
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39342e302f32342d3234203d3e203338373733.roa
File: 3131342e3134312e39342e302f32342d3234203d3e203338373733.roa (raw, json)
Hash identifier: KBgcMCCrYhviN35Lsj+SDe+UfidQ9sTv4EpZKCSDnc4=
Subject key identifier: C6:47:87:1E:99:D2:43:1C:B3:7F:7F:7E:BC:F7:19:6A:1B:6D:94:B2
Certificate issuer: /CN=38D72675FCFA53571947E587993417F0A2E84774
Certificate serial: 137EF99EA5D9204EC9CAAA75093924B4FBA2CFEF
Authority key identifier: 38:D7:26:75:FC:FA:53:57:19:47:E5:87:99:34:17:F0:A2:E8:47:74
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38D72675FCFA53571947E587993417F0A2E84774.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39342e302f32342d3234203d3e203338373733.roa
Signing time: Sun 03 May 2026 03:05:56 +0000
ROA not before: Sun 03 May 2026 03:00:56 +0000
ROA not after: Sun 02 May 2027 03:05:56 +0000
asID: 38773
IP address blocks: 114.141.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.crl
rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38D72675FCFA53571947E587993417F0A2E84774.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:7e:f9:9e:a5:d9:20:4e:c9:ca:aa:75:09:39:24:b4:fb:a2:cf:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38D72675FCFA53571947E587993417F0A2E84774
Validity
Not Before: May 3 03:00:56 2026 GMT
Not After : May 2 03:05:56 2027 GMT
Subject: CN=C647871E99D2431CB37F7F7EBCF7196A1B6D94B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:60:5b:09:66:5a:44:b1:d8:a6:35:38:65:36:
5a:97:00:2c:b7:16:e9:92:1b:0b:3e:80:34:53:af:
17:5e:03:1d:8d:27:0b:30:67:0e:57:c7:db:10:d1:
88:02:9c:d5:0d:c4:b2:d3:29:6b:75:46:0e:ac:71:
37:c2:f5:22:cf:ac:1f:d9:82:90:51:c7:e4:bf:42:
f8:44:d0:24:1b:07:eb:e6:98:8b:3c:dd:4b:e4:cf:
3f:7f:7b:e5:16:7b:dd:a6:45:4a:e5:2b:e5:e4:15:
21:5b:42:d1:9a:d2:48:99:25:21:ea:23:45:69:c4:
5b:e5:80:87:8c:f8:ea:fe:38:4b:7c:c6:22:01:14:
67:3c:9e:b3:ab:52:ee:9d:d0:39:2a:c6:d4:85:73:
e2:87:8b:62:36:9a:6d:9a:30:f8:bd:9c:b7:6d:1a:
d7:14:a8:94:a5:3d:e3:5f:c5:4c:14:24:f3:7c:b9:
f9:ab:01:9b:ba:f8:6c:ac:a3:ac:28:36:d8:fb:14:
5b:37:5b:b3:67:d4:a7:cd:17:39:25:d0:8d:27:8a:
09:ab:26:f5:e6:3d:16:36:48:e9:d9:93:c3:63:2a:
a8:f6:44:4a:a4:85:11:b1:15:d2:0e:0f:eb:0b:74:
37:f4:ce:82:07:2f:71:2c:e1:b0:47:2c:71:1c:23:
50:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:47:87:1E:99:D2:43:1C:B3:7F:7F:7E:BC:F7:19:6A:1B:6D:94:B2
X509v3 Authority Key Identifier:
keyid:38:D7:26:75:FC:FA:53:57:19:47:E5:87:99:34:17:F0:A2:E8:47:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/38D72675FCFA53571947E587993417F0A2E84774.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38D72675FCFA53571947E587993417F0A2E84774.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39342e302f32342d3234203d3e203338373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.141.94.0/24
Signature Algorithm: sha256WithRSAEncryption
92:0d:63:f6:e1:7d:d3:5b:5d:6c:b0:1f:0c:d7:96:4e:50:5f:
78:54:50:90:33:ab:89:9a:e2:f9:89:28:35:35:9f:79:73:3e:
e5:c1:7f:8a:75:0c:25:33:b1:53:3b:2e:94:59:40:cc:f4:7a:
2a:10:31:c7:45:71:c7:2d:6d:78:a0:9c:83:e5:d9:0e:20:1a:
c1:35:4f:34:46:e2:64:ea:e1:18:d3:08:4e:ad:c1:44:09:9a:
73:24:f4:98:f6:f6:b5:72:5d:db:64:20:c7:c7:d3:2e:0a:98:
de:ff:74:af:ae:59:41:1e:75:0b:12:92:8f:e3:90:73:4d:19:
86:9e:78:1b:af:e1:29:be:ca:ed:2d:de:b9:f3:fa:90:24:0f:
b1:1c:76:c2:1b:17:94:c7:54:70:b6:af:fe:58:d0:c7:1f:e6:
80:33:4b:de:80:f5:ef:81:7f:0c:09:89:f4:25:b4:ea:83:6d:
b4:88:39:41:a7:ef:a8:12:d6:d9:47:16:bb:d6:8b:81:b8:53:
e0:9b:79:f3:be:38:01:00:c0:8e:8c:2e:41:99:10:57:13:89:
4b:46:c6:26:d4:a3:1c:d0:1e:ba:16:59:64:2c:0e:61:f4:69:
b4:ae:5e:10:a2:a2:ea:d5:93:58:08:a4:13:1e:44:ba:89:6c:
a2:51:8a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:44:13 2026 by rpki-client