
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130322e302f32332d3233203d3e203234353235.roa
File: 3131342e3139392e3130322e302f32332d3233203d3e203234353235.roa (raw, json)
Hash identifier: M4dd1IbxjxMbI9WBW4Xx/XiCQfpfkHgUxMC9TsuLm9s=
Subject key identifier: 2F:4B:F1:1C:C9:83:79:FC:9E:20:B2:24:F1:38:AC:24:02:14:93:DF
Certificate issuer: /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial: 42B80E8E1BCC178BDB25A19CA0C265A25308180C
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130322e302f32332d3233203d3e203234353235.roa
Signing time: Sun 03 May 2026 03:08:53 +0000
ROA not before: Sun 03 May 2026 03:03:53 +0000
ROA not after: Sun 02 May 2027 03:08:53 +0000
asID: 24525
IP address blocks: 114.199.102.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:b8:0e:8e:1b:cc:17:8b:db:25:a1:9c:a0:c2:65:a2:53:08:18:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
Validity
Not Before: May 3 03:03:53 2026 GMT
Not After : May 2 03:08:53 2027 GMT
Subject: CN=2F4BF11CC98379FC9E20B224F138AC24021493DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9a:48:57:4b:38:b5:f0:f8:01:b0:09:f2:c5:
3e:9b:dd:8e:12:9a:f1:7c:23:29:ed:fa:30:b0:0d:
b6:65:b5:55:ed:1d:ae:f6:67:b2:90:8c:90:5f:ec:
2a:97:93:fb:fb:9e:24:9a:6a:2b:84:23:9c:16:e0:
e7:e2:a0:90:df:1a:36:d8:16:0e:5a:f8:3d:26:7c:
0b:43:63:5c:58:e0:97:c7:ff:ed:4b:56:fb:6d:1b:
6a:16:fe:ee:1f:81:4b:97:86:59:cb:40:e2:bf:1d:
37:09:a4:72:5f:a4:4b:83:71:7c:32:6e:a3:4a:82:
27:1c:23:2b:23:3c:05:2c:2a:b8:c2:e2:c0:bd:b6:
dd:d7:45:80:4a:4d:79:44:eb:43:69:db:f4:d3:25:
06:97:1b:65:fe:51:3d:b5:37:03:80:b5:3a:90:00:
75:59:c4:6f:f3:20:37:ae:06:07:6c:a1:fa:67:eb:
d5:20:05:b2:cc:8e:9e:81:5e:e6:31:c0:51:9e:46:
73:08:ac:db:e8:cf:49:cf:c2:39:ec:0c:9e:99:a0:
b0:e7:06:7e:ef:ea:a2:22:f7:88:3e:98:47:ff:0d:
6d:a8:46:db:87:99:fc:35:80:d7:fc:4f:a8:1b:ea:
fb:fc:5b:18:d7:d5:f1:69:a5:59:3e:07:4d:08:83:
31:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4B:F1:1C:C9:83:79:FC:9E:20:B2:24:F1:38:AC:24:02:14:93:DF
X509v3 Authority Key Identifier:
keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130322e302f32332d3233203d3e203234353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.102.0/23
Signature Algorithm: sha256WithRSAEncryption
14:28:87:9b:8b:ac:75:eb:76:60:1b:e2:4b:e5:e8:34:47:dc:
bf:88:3b:5b:42:46:e5:e4:77:7d:1d:1c:a1:c8:44:99:02:1a:
78:7f:0f:86:70:dc:e2:79:69:76:1e:3a:3a:e8:aa:49:4b:81:
f9:5a:a3:db:a1:12:80:ce:15:3b:ac:1c:5b:02:d2:f3:31:6e:
81:91:28:3f:0a:ec:f8:0f:e4:f3:bd:a6:fc:d2:7b:bb:0b:f3:
63:1c:35:92:c7:1a:97:58:3f:31:2e:96:0f:14:07:cb:af:a7:
ea:89:e7:44:31:45:06:b7:92:4b:9f:04:93:57:b0:48:05:98:
0f:33:c8:f4:7f:47:07:8a:78:19:3d:ad:fe:b3:16:f7:48:2d:
06:d6:37:1d:7a:e0:4a:0e:9d:fb:0e:dd:cc:07:ee:3d:2a:5d:
fa:83:e6:db:68:2b:2e:80:f6:36:be:e8:ff:f3:97:3a:eb:06:
3f:dd:f3:d2:5b:54:33:ed:e8:ff:f8:bc:f8:c8:cf:0f:cf:00:
af:05:96:d8:ef:b0:dd:55:93:7e:f1:1a:8e:4b:21:50:3d:28:
2d:dd:22:7c:3f:be:cb:52:24:db:d3:44:8c:ef:68:ff:e8:43:
54:6e:02:71:79:63:9e:b1:34:1d:31:fa:c1:03:56:ad:ac:b7:
ad:31:03:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:39 2026 by rpki-client