
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130362e302f32342d3234203d3e203234353235.roa
File: 3131342e3139392e3130362e302f32342d3234203d3e203234353235.roa (raw, json)
Hash identifier: BB21gb1mz9ocWNGxMaeVfhDYsh5pm1qAnvF0YAlp3u4=
Subject key identifier: 3C:2A:C4:8A:5D:90:F9:40:FA:26:83:19:DB:FB:52:57:EF:6A:C1:59
Certificate issuer: /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial: 73AE3FEA7AAACA496DB475792B3D0214616A6FE5
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130362e302f32342d3234203d3e203234353235.roa
Signing time: Sun 03 May 2026 03:08:51 +0000
ROA not before: Sun 03 May 2026 03:03:51 +0000
ROA not after: Sun 02 May 2027 03:08:51 +0000
asID: 24525
IP address blocks: 114.199.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:ae:3f:ea:7a:aa:ca:49:6d:b4:75:79:2b:3d:02:14:61:6a:6f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
Validity
Not Before: May 3 03:03:51 2026 GMT
Not After : May 2 03:08:51 2027 GMT
Subject: CN=3C2AC48A5D90F940FA268319DBFB5257EF6AC159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4f:bf:0e:92:5d:d1:5c:db:44:86:fc:02:b5:
a0:28:ea:65:56:e1:da:be:5c:22:db:ec:ce:23:0c:
17:51:08:b7:bc:cd:8d:a5:84:70:4c:0b:ab:d5:36:
f7:62:f9:49:10:5e:b2:15:89:39:c2:7f:dc:28:d8:
c5:7b:c5:61:a3:d2:50:d7:7f:9b:0f:76:c0:4f:6f:
da:57:16:7c:18:02:6d:02:65:43:9b:bf:bf:4f:48:
c8:a8:bd:5a:d9:8d:51:04:20:a5:e6:90:3c:c9:1d:
17:4c:d5:9d:cb:e0:b3:f6:33:7b:c0:05:d5:46:ba:
f0:57:97:bf:de:22:67:8d:6e:bb:fa:85:1e:0e:91:
98:2e:1d:3f:b9:ad:2f:ee:d5:0e:7e:3c:5c:e2:42:
c9:4e:da:ac:e7:e7:94:df:e3:2b:35:e4:53:15:8d:
fe:66:0b:79:5d:87:ab:66:f3:28:90:ef:f4:9c:8b:
f3:71:38:ee:e7:39:2e:70:ca:63:9a:3e:8f:cc:41:
88:22:0a:59:aa:f2:8d:e6:30:be:04:34:0a:a3:35:
98:04:a1:12:13:3f:68:d4:45:25:44:2e:97:20:58:
ff:27:1b:6b:5b:61:17:4b:c3:c5:8c:dd:be:ec:f3:
13:0f:66:70:92:3e:e5:af:15:26:96:c7:9e:23:a2:
55:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2A:C4:8A:5D:90:F9:40:FA:26:83:19:DB:FB:52:57:EF:6A:C1:59
X509v3 Authority Key Identifier:
keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130362e302f32342d3234203d3e203234353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.106.0/24
Signature Algorithm: sha256WithRSAEncryption
72:2a:b2:1b:93:76:09:51:8b:63:3a:ef:47:ef:ff:58:64:ec:
a4:9f:6b:91:90:3f:77:c8:cd:e0:f5:96:15:06:cc:ba:e1:b2:
4e:1a:6b:8d:58:c3:d6:08:ec:2a:87:61:68:18:51:d8:4c:e7:
