
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39332e302f32342d3234203d3e203338373733.roa
File: 3131342e3134312e39332e302f32342d3234203d3e203338373733.roa (raw, json)
Hash identifier: So6HCFRYfBIDo3Yy4ADeQ9cjX7P8uCC8BIv2/s6u/0g=
Subject key identifier: 8E:16:06:0D:FA:86:8D:B0:53:3B:79:FE:87:45:4D:C4:C8:5C:06:2D
Certificate issuer: /CN=38D72675FCFA53571947E587993417F0A2E84774
Certificate serial: 151B0AB59F5FF6A0EADCEE744376AC1B090F55F7
Authority key identifier: 38:D7:26:75:FC:FA:53:57:19:47:E5:87:99:34:17:F0:A2:E8:47:74
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38D72675FCFA53571947E587993417F0A2E84774.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39332e302f32342d3234203d3e203338373733.roa
Signing time: Sun 03 May 2026 03:05:57 +0000
ROA not before: Sun 03 May 2026 03:00:57 +0000
ROA not after: Sun 02 May 2027 03:05:57 +0000
asID: 38773
IP address blocks: 114.141.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.crl
rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38D72675FCFA53571947E587993417F0A2E84774.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:1b:0a:b5:9f:5f:f6:a0:ea:dc:ee:74:43:76:ac:1b:09:0f:55:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38D72675FCFA53571947E587993417F0A2E84774
Validity
Not Before: May 3 03:00:57 2026 GMT
Not After : May 2 03:05:57 2027 GMT
Subject: CN=8E16060DFA868DB0533B79FE87454DC4C85C062D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f9:a6:4c:60:dc:9f:fc:ea:70:29:2e:4f:9d:
68:e3:7a:8b:97:26:29:b6:a2:38:c2:b1:6d:e5:35:
12:8c:68:65:64:0d:0a:ae:8f:10:7e:c9:9b:84:3a:
0f:02:2c:39:b1:2a:3e:92:69:0f:61:fa:a5:70:be:
41:5a:59:51:00:2b:93:1c:38:91:48:e0:a8:bf:00:
9e:42:90:8b:2f:f1:76:49:21:79:66:93:1f:87:96:
d3:2a:89:2d:5c:a2:e6:a4:6a:7e:5d:9f:fd:2d:53:
85:2c:12:24:2f:66:9e:83:23:3d:fa:94:14:f9:ff:
64:7f:d2:45:f1:c6:db:2c:85:8b:a8:c9:d7:ce:19:
4d:51:e3:b1:d2:08:0b:7a:84:a0:fb:26:55:45:2e:
51:78:35:97:d5:42:1b:49:45:fe:f0:dd:31:5c:d4:
95:84:bb:3a:57:4d:a5:31:cf:66:82:2f:a5:53:2b:
86:11:53:8f:98:8f:12:c2:34:d3:dc:e6:fc:71:29:
06:14:ee:bd:e4:4f:38:30:4e:c1:79:84:6b:da:e0:
c0:fd:5e:44:b3:fa:6f:e2:69:55:1e:24:44:c1:76:
7e:f7:96:26:56:11:0f:80:b9:83:46:f7:a1:e4:07:
7b:05:44:f8:a4:b2:d3:08:e4:fb:d9:3b:fa:51:ff:
ed:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:16:06:0D:FA:86:8D:B0:53:3B:79:FE:87:45:4D:C4:C8:5C:06:2D
X509v3 Authority Key Identifier:
keyid:38:D7:26:75:FC:FA:53:57:19:47:E5:87:99:34:17:F0:A2:E8:47:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38D72675FCFA53571947E587993417F0A2E84774.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39332e302f32342d3234203d3e203338373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.141.93.0/24
Signature Algorithm: sha256WithRSAEncryption
40:cc:89:46:e8:06:3a:70:e1:0c:cc:68:70:83:f6:4b:54:99:
56:3d:c4:7c:bd:98:b5:f1:e3:e2:14:96:65:db:43:2c:a2:bf:
91:da:1a:58:ad:7d:63:2e:2c:c6:7a:30:81:05:d1:9f:6f:06:
c6:ea:c7:fd:a2:64:c3:98:e5:90:88:72:e6:53:43:32:90:ac:
2e:27:1b:59:96:69:e0:83:19:2b:1e:e9:89:b6:0a:64:44:4f:
ed:11:48:bf:f9:ec:3d:36:03:ba:90:b1:c3:56:47:16:15:73:
d6:4c:68:8d:4f:59:44:84:2b:bc:06:87:17:6d:b1:9e:21:38:
22:c4:f1:0c:23:aa:ff:0f:97:55:97:04:ab:43:8e:2b:8b:de:
15:9e:bc:18:63:f9:1e:16:31:e0:af:53:4a:30:40:86:5b:ba:
81:9e:e2:4a:8b:14:be:e3:ff:84:88:d8:9a:1a:a2:64:30:6b:
70:26:75:b9:96:1b:f3:6f:05:64:a5:84:ba:f0:49:87:84:f5:
49:67:37:4c:88:2e:a1:b3:f4:e0:ce:75:89:9a:ce:c8:bd:f2:
3c:39:a9:47:c5:6c:28:cb:e3:48:9e:83:f3:fa:c9:e6:1a:97:
9e:27:9b:38:a7:ea:68:36:74:87:d9:2c:d4:69:c5:5c:b3:c8:
f1:b8:95:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:43:55 2026 by rpki-client