
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130312e302f32342d3234203d3e203234353235.roa
File: 3131342e3139392e3130312e302f32342d3234203d3e203234353235.roa (raw, json)
Hash identifier: tLpuYVfyn9HFGGj4E00RgAw1halAD214fY9gpsYky1U=
Subject key identifier: 86:9B:F5:84:D4:E4:40:5D:4B:5F:A3:34:74:2D:5A:C2:B1:3C:A0:9E
Certificate issuer: /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial: 30041EE2C7A740D32BE82EAC08A74BDFE1D94389
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130312e302f32342d3234203d3e203234353235.roa
Signing time: Sun 03 May 2026 03:08:40 +0000
ROA not before: Sun 03 May 2026 03:03:40 +0000
ROA not after: Sun 02 May 2027 03:08:40 +0000
asID: 24525
IP address blocks: 114.199.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:04:1e:e2:c7:a7:40:d3:2b:e8:2e:ac:08:a7:4b:df:e1:d9:43:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
Validity
Not Before: May 3 03:03:40 2026 GMT
Not After : May 2 03:08:40 2027 GMT
Subject: CN=869BF584D4E4405D4B5FA334742D5AC2B13CA09E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:60:64:bb:61:72:a5:c8:7d:53:e1:4b:e2:82:
5e:9d:be:e7:f7:3d:c7:56:71:b8:b4:df:cb:d1:17:
95:fd:24:33:c9:5b:43:43:e5:e2:86:7e:49:9c:e4:
92:5f:1f:c8:b8:29:a2:10:f9:5a:d5:4a:98:ab:fc:
75:db:50:27:11:c0:9c:e1:17:41:34:b5:50:f3:0f:
60:0a:db:4a:df:e0:5d:e3:27:4a:16:b8:bd:72:22:
0a:3d:91:57:c0:53:4b:4b:73:c4:57:d3:45:ce:67:
ac:a9:af:ee:5c:75:1d:06:67:ec:42:2c:cc:95:36:
a6:99:80:0d:45:0e:77:ce:0b:72:47:a9:d0:b6:a5:
ba:87:60:2a:c2:db:8d:c3:00:7f:b4:79:ba:69:06:
ab:b1:2d:38:a0:b7:59:f2:b6:ad:40:d7:54:e6:5e:
5c:75:95:59:51:48:60:cc:ea:b2:ff:b6:d4:b1:88:
e3:c5:52:02:d8:b9:7f:ae:bc:9d:81:d5:b9:2c:82:
56:db:cf:d5:47:bc:32:d7:5c:6a:bd:96:98:50:d8:
33:5a:88:32:a4:e0:90:20:b9:bd:d6:49:27:8b:e5:
b9:2d:e9:b6:e8:33:22:fc:77:74:4d:21:47:36:02:
bc:95:87:ff:56:52:18:7d:27:07:85:c8:84:56:c4:
77:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9B:F5:84:D4:E4:40:5D:4B:5F:A3:34:74:2D:5A:C2:B1:3C:A0:9E
X509v3 Authority Key Identifier:
keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130312e302f32342d3234203d3e203234353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.101.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:72:c7:5f:75:91:ab:27:04:a6:d9:32:30:22:60:eb:b4:ac:
4e:83:38:8b:cf:e9:b7:da:29:e0:c6:7e:d5:54:86:87:1e:41:
59:c9:3f:a7:fb:82:76:7b:d4:b5:84:f1:cc:95:41:96:a2:fe:
9a:fe:90:b6:90:57:9d:48:82:82:79:d0:97:6b:eb:60:92:6a:
e2:22:33:98:d6:ba:44:c6:b1:e6:5e:ef:f0:8d:e5:4b:84:33:
66:72:c4:55:b9:f5:21:39:a0:ce:cd:2f:d0:95:d0:81:11:f6:
a3:88:78:f8:c9:b7:a5:e9:e3:12:c2:70:57:ac:d4:bf:43:0c:
89:a5:45:d0:ff:aa:e3:42:d3:85:a5:aa:a7:f6:0e:43:7d:42:
eb:55:d3:1e:ea:e8:1e:bc:78:8e:02:53:88:21:f1:90:9b:65:
85:86:34:40:7a:5e:f3:15:a5:2d:30:d2:a2:92:da:0a:d5:9e:
f4:2d:e0:48:31:06:2a:8a:d7:3e:c7:39:be:ca:ef:2e:70:28:
92:3d:28:bb:76:df:a7:a7:38:7b:e5:86:46:c0:27:04:65:09:
f2:fc:ec:31:7b:31:ba:93:ba:5f:1c:90:b2:85:4e:3a:0e:bd:
95:66:2b:2a:d0:4a:72:30:ef:6e:2a:7a:60:e3:db:4b:f4:df:
60:ec:85:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:18 2026 by rpki-client