
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130332e302f32342d3234203d3e203234353235.roa
File: 3131342e3139392e3130332e302f32342d3234203d3e203234353235.roa (raw, json)
Hash identifier: HfrfmY2Qs/gsGsye1a+5hJnU8CFo8WulMQ2tY9r4if4=
Subject key identifier: 13:44:9C:95:0E:47:BF:74:B8:DD:02:B1:55:B4:15:6B:A5:8D:4E:79
Certificate issuer: /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial: 15A63EA362B27E94E5E7019DE4023A044BF50092
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130332e302f32342d3234203d3e203234353235.roa
Signing time: Sun 03 May 2026 03:08:52 +0000
ROA not before: Sun 03 May 2026 03:03:52 +0000
ROA not after: Sun 02 May 2027 03:08:52 +0000
asID: 24525
IP address blocks: 114.199.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:a6:3e:a3:62:b2:7e:94:e5:e7:01:9d:e4:02:3a:04:4b:f5:00:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
Validity
Not Before: May 3 03:03:52 2026 GMT
Not After : May 2 03:08:52 2027 GMT
Subject: CN=13449C950E47BF74B8DD02B155B4156BA58D4E79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a2:ee:64:fd:3d:a6:f5:74:03:32:df:ba:e1:
cf:97:20:60:8b:24:85:8a:f3:4e:ec:2f:05:b7:ab:
7e:57:38:12:85:da:3c:8b:42:78:45:8f:c0:50:a9:
c6:fd:e5:e9:6b:41:5c:ac:b3:f2:a6:dd:36:51:60:
9d:f0:1b:fd:f0:fa:3e:af:88:d7:97:74:f7:a7:65:
3b:b6:1b:94:d7:a9:90:1a:4b:0f:22:1a:99:e9:ab:
bc:d9:5c:5a:02:5b:e1:1c:02:93:b1:a5:22:87:9a:
10:85:71:e7:21:c3:60:41:31:13:c6:f5:2f:6e:06:
a2:43:95:17:e4:fd:58:48:25:88:4d:da:56:70:60:
0d:9f:5b:e7:b0:76:2d:65:21:f5:11:f2:c5:dd:03:
d3:70:d9:01:e5:c6:7c:a3:2a:92:84:f7:77:8b:7d:
c7:1b:e3:a3:2e:b8:60:bc:b5:01:ff:94:7d:fb:73:
98:26:2a:06:d8:c7:05:c9:3b:26:06:38:bc:a9:29:
9a:a0:d9:97:14:8f:7a:df:de:3c:24:d6:59:e1:03:
83:b1:c2:72:ae:20:01:da:03:a0:83:19:e5:03:96:
97:bd:3e:31:bc:23:cc:8c:47:62:2a:0d:19:87:e3:
78:3a:a8:37:2c:ac:93:c1:ab:51:1b:79:e5:51:2f:
87:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:44:9C:95:0E:47:BF:74:B8:DD:02:B1:55:B4:15:6B:A5:8D:4E:79
X509v3 Authority Key Identifier:
keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130332e302f32342d3234203d3e203234353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.103.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:fc:7e:e0:f6:85:fe:06:6e:73:1f:4d:c9:65:84:94:ee:19:
ed:00:ef:c2:0b:a1:b1:60:b6:23:fb:6f:ec:09:60:65:cb:89:
da:ee:c3:91:c0:96:8b:25:42:12:31:7e:04:aa:12:33:fe:fc:
e6:60:6a:37:0f:d7:0d:2b:0f:3d:39:84:f6:45:2c:f8:a7:a8:
86:33:0d:b7:3d:cf:08:a1:4e:87:75:74:a6:a4:a5:80:40:79:
90:31:b5:cd:17:5e:c2:62:5f:ad:97:d8:5e:83:e7:73:ff:86:
a4:fa:07:2d:23:5c:0e:84:19:b1:84:84:a9:32:f9:c5:11:e2:
20:ed:17:2f:6a:67:b2:a5:03:ba:37:7a:97:83:cc:58:dd:a4:
27:d3:aa:e0:9b:68:ca:f1:8b:99:18:a5:a6:63:57:84:f9:89:
ef:4a:bd:9f:58:96:a7:b0:b7:3a:c8:44:c2:72:cc:65:8b:37:
2c:e3:dd:e5:32:3f:37:e9:f2:14:d0:52:0d:3b:2a:9e:08:17:
cc:cb:7a:b7:1c:a3:13:9c:13:a1:00:2b:e6:cc:dc:2c:68:14:
09:bf:73:0b:53:bb:fc:61:ec:85:83:fd:3d:75:99:60:e9:54:
c8:af:77:6c:f0:34:f3:b7:b3:d2:22:fc:ac:ff:8e:68:66:c7:
1a:c4:b2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:09:27 2026 by rpki-client