
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130342e302f32342d3234203d3e203234353235.roa
File: 3131342e3139392e3130342e302f32342d3234203d3e203234353235.roa (raw, json)
Hash identifier: D5nA/bOdbqUr/VAPaUs2lwgZIstCb+CTQPtrf2AVvNA=
Subject key identifier: 08:DC:95:1D:3A:27:07:30:48:E7:B3:16:7D:67:6B:F6:79:FC:15:AD
Certificate issuer: /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial: 58D93576A6F8B94B0012F14D13184474B39BA7ED
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130342e302f32342d3234203d3e203234353235.roa
Signing time: Sun 03 May 2026 03:08:40 +0000
ROA not before: Sun 03 May 2026 03:03:40 +0000
ROA not after: Sun 02 May 2027 03:08:40 +0000
asID: 24525
IP address blocks: 114.199.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:d9:35:76:a6:f8:b9:4b:00:12:f1:4d:13:18:44:74:b3:9b:a7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
Validity
Not Before: May 3 03:03:40 2026 GMT
Not After : May 2 03:08:40 2027 GMT
Subject: CN=08DC951D3A27073048E7B3167D676BF679FC15AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:70:dc:e0:08:d4:c2:10:0d:80:a8:eb:03:16:
38:75:43:74:53:86:60:64:85:a9:3f:e9:88:ec:19:
b4:20:93:81:2b:c0:f5:02:50:e4:ca:96:12:9b:61:
c8:08:f8:ff:09:91:79:b4:6a:6f:62:e4:1b:32:4f:
16:8f:04:95:09:1b:b9:71:d4:86:cf:e0:04:98:2a:
56:fb:1d:b5:a3:05:bf:80:87:3c:5f:d6:22:2d:5d:
3b:2d:a1:7a:59:19:23:13:79:6e:87:b2:c7:44:10:
db:f7:36:3c:cb:4d:3b:a3:45:13:fd:46:29:cd:54:
bc:6f:9a:dd:02:c4:4a:b5:67:b7:24:f3:68:7a:fe:
fc:d7:4f:87:fb:cd:a9:55:32:43:5d:5c:e4:3e:d3:
12:8d:14:72:c0:30:35:5e:e8:3c:be:ad:6a:fd:0e:
45:2c:85:2e:38:95:bf:6b:c0:26:be:1b:ca:10:6e:
12:61:22:e5:b2:94:b1:a5:21:12:87:47:64:13:58:
ab:01:c8:22:aa:47:14:f5:5d:ed:e4:a9:2a:5b:56:
90:03:1c:29:14:93:a1:d3:fa:c5:e8:14:52:6f:0c:
20:df:f5:2a:e6:12:fa:6b:5a:52:95:28:66:d6:aa:
44:33:de:87:c9:c6:1c:06:f9:3a:c4:93:6d:d3:f8:
d8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DC:95:1D:3A:27:07:30:48:E7:B3:16:7D:67:6B:F6:79:FC:15:AD
X509v3 Authority Key Identifier:
keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130342e302f32342d3234203d3e203234353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.104.0/24
Signature Algorithm: sha256WithRSAEncryption
29:bc:3c:14:53:10:32:53:8b:58:2b:e5:e6:db:05:9d:95:ec:
de:06:48:0a:78:fd:98:01:74:dd:69:8e:a4:13:05:7f:1d:89:
30:64:75:38:43:8e:8d:8d:db:9e:b0:d9:86:44:1e:1d:32:d3:
e2:7b:c0:a7:18:d6:61:c9:84:7f:ea:04:0c:e4:a1:00:b0:88:
6b:1b:9f:9c:80:e8:fb:53:ba:8d:46:34:b7:c6:c2:1c:f6:b3:
75:6a:35:21:02:6a:0d:7a:32:77:f0:ac:a6:6a:2f:91:12:a5:
13:bd:1f:a0:65:99:fa:ab:a8:3d:3c:49:69:38:71:60:55:de:
a4:f7:fa:ed:53:1f:73:7c:50:61:3d:e1:40:3c:8c:b6:6c:04:
91:d8:65:2a:9e:35:ca:8b:16:67:81:dc:e5:48:bb:5e:34:9d:
3b:ad:b5:9b:21:9c:65:57:ef:a9:d2:e5:61:e5:20:02:57:30:
d4:8b:ea:e5:fb:82:07:a8:01:67:b0:30:ba:20:38:7e:19:f0:
10:73:2b:a4:3c:15:26:ad:9d:37:1f:28:7c:d3:ee:e2:6e:c5:
a0:d1:d1:b8:53:17:1a:d3:9b:19:48:a5:1f:a2:69:ee:e3:29:
2c:60:0e:15:33:a9:84:4c:69:9d:25:c4:22:2f:81:fe:fc:ca:
83:e7:2e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:09:44 2026 by rpki-client