
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3132332e3137362e3132312e302f32342d3234203d3e20313336313036.roa
File: 3132332e3137362e3132312e302f32342d3234203d3e20313336313036.roa (raw, json)
Hash identifier: 3oTd3qA7oalGsSJ103eTjg8luLc4IR3P9iD0vCHZrto=
Subject key identifier: 51:9A:8B:C9:00:8E:1B:BC:43:FE:4C:AF:90:D3:EF:D6:54:59:A4:4A
Certificate issuer: /CN=4C83950EB98A8B1F124109BDE09102A2EBC28ACC
Certificate serial: 4BFF0876CAE0EA8EC53508457BC3BF9EEB429DFA
Authority key identifier: 4C:83:95:0E:B9:8A:8B:1F:12:41:09:BD:E0:91:02:A2:EB:C2:8A:CC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3132332e3137362e3132312e302f32342d3234203d3e20313336313036.roa
Signing time: Sun 03 May 2026 03:07:13 +0000
ROA not before: Sun 03 May 2026 03:02:13 +0000
ROA not after: Sun 02 May 2027 03:07:13 +0000
asID: 136106
IP address blocks: 123.176.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.crl
rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:ff:08:76:ca:e0:ea:8e:c5:35:08:45:7b:c3:bf:9e:eb:42:9d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C83950EB98A8B1F124109BDE09102A2EBC28ACC
Validity
Not Before: May 3 03:02:13 2026 GMT
Not After : May 2 03:07:13 2027 GMT
Subject: CN=519A8BC9008E1BBC43FE4CAF90D3EFD65459A44A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a9:64:b2:9f:de:02:4f:04:d4:6a:07:5d:42:
f1:d8:c5:f6:c9:97:28:a6:c0:3e:8d:57:2e:b2:c5:
76:38:93:b2:8d:fa:49:93:2e:6c:c3:7c:44:93:56:
a8:33:6b:4c:cc:8a:a3:a3:bf:42:52:90:36:2a:d8:
42:2d:f0:94:8c:99:b5:34:c2:db:95:8a:14:50:60:
a8:b7:ba:3e:82:22:a6:94:77:3f:d1:9b:fd:bd:79:
69:ca:87:e9:8d:41:85:e8:11:e7:bc:7f:8e:d4:88:
ae:79:5e:4c:4f:5a:3f:c7:36:0b:aa:63:6c:00:0f:
fd:ae:dd:eb:30:a6:55:a6:3d:a4:9c:09:b1:b0:0b:
ac:b0:e2:36:27:fc:80:97:e6:a0:9e:2d:f6:49:3a:
b0:59:ce:92:6e:0c:06:1f:2f:cc:c6:3a:60:cd:18:
72:63:0e:b7:bc:49:24:a3:db:c2:73:e9:59:de:40:
b3:be:c8:b5:4a:94:19:e7:9e:cf:35:27:61:c8:4a:
57:53:73:ed:5a:26:28:26:c2:6c:a0:ca:ba:9a:49:
93:ea:3f:51:18:ac:ba:54:f3:00:5a:12:7e:03:04:
f1:7b:83:d5:87:cd:94:9d:de:9f:91:55:50:11:a7:
22:04:16:e7:5b:16:a0:45:23:29:9a:25:cf:22:7b:
ab:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9A:8B:C9:00:8E:1B:BC:43:FE:4C:AF:90:D3:EF:D6:54:59:A4:4A
X509v3 Authority Key Identifier:
keyid:4C:83:95:0E:B9:8A:8B:1F:12:41:09:BD:E0:91:02:A2:EB:C2:8A:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3132332e3137362e3132312e302f32342d3234203d3e20313336313036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.176.121.0/24
Signature Algorithm: sha256WithRSAEncryption
18:50:14:2f:fc:ad:81:74:f5:31:b0:52:b1:31:88:a9:87:28:
39:0b:1a:da:22:36:bf:23:12:f4:ae:90:e2:6b:96:1e:0d:c5:
4b:b7:c6:8c:1c:ea:fb:0a:2e:31:ee:9e:11:d9:cb:08:d9:8e:
b0:de:3c:f3:71:f0:78:c9:4f:7d:f6:52:b5:f7:b3:2a:a1:2d:
a6:43:25:a1:39:0a:06:54:b4:14:b0:7e:e7:70:94:8d:23:19:
32:ed:a4:e8:c2:24:63:68:e5:3e:85:24:85:b9:35:48:52:9c:
10:3f:82:ed:a1:12:74:87:42:56:2d:08:29:dd:c2:64:8e:46:
3b:b5:18:f7:3d:9e:11:71:d0:8a:43:3c:dd:ce:ae:89:69:26:
42:7c:7a:f2:5c:28:76:bb:1d:0b:ec:95:f0:97:dd:df:54:c7:
c9:f8:dc:04:90:3b:5e:b9:fb:29:dc:d2:06:a2:24:98:b9:af:
60:7e:00:42:6b:0d:f6:9b:74:a5:5d:c2:48:2b:41:4d:2d:33:
eb:be:6a:ca:8f:f7:44:b3:04:d3:7f:a0:9b:a8:8d:a6:45:32:
81:9d:0c:32:03:03:3b:c4:91:29:58:a1:59:f0:8e:44:5e:3f:
d1:1d:52:9e:6b:dd:85:3b:65:76:b9:51:e8:69:87:73:86:5a:
34:83:b1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:37 2026 by rpki-client