
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130342e302f32322d3232203d3e203234353235.roa
File: 3131342e3139392e3130342e302f32322d3232203d3e203234353235.roa (raw, json)
Hash identifier: p7umJb5qmt7i8/qdPa5s4t2ce3m/YhpJRLDGwoxcXoU=
Subject key identifier: C4:E7:D1:06:24:16:EB:DE:05:0D:DC:1F:BF:CC:71:40:44:E4:EA:CD
Certificate issuer: /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial: 466CE1FE7A39DEEA199492DA56B39E2F01207613
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130342e302f32322d3232203d3e203234353235.roa
Signing time: Sun 03 May 2026 03:08:39 +0000
ROA not before: Sun 03 May 2026 03:03:39 +0000
ROA not after: Sun 02 May 2027 03:08:39 +0000
asID: 24525
IP address blocks: 114.199.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:6c:e1:fe:7a:39:de:ea:19:94:92:da:56:b3:9e:2f:01:20:76:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
Validity
Not Before: May 3 03:03:39 2026 GMT
Not After : May 2 03:08:39 2027 GMT
Subject: CN=C4E7D1062416EBDE050DDC1FBFCC714044E4EACD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:61:10:00:81:20:47:43:34:35:48:e8:d3:1e:
d4:2d:fe:0e:10:19:b4:a6:9c:eb:6e:a1:79:a9:6b:
d4:73:d9:6c:ae:e7:19:ad:a8:2a:97:33:ae:1e:31:
e0:78:09:a9:f4:73:42:19:f2:01:4d:3c:b8:44:94:
59:94:ea:b0:73:43:f2:aa:17:aa:65:48:77:e8:7c:
48:d3:a8:17:b4:da:09:bc:8f:c5:ef:f1:6c:34:9a:
9f:b6:2a:44:56:14:ef:6b:62:3d:21:24:69:97:02:
14:cb:30:32:7b:d3:0e:29:79:a0:17:4f:88:5a:f3:
73:d6:66:5f:6d:52:70:b2:a0:56:2a:25:9e:86:cd:
e3:24:17:fc:4b:6f:97:a2:8a:5d:8c:ff:ba:bf:c6:
01:7f:05:76:d7:9f:36:52:63:e3:f0:a4:89:86:29:
a0:2c:ce:4c:a3:b8:22:75:8b:f4:be:b5:8d:69:4b:
ca:e3:3b:47:50:78:8f:ce:2d:c1:51:d7:f4:ab:84:
c6:22:40:10:84:ae:ec:aa:26:45:b0:d1:a8:95:7b:
ed:07:ce:00:25:e9:27:aa:7c:69:76:c9:bc:e0:40:
41:11:3c:ed:eb:2c:23:9e:af:cb:7a:7e:eb:6e:d6:
00:7f:c8:8f:4c:23:06:83:50:14:06:8d:cc:21:21:
2a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E7:D1:06:24:16:EB:DE:05:0D:DC:1F:BF:CC:71:40:44:E4:EA:CD
X509v3 Authority Key Identifier:
keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130342e302f32322d3232203d3e203234353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.104.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:3d:9a:3e:3f:f9:31:af:4b:64:ce:5c:d2:fc:2f:a1:d5:93:
f0:4d:0c:06:92:68:3e:25:39:c7:d3:e9:73:48:f9:2a:e1:b8:
b3:2b:a7:79:b1:b6:b0:44:35:75:50:ba:d0:f7:64:3a:c9:ef:
3b:b2:a0:93:25:88:73:76:ef:d3:10:19:d9:1b:9a:8c:92:c4:
8c:23:ab:52:84:df:47:f2:34:94:45:7e:a4:35:69:d6:49:80:
cb:4d:f8:b1:03:f3:75:ca:f6:cf:84:e6:90:b2:de:b8:a9:47:
18:64:a5:d7:ef:71:52:41:5e:a0:c2:03:2b:fb:f5:0c:e4:05:
9c:18:36:69:26:b7:1b:27:59:30:fb:6f:04:3a:b6:06:1d:9a:
01:20:8c:7f:4c:a0:9e:35:79:3f:a0:b8:35:d4:b5:44:1f:96:
b9:43:75:e8:b6:ff:f4:b4:3c:76:43:f5:ca:fd:e5:83:e7:ba:
85:3b:ad:28:22:f3:8c:84:2d:b9:2b:41:9d:4b:e4:6b:36:32:
f3:09:5e:ad:e5:81:f4:53:0e:78:50:d4:26:28:cf:d8:b3:4f:
66:ff:e7:41:bb:37:a2:0b:18:6d:c8:1e:5d:f5:45:51:f7:76:
de:64:d8:e4:bb:f2:f4:8e:c3:10:2c:6e:dd:8a:1f:46:d1:93:
45:09:63:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:56:27 2026 by rpki-client