
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130322e302f32342d3234203d3e203234353235.roa
File: 3131342e3139392e3130322e302f32342d3234203d3e203234353235.roa (raw, json)
Hash identifier: jpl8Zt7fu8KqJV+o8C2PQHbSREtvxoK8gZyALfQ9e+M=
Subject key identifier: 5B:D2:96:03:E6:7A:1F:6D:00:ED:78:1B:19:81:C3:C1:BB:04:69:BE
Certificate issuer: /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial: 4AC6839CEEB660F6A3267040EBE9D790A402A3A2
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130322e302f32342d3234203d3e203234353235.roa
Signing time: Sun 03 May 2026 03:09:02 +0000
ROA not before: Sun 03 May 2026 03:04:02 +0000
ROA not after: Sun 02 May 2027 03:09:02 +0000
asID: 24525
IP address blocks: 114.199.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:c6:83:9c:ee:b6:60:f6:a3:26:70:40:eb:e9:d7:90:a4:02:a3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
Validity
Not Before: May 3 03:04:02 2026 GMT
Not After : May 2 03:09:02 2027 GMT
Subject: CN=5BD29603E67A1F6D00ED781B1981C3C1BB0469BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ca:f0:2f:21:22:c0:57:c9:3f:1d:04:0c:7a:
ab:e5:57:4a:37:1b:08:0c:56:cf:ff:84:e5:45:db:
9b:31:51:45:1e:c5:7f:55:74:84:8f:4b:ce:e9:e7:
99:07:11:f8:97:b1:e4:d9:45:4b:02:f3:c2:a2:50:
6d:a7:91:4a:9c:e8:45:b6:c2:5b:3e:bf:77:ad:88:
23:c6:de:30:59:d2:a7:d6:d0:6b:a9:d2:b1:5f:62:
bd:c0:b9:a3:0c:b0:ec:44:6d:a4:ec:a5:6a:d2:a3:
fd:fa:56:37:28:b3:bb:03:51:a5:5e:51:65:72:94:
ea:cd:1c:28:bd:8d:3e:3b:76:10:1b:e0:44:5f:8a:
57:60:a5:a4:6c:3d:6f:f4:5d:27:64:ad:8f:b0:ff:
a6:4f:0a:56:37:30:ce:f8:73:ae:2f:95:25:92:a4:
3a:eb:d0:3c:7e:47:b1:3a:f4:49:28:f7:90:e4:8e:
43:7f:18:89:1b:1d:2a:cc:0d:11:67:ae:fc:58:48:
ff:2f:16:66:9b:83:2d:d6:aa:ed:20:40:34:25:4e:
3c:b5:b6:e1:64:a0:8f:74:7a:f8:12:76:b1:49:72:
d3:8a:7f:81:d9:41:6c:7d:aa:81:34:21:19:e1:f4:
98:e9:86:36:c1:96:53:f1:4b:79:20:63:a7:c5:e5:
9f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D2:96:03:E6:7A:1F:6D:00:ED:78:1B:19:81:C3:C1:BB:04:69:BE
X509v3 Authority Key Identifier:
keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130322e302f32342d3234203d3e203234353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.102.0/24
Signature Algorithm: sha256WithRSAEncryption
20:c5:a5:c7:aa:b7:8e:5e:08:a8:ad:4d:d0:b5:68:46:16:71:
7d:e3:77:47:95:65:79:45:c3:e0:4d:8a:8f:0e:60:44:f8:fd:
55:4f:eb:63:94:f3:0a:b6:7a:35:a9:d2:0f:40:8d:89:d7:35:
42:43:61:bb:c9:db:f0:75:fa:0a:9f:b6:ac:53:3b:71:22:24:
ec:77:5d:42:c7:43:ba:c5:86:2c:60:40:29:2c:4f:9c:ba:a7:
bc:65:73:ca:b5:f0:21:be:72:a8:4b:4e:0f:43:f3:42:38:03:
2a:25:f0:9c:24:1b:9c:d2:16:c1:a9:cb:1d:80:14:f6:3b:46:
93:30:c4:63:3a:12:59:70:4e:0e:9a:30:28:ba:61:82:c1:c2:
c1:4d:6a:66:44:17:6a:07:4c:75:12:32:50:65:0e:9d:17:bb:
8c:2f:fc:8f:08:15:b3:ee:d2:33:11:1d:3e:4c:d6:08:0a:6b:
e4:13:26:71:48:c7:47:1b:b0:15:37:e8:cc:ff:2c:04:c5:05:
49:85:0d:c4:fa:00:7b:05:d1:c4:0b:90:5f:b5:ea:33:3c:f5:
f4:14:c3:e5:81:ea:53:8e:3b:9c:07:66:b4:de:5f:e4:d1:38:
86:1e:d6:b5:83:78:59:48:23:ed:18:98:bc:73:6a:6a:6f:f6:
21:22:7d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:48:05 2026 by rpki-client