
$ rpki-client -vvf rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3132332e3137362e3132342e302f32322d3234203d3e20313336313036.roa
File: 3132332e3137362e3132342e302f32322d3234203d3e20313336313036.roa (raw, json)
Hash identifier: L0MFIY3SqIZyxWL0GLOuM9CG7lSHx8DFxNDzapVGoYg=
Subject key identifier: 2F:D3:D6:E0:CC:2D:60:0D:1F:9B:CD:0D:72:48:56:5E:21:0D:37:AF
Certificate issuer: /CN=4C83950EB98A8B1F124109BDE09102A2EBC28ACC
Certificate serial: 7440779F7C4D4386594CF683E7A62AA234AEA7D8
Authority key identifier: 4C:83:95:0E:B9:8A:8B:1F:12:41:09:BD:E0:91:02:A2:EB:C2:8A:CC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3132332e3137362e3132342e302f32322d3234203d3e20313336313036.roa
Signing time: Sun 03 May 2026 03:07:12 +0000
ROA not before: Sun 03 May 2026 03:02:12 +0000
ROA not after: Sun 02 May 2027 03:07:12 +0000
asID: 136106
IP address blocks: 123.176.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.crl
rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:40:77:9f:7c:4d:43:86:59:4c:f6:83:e7:a6:2a:a2:34:ae:a7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C83950EB98A8B1F124109BDE09102A2EBC28ACC
Validity
Not Before: May 3 03:02:12 2026 GMT
Not After : May 2 03:07:12 2027 GMT
Subject: CN=2FD3D6E0CC2D600D1F9BCD0D7248565E210D37AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c0:b5:9a:e7:69:31:e7:38:84:30:70:b6:c1:
3e:21:b1:e4:93:d2:53:be:6b:44:6b:cf:92:7d:8e:
98:12:dd:60:f0:16:5a:49:31:08:5c:a3:dc:ee:11:
c5:cc:d9:34:f4:0b:9e:f1:6b:22:22:8c:1b:25:33:
af:1c:e1:88:f8:e0:61:5c:93:20:c1:d1:c2:89:71:
d8:f1:f1:c1:1d:e5:be:27:07:5c:13:03:33:d3:1d:
5a:96:f4:f4:e8:13:55:ce:ca:d0:a5:15:d1:ab:fd:
90:98:1d:da:cc:54:23:29:76:a4:ad:ef:3b:84:21:
48:12:5c:8e:54:e0:e6:dc:a3:9e:ed:79:a8:c3:0d:
49:0b:19:91:c4:71:f0:ec:8c:1c:9c:71:b8:49:18:
3b:73:5f:21:79:4a:b0:d6:09:56:96:d6:e8:07:5c:
cf:d1:f7:c3:dc:09:51:45:ae:f1:0c:6f:2a:33:bf:
44:c7:2c:b1:06:d5:dc:6a:5a:56:44:df:48:27:55:
d3:5e:11:05:5a:46:01:56:de:7e:88:5d:d4:df:87:
17:e9:e5:71:87:79:cb:25:80:91:c8:d7:5c:c6:71:
c4:6e:f6:24:af:9f:19:84:8c:ce:92:24:c6:5b:93:
5b:20:d0:a6:c6:9e:1f:f3:9d:b0:43:7d:8b:2f:ac:
69:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D3:D6:E0:CC:2D:60:0D:1F:9B:CD:0D:72:48:56:5E:21:0D:37:AF
X509v3 Authority Key Identifier:
keyid:4C:83:95:0E:B9:8A:8B:1F:12:41:09:BD:E0:91:02:A2:EB:C2:8A:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C83950EB98A8B1F124109BDE09102A2EBC28ACC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3132332e3137362e3132342e302f32322d3234203d3e20313336313036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.176.124.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:de:e9:cc:67:16:9a:41:b0:02:8f:6e:89:68:a7:bf:67:86:
5e:36:37:4b:04:3a:eb:1e:df:2c:8c:19:f3:0a:71:8d:c4:8e:
ce:ca:c8:87:08:49:12:05:22:fc:24:24:9c:3e:d1:5a:1b:9a:
a5:8e:99:7e:d2:94:2c:d4:06:3c:df:88:e7:f3:3a:b4:9d:83:
68:58:23:86:96:83:6b:84:0e:a4:af:23:6f:12:cc:90:5d:51:
d5:13:32:c0:e6:df:61:52:38:e4:c6:4e:c2:78:72:00:81:2e:
4a:fe:11:ad:34:ea:94:08:f6:5e:2e:72:cf:ad:23:96:dc:9e:
c0:99:95:bb:9c:21:00:99:5a:5e:66:2b:6a:62:43:16:81:86:
95:16:80:9f:de:bc:cc:2e:79:9c:e8:cc:70:5a:90:39:c1:f3:
86:e1:25:3d:a5:69:48:0a:b2:cb:52:b3:03:df:89:79:d3:8e:
1f:5a:eb:b5:11:c2:58:03:d9:a7:f8:02:9b:b3:41:19:46:a4:
4c:b3:eb:fd:2e:86:55:d0:8b:32:d6:c2:20:4d:47:e5:17:9d:
c5:b4:ad:78:91:71:69:6d:f5:6f:3e:d9:c5:6a:33:ef:7b:20:
e3:aa:b2:01:82:f2:27:5e:73:40:b1:a5:28:2d:7b:17:5a:20:
d5:ac:a7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:15:57 2026 by rpki-client