26:d9:39:34:0b:4d:f3:2a:88:ed:6a:20:51:64:14:b5:fd:e8:
b8:d5:56:3f:78:5f:84:e9:2d:34:10:ca:3c:59:94:d9:c2:c2:
03:d2:8b:f9:1c:c7:8e:84:d0:fc:30:1c:7f:df:9e:c8:58:15:
86:a6:e5:a1:55:c4:12:23:a0:46:f9:6b:e7:8c:83:54:77:ad:
d7:aa:fc:66:82:8c:60:af:60:7e:ed:41:cb:e4:ae:ed:e4:fe:
c3:04:ad:db:46:1c:80:94:4d:10:f3:22:67:7f:d9:fc:81:ae:
a5:8b:53:8a:8d:db:bd:04:a5:e9:cb:76:66:32:eb:3d:da:20:
f4:e9:82:88:6e:94:07:eb:47:9d:a4:15:41:79:7a:45:a9:99:
ab:55:a7:6a:31:33:e1:f1:19:d1:1f:52:36:37:2b:1e:98:82:
4d:ab:5b:61:36:89:1f:c4:60:22:88:b1:d8:4a:4b:dd:bc:3a:
76:72:79:e4:f2:0b:f6:62:eb:aa:1e:d1:a5:e2:94:f1:a0:d3:
b7:10:c8:99
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUc64/6nqqyklttHV5Kz0CFGFqb+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY3MzgzNDM4RDUzN0IyRTk2NkZEMjI3MjZERDNCODI3
REYwMDJGRTAeFw0yNjA1MDMwMzAzNTFaFw0yNzA1MDIwMzA4NTFaMDMxMTAvBgNV
BAMTKDNDMkFDNDhBNUQ5MEY5NDBGQTI2ODMxOURCRkI1MjU3RUY2QUMxNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlT78Okl3RXNtEhvwCtaAo6mVW
4dq+XCLb7M4jDBdRCLe8zY2lhHBMC6vVNvdi+UkQXrIViTnCf9wo2MV7xWGj0lDX
f5sPdsBPb9pXFnwYAm0CZUObv79PSMiovVrZjVEEIKXmkDzJHRdM1Z3L4LP2M3vA
BdVGuvBXl7/eImeNbrv6hR4OkZguHT+5rS/u1Q5+PFziQslO2qzn55Tf4ys15FMV
jf5mC3ldh6tm8yiQ7/Sci/NxOO7nOS5wymOaPo/MQYgiClmq8o3mML4ENAqjNZgE
oRITP2jURSVELpcgWP8nG2tbYRdLw8WM3b7s8xMPZnCSPuWvFSaWx54jolVvAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUPCrEil2Q+UD6JoMZ2/tSV+9qwVkwHwYDVR0j
BBgwFoAUFnODQ41Tey6Wb9InJt07gn3wAv4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDFmNGZkMzgtNzgyNi00MjAxLTlmOWItMWQ3Yzc2YWEyNGRkLzAvMTY3MzgzNDM4
RDUzN0IyRTk2NkZEMjI3MjZERDNCODI3REYwMDJGRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNjczODM0MzhENTM3QjJFOTY2RkQyMjcyNkREM0I4MjdERjAw
MkZFLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05
ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMwMzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM0MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAcsdqMA0GCSqG
SIb3DQEBCwUAA4IBAQByKrIbk3YJUYtjOu9H7/9YZOykn2uRkD93yM3g9ZYVBsy6
4bJOGmuNWMPWCOwqh2FoGFHYTOcm2Tk0C03zKojtaiBRZBS1/ei41VY/eF+E6S00
EMo8WZTZwsID0ov5HMeOhND8MBx/357IWBWGpuWhVcQSI6BG+WvnjINUd63Xqvxm
goxgr2B+7UHL5K7t5P7DBK3bRhyAlE0Q8yJnf9n8ga6li1OKjdu9BKXpy3ZmMus9
2iD06YKIbpQH60edpBVBeXpFqZmrVadqMTPh8RnRH1I2NysemIJNq1thNokfxGAi
iLHYSkvdvDp2cnnk8gv2YuuqHtGl4pTxoNO3EMiZ
-----END CERTIFICATE-----
Generated at Wed May 13 04:54:55 2026 by rpki-client