:00:56:97:a4:ba:60:b7:a5:4b:
3d:ea:55:8c:fd:cb:83:a1:58:0d:1e:d7:78:84:e6:77:2c:77:
b0:3c:9e:4d:99:22:e8:21:df:1c:12:15:14:9d:fa:7c:1c:4b:
2a:90:a1:84:32:e7:d4:a6:c9:95:f1:64:5f:30:1c:6e:46:8a:
18:ee:bd:fb:f7:c4:a9:f7:a7:04:63:d2:a8:cf:01:33:56:8c:
74:88:d0:b6:5e:94:eb:18:fa:6b:ba:48:6a:10:65:0d:e8:fe:
79:1f:f2:0b:34:9c:f1:d3:5d:a9:58:04:45:fc:df:14:23:85:
0b:92:9a:35:46:da:34:04:26:3a:28:a8:29:65:f6:8b:ed:4b:
c5:0a:4f:f1:98:c4:c4:17:b1:45:69:2d:17:55:62:a3:09:bb:
c6:31:66:9b:da:18:f1:0a:63:00:fe:b1:6f:84:94:07:68:ef:
7d:27:b7:98:0b:8f:c0:b7:b9:75:20:d5:31:8e:56:61:2c:03:
78:0e:33:81:f2:92:3e:8b:92:3b:87:44:5a:94:1b:e9:35:ee:
bd:ee:bb:ff:15:a9:b7:71:a3:3e:f6:bf:0a:22:67:69:1f:79:
e3:8d:d1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:10:36 2026 by rpki-client