
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/31342e3130322e3135322e302f32322d3234203d3e203535363533.roa
File: 31342e3130322e3135322e302f32322d3234203d3e203535363533.roa (raw, json)
Hash identifier: HPeBWQRE7Nzk6K93OWZYdv8ZiGkz5Xm/tDmbLAYTX/8=
Subject key identifier: 36:AB:36:F6:69:D1:C3:14:A8:5A:38:D8:EC:A1:96:38:E9:0A:A0:EF
Certificate issuer: /CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
Certificate serial: 0888EFFEC6C0940A00F20F5B6E574409990C1D94
Authority key identifier: 0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/31342e3130322e3135322e302f32322d3234203d3e203535363533.roa
Signing time: Sun 03 May 2026 03:06:25 +0000
ROA not before: Sun 03 May 2026 03:01:25 +0000
ROA not after: Sun 02 May 2027 03:06:25 +0000
asID: 55653
IP address blocks: 14.102.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl
rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:88:ef:fe:c6:c0:94:0a:00:f2:0f:5b:6e:57:44:09:99:0c:1d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
Validity
Not Before: May 3 03:01:25 2026 GMT
Not After : May 2 03:06:25 2027 GMT
Subject: CN=36AB36F669D1C314A85A38D8ECA19638E90AA0EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c6:f0:30:b5:a2:bd:90:df:f3:05:a6:6b:da:
8e:04:b0:12:46:aa:32:09:f1:b7:23:c4:a1:ef:29:
a9:d0:2b:4a:35:92:50:80:55:01:cc:c8:12:88:3a:
81:8f:94:ef:84:65:9f:f1:11:15:89:d8:14:a1:24:
6d:30:92:e3:aa:28:d7:9b:38:d2:c6:54:ab:f8:2a:
a2:a9:30:e3:82:38:8d:3c:dd:2c:44:71:68:76:ff:
6b:92:78:0f:26:94:00:e4:4c:b0:bd:ca:7d:1e:96:
21:df:2b:37:8e:a4:b2:8c:11:ca:72:12:2a:f0:30:
5e:f4:22:b2:4b:31:12:ac:99:0b:42:3a:c9:da:c6:
b6:cc:e9:bb:63:81:37:a7:ad:8f:25:d0:39:3e:fc:
67:92:87:d2:39:4b:6c:31:08:ac:6e:2b:63:79:68:
4c:1e:dd:2b:5c:36:41:0f:d8:74:12:f2:b2:c2:ed:
f5:8c:af:d3:aa:68:f7:d0:de:ab:da:fe:9a:a9:ed:
b5:5b:86:5b:1e:1c:d6:46:18:03:28:a5:a8:ff:08:
7b:5c:af:9c:a9:59:af:13:ec:ae:18:23:a8:21:46:
02:d7:45:89:26:3e:d5:20:ea:e5:e8:5b:ab:67:4c:
9b:9c:dc:62:09:0a:22:c8:ea:73:2a:a4:ce:97:59:
a6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AB:36:F6:69:D1:C3:14:A8:5A:38:D8:EC:A1:96:38:E9:0A:A0:EF
X509v3 Authority Key Identifier:
keyid:0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/31342e3130322e3135322e302f32322d3234203d3e203535363533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.152.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:cf:ab:b9:b6:9d:29:77:13:e0:cf:fc:b8:42:44:d0:2f:01:
51:d0:72:fc:5c:6c:2b:ed:63:6d:1c:03:33:90:48:dd:09:da:
87:6f:56:70:7c:4a:fc:ff:f7:8a:65:b1:20:35:04:ee:36:64:
df:8c:68:0e:4a:ab:e5:d9:19:4b:32:09:ca:29:a2:a3:14:68:
29:52:8f:9e:c8:94:fa:a2:5e:54:9c:d6:e9:ea:5d:c9:ea:05:
de:ec:cf:e7:34:2f:65:7d:fa:6b:d5:09:2a:01:6d:f8:63:30:
83:03:d9:67:b6:15:1c:8f:c2:eb:49:33:85:d0:e7:ae:e3:00:
ed:90:b6:67:1c:99:bf:fb:32:ee:bf:ae:c4:b9:74:89:57:75:
28:dd:33:16:35:db:a1:49:9d:7e:11:40:b3:ac:ed:5f:17:eb:
af:c1:a7:dd:68:aa:7f:c1:94:9a:82:94:fa:be:0a:34:76:07:
b4:de:82:09:28:e0:eb:9c:d2:5d:05:93:f9:53:fa:fb:27:42:
b9:d5:2e:ab:75:60:90:3c:db:5c:eb:dd:65:be:8c:8e:bd:bc:
6c:be:c8:20:ee:c4:c7:0a:51:0c:a8:01:67:2a:ab:01:da:20:
0b:f6:73:e2:65:7d:f3:8e:4c:c6:b4:04:b5:d0:a9:23:16:4b:
cc:c1:8f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:43:50 2026 by rpki-client