
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131322e302f32302d3234203d3e2034373837.roa
File: 3131342e3139392e3131322e302f32302d3234203d3e2034373837.roa (raw, json)
Hash identifier: TdRTMcNm3SpdFGUJhpnwe75KMl8XWKlGQQwpE6XpXxI=
Subject key identifier: 7A:9E:03:39:5D:D1:B8:E4:A0:3D:C5:09:34:95:EF:42:88:52:FC:90
Certificate issuer: /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial: 0A09CBAB3F97718036DB3CD9B0D60F8BD4D967A6
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131322e302f32302d3234203d3e2034373837.roa
Signing time: Sun 03 May 2026 03:08:39 +0000
ROA not before: Sun 03 May 2026 03:03:39 +0000
ROA not after: Sun 02 May 2027 03:08:39 +0000
asID: 4787
IP address blocks: 114.199.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:09:cb:ab:3f:97:71:80:36:db:3c:d9:b0:d6:0f:8b:d4:d9:67:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
Validity
Not Before: May 3 03:03:39 2026 GMT
Not After : May 2 03:08:39 2027 GMT
Subject: CN=7A9E03395DD1B8E4A03DC5093495EF428852FC90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c1:73:a1:92:76:d9:79:93:36:d3:1e:60:b1:
66:02:b7:33:db:38:52:1b:d0:07:cf:cf:ef:6a:bd:
63:0c:16:24:4f:d3:35:a3:6e:50:61:d6:57:39:29:
f3:13:b9:35:92:c1:c3:fb:a7:44:18:03:e7:ed:81:
93:b9:9b:d9:91:05:25:67:a1:ac:0c:36:0e:64:9a:
e8:5b:57:97:79:11:5a:ca:5f:34:06:7b:41:8f:36:
