
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3132332e3130382e36342e302f32322d3232203d3e20313333373939.roa
File: 3132332e3130382e36342e302f32322d3232203d3e20313333373939.roa (raw, json)
Hash identifier: eZo0g6KBgifWLzMIaTnanKwKmJFPlu9aLpVibvZp0UY=
Subject key identifier: 74:E3:F4:B1:30:C3:89:33:D8:26:F1:FC:76:37:BB:20:60:AD:2F:67
Certificate issuer: /CN=51F28FDA0EA4620C617F32218CB294E10169884C
Certificate serial: 259148BB4253D5C3569A516B098DF901CC030931
Authority key identifier: 51:F2:8F:DA:0E:A4:62:0C:61:7F:32:21:8C:B2:94:E1:01:69:88:4C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F28FDA0EA4620C617F32218CB294E10169884C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3132332e3130382e36342e302f32322d3232203d3e20313333373939.roa
Signing time: Sun 03 May 2026 03:07:01 +0000
ROA not before: Sun 03 May 2026 03:02:01 +0000
ROA not after: Sun 02 May 2027 03:07:01 +0000
asID: 133799
IP address blocks: 123.108.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/51F28FDA0EA4620C617F32218CB294E10169884C.crl
rsync://rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/51F28FDA0EA4620C617F32218CB294E10169884C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F28FDA0EA4620C617F32218CB294E10169884C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:26:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:91:48:bb:42:53:d5:c3:56:9a:51:6b:09:8d:f9:01:cc:03:09:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51F28FDA0EA4620C617F32218CB294E10169884C
Validity
Not Before: May 3 03:02:01 2026 GMT
Not After : May 2 03:07:01 2027 GMT
Subject: CN=74E3F4B130C38933D826F1FC7637BB2060AD2F67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:17:7a:dc:a6:10:20:2c:15:c1:e0:1b:b6:73:
45:1e:d5:84:eb:31:b7:68:84:76:ef:48:d5:6b:b8:
d2:a6:43:90:a1:bf:9b:61:9b:88:41:09:ca:2b:60:
1f:c8:e8:c7:a6:c0:a9:87:eb:4f:9d:72:07:fb:be:
54:9b:54:c9:ca:27:bf:d9:34:5e:3e:e8:03:3c:46:
20:86:1d:cf:d4:b8:de:f8:3d:5f:e0:3b:43:02:c1:
97:fe:63:2f:f3:01:4e:a8:e7:ca:6e:cf:5c:7d:ae:
89:37:a4:ad:d7:8d:de:a9:5f:76:d4:b9:1d:d4:34:
b8:29:67:f5:d8:09:fb:39:8c:f3:7e:81:e4:50:2c:
7a:f4:6e:2b:f3:13:d9:b1:a1:ff:0e:ae:9e:e1:ae:
18:be:ae:b5:26:b8:4c:a3:5e:65:c7:3e:25:33:97:
9f:b5:fc:dc:9f:ec:36:65:e2:de:f2:9e:fe:a6:6f:
6c:11:39:9f:68:d2:9f:53:cf:1a:d3:04:33:c0:2a:
8e:9b:60:7e:2c:72:6e:a5:b7:b0:c4:e7:d4:62:7e:
c6:a9:62:5a:25:b1:75:72:28:64:72:8e:f4:02:7d:
47:4f:5c:c4:d0:af:3a:68:ea:c5:c9:0f:ec:c2:b8:
42:59:56:95:9f:6b:f8:63:40:bd:fb:80:29:f5:75:
bb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E3:F4:B1:30:C3:89:33:D8:26:F1:FC:76:37:BB:20:60:AD:2F:67
X509v3 Authority Key Identifier:
keyid:51:F2:8F:DA:0E:A4:62:0C:61:7F:32:21:8C:B2:94:E1:01:69:88:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/51F28FDA0EA4620C617F32218CB294E10169884C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F28FDA0EA4620C617F32218CB294E10169884C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/3132332e3130382e36342e302f32322d3232203d3e20313333373939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.108.64.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:13:38:32:1e:d4:07:76:95:10:ed:ba:ef:b7:a0:19:a5:09:
23:b3:d3:31:65:f2:b0:fd:90:e9:79:38:cc:04:94:d1:62:bb:
77:ae:3c:66:76:ad:5c:33:9a:22:73:14:4c:d5:28:32:ee:0b:
ff:c6:34:dc:8d:ea:97:b6:d7:bd:a8:95:1d:71:95:84:99:25:
26:91:97:87:0b:66:68:5b:3f:a9:a2:02:90:30:54:71:e3:42:
c7:48:06:f3:91:58:b4:a8:40:69:fb:f0:7a:3e:d4:03:ff:ce:
6e:78:df:72:af:3e:2c:04:13:af:12:24:e1:84:71:e8:9d:a3:
7c:4c:59:e0:17:02:6f:4e:63:ad:1a:03:17:c1:31:cb:d1:aa:
8d:50:3e:4a:be:19:ed:14:42:a1:ed:ee:58:0a:0b:da:5b:9a:
ce:9a:17:3d:c4:5f:66:e5:47:7f:14:7c:73:3b:9d:13:4a:da:
83:3a:30:dc:05:f7:2f:ce:b9:8f:72:bc:dd:df:d0:75:bb:7c:
c0:b6:f9:c4:c2:62:75:4b:3b:ec:df:84:a7:8f:01:4e:87:e5:
da:c4:e5:87:0c:62:ab:db:30:93:4e:11:46:75:ed:9e:ff:ec:
a0:7d:48:45:e5:96:77:a8:e7:d8:85:e5:c1:b3:03:68:da:09:
89:7e:c8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:23:49 2026 by rpki-client