
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130302e302f32322d3232203d3e203234353235.roa
File: 3131342e3139392e3130302e302f32322d3232203d3e203234353235.roa (raw, json)
Hash identifier: E8pVFER7f4BdEXdBRPu4Mk/FkaLmUxt3thRcncwXYLw=
Subject key identifier: EE:EA:4C:30:CD:A9:F8:63:F5:70:CA:83:D4:F6:62:B4:E5:30:25:CE
Certificate issuer: /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial: 5C3621840D01C5768C8CA3195C23A559307A8AAA
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130302e302f32322d3232203d3e203234353235.roa
Signing time: Sun 03 May 2026 03:08:51 +0000
ROA not before: Sun 03 May 2026 03:03:51 +0000
ROA not after: Sun 02 May 2027 03:08:51 +0000
asID: 24525
IP address blocks: 114.199.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:36:21:84:0d:01:c5:76:8c:8c:a3:19:5c:23:a5:59:30:7a:8a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
Validity
Not Before: May 3 03:03:51 2026 GMT
Not After : May 2 03:08:51 2027 GMT
Subject: CN=EEEA4C30CDA9F863F570CA83D4F662B4E53025CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5d:8c:10:22:5d:9e:56:a0:ea:4f:3c:8e:b6:
11:59:9b:51:ea:7d:5a:43:3c:da:9b:5c:f5:5e:26:
ba:32:71:dc:05:75:53:f6:64:78:53:ba:a4:57:65:
04:55:b0:48:d1:3c:ba:c2:39:39:84:80:38:4f:08:
20:39:88:d6:a4:90:3b:00:ce:05:71:46:0f:8c:af:
95:df:80:e7:b4:6c:42:de:01:cc:81:53:ca:02:3c:
f2:bc:df:7d:72:e7:1e:79:d9:a3:81:1a:cc:7d:5a:
ad:56:6a:02:90:e6:39:38:7b:f2:54:09:51:b6:7c:
39:41:8a:2d:d9:f4:55:fb:08:b2:41:7f:d2:4e:d4:
66:d3:9c:ef:66:28:aa:5d:3c:84:1f:8f:c3:02:70:
d9:49:81:e7:d9:44:11:da:02:a8:21:f3:ed:2a:e7:
b7:19:68:79:32:80:ce:25:3a:ce:b6:57:0b:d6:79:
6a:f1:9a:e2:be:1c:b7:88:25:f3:c3:c1:4b:af:87:
b3:7d:7a:6b:3f:0e:3a:b7:03:cb:0f:7d:0b:57:d6:
d4:f1:d1:1a:df:04:22:96:16:97:e8:7b:b1:37:33:
b1:53:03:81:25:8f:3e:fa:bc:0d:85:84:62:5f:99:
8d:e7:88:d2:eb:40:61:d6:fb:52:95:e2:5f:4e:25:
8e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EA:4C:30:CD:A9:F8:63:F5:70:CA:83:D4:F6:62:B4:E5:30:25:CE
X509v3 Authority Key Identifier:
keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130302e302f32322d3232203d3e203234353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.100.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:5b:6b:a1:32:86:10:7a:cd:44:a4:f8:82:fa:db:1d:2f:03:
bf:78:ab:37:35:6b:21:8b:b0:0b:0a:88:bb:dd:9e:6b:28:c0:
72:b3:b3:1f:e5:4a:06:35:9d:bd:6c:47:ae:49:3a:65:eb:cd:
f5:41:67:b3:71:0b:89:51:fb:46:b8:89:b0:78:2e:d4:78:ab:
f9:0f:cb:36:0a:29:33:0a:89:11:30:03:cf:a4:44:8f:97:d1:
d7:12:06:40:5c:a0:f2:53:fc:40:31:18:7c:9a:7d:c1:ba:e4:
05:f4:a0:ad:a5:c6:62:8f:ec:42:9c:70:71:fe:bc:16:d8:6d:
c8:ff:a5:b7:a3:96:ab:9c:9e:1c:a3:2b:9d:69:ca:23:26:15:
d4:bd:de:76:aa:5b:5e:e9:28:c5:da:0d:74:04:d2:3f:61:58:
93:30:47:cb:d4:d1:09:2d:da:1f:dd:43:d4:de:db:b1:a5:d1:
7a:d6:b6:29:b1:10:2a:36:ca:88:5d:88:89:93:17:d0:e4:79:
ca:cd:d1:b6:9c:55:f7:49:ec:fd:e7:2b:5d:1d:9d:d2:db:09:
7e:89:72:2a:08:65:a4:b5:bd:15:3d:62:7f:79:d4:0a:72:18:
d8:cd:b2:51:a6:9a:17:16:77:79:de:12:7a:9a:0d:f6:69:f3:
53:39:70:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:22:47 2026 by rpki-client