
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130302e302f32342d3234203d3e203234353235.roa
File: 3131342e3139392e3130302e302f32342d3234203d3e203234353235.roa (raw, json)
Hash identifier: g0+m3rc6dEXfjexbR8lKg+3s4SpjgZDR9pJi5N6IoXk=
Subject key identifier: 62:8B:2B:30:0C:22:31:17:46:D4:ED:E8:C5:E4:86:61:CF:03:91:96
Certificate issuer: /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial: 71A4A6C8FCF6B25A571B218B67A03200E3DBEB50
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130302e302f32342d3234203d3e203234353235.roa
Signing time: Sun 03 May 2026 03:08:45 +0000
ROA not before: Sun 03 May 2026 03:03:45 +0000
ROA not after: Sun 02 May 2027 03:08:45 +0000
asID: 24525
IP address blocks: 114.199.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:a4:a6:c8:fc:f6:b2:5a:57:1b:21:8b:67:a0:32:00:e3:db:eb:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
Validity
Not Before: May 3 03:03:45 2026 GMT
Not After : May 2 03:08:45 2027 GMT
Subject: CN=628B2B300C22311746D4EDE8C5E48661CF039196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:13:65:6e:02:bf:72:e4:27:e2:79:b6:d2:5b:
2a:39:38:7c:1f:cb:c0:dd:ac:9b:71:0a:7d:1d:2c:
a7:21:c8:37:88:5d:5e:3a:d6:80:8c:f3:1c:ab:c5:
c5:f9:91:67:5d:04:43:68:4a:51:72:52:8f:27:06:
57:26:80:b5:91:c7:72:f1:6c:6a:f8:1f:cd:c7:fc:
a9:ca:c6:ec:e3:9d:44:61:29:4f:7b:71:3a:f9:62:
11:13:0e:8e:ff:0d:a8:5c:05:87:c8:42:f4:42:89:
06:60:87:e7:1b:96:99:fc:fd:aa:86:2f:ac:d1:53:
30:55:11:1a:5e:0f:d2:40:21:57:fd:fe:4c:52:7c:
98:61:a3:f9:1b:22:31:12:13:73:a9:d3:f7:d5:5b:
f8:cf:9f:1d:e9:e6:5e:4b:ee:f3:96:93:0b:d0:dc:
bf:28:1b:54:c5:22:c0:96:82:65:c6:c4:b9:67:85:
21:f3:f3:11:77:25:6f:a5:0d:2d:7d:ee:45:17:c1:
4f:9e:66:76:44:14:e3:a2:1c:9c:db:03:83:bd:dd:
88:08:c7:59:97:33:02:48:aa:4d:c7:26:a4:69:a2:
2b:b6:3a:5f:c6:dc:4c:28:5d:e5:e9:b5:df:2d:d6:
4f:82:65:22:31:d7:2b:7d:8e:5c:b8:bf:56:63:aa:
73:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8B:2B:30:0C:22:31:17:46:D4:ED:E8:C5:E4:86:61:CF:03:91:96
X509v3 Authority Key Identifier:
keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130302e302f32342d3234203d3e203234353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.100.0/24
Signature Algorithm: sha256WithRSAEncryption
09:d4:38:ed:95:f5:be:f2:0f:62:8e:d9:3e:65:0f:5c:ef:2f:
be:0f:2f:05:89:77:33:9f:55:ed:7b:e9:f4:65:7a:f2:4f:2e:
2d:fa:58:8f:2a:66:e4:25:d7:ee:14:32:74:62:f6:bb:dc:25:
3f:41:b6:d4:a7:6b:eb:65:95:5a:e7:7a:93:6e:99:9d:85:78:
3b:12:1c:51:01:b1:4f:dc:8b:e6:25:1a:4e:30:d9:52:48:f8:
3e:07:e0:35:20:3b:fe:93:bb:79:4f:e6:89:17:c5:49:89:34:
01:bc:c4:9d:d1:ae:33:81:ab:5a:58:67:d0:2d:9a:96:50:f7:
53:f3:3c:1f:99:e5:3b:af:0f:2d:8a:3c:31:d1:06:a6:07:41:
2c:44:d6:1f:2e:58:8c:b0:a0:13:90:76:ea:3f:9a:01:22:77:
d8:e9:70:8a:92:35:06:09:25:31:ec:42:81:f1:c6:ac:f9:3d:
ff:45:77:07:ff:d5:7f:60:43:0a:f2:c6:ca:92:40:0e:0c:01:
eb:f7:72:e4:db:a4:48:5c:5e:1c:c2:c1:c5:ea:e4:9d:06:3f:
3d:b4:e4:57:43:c5:0b:22:c0:c0:3d:0c:bd:50:8d:30:b8:c3:
dd:bb:01:76:19:ca:6a:be:4a:27:11:f8:2e:d7:ff:ba:4e:8e:
05:fd:c8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:01 2026 by rpki-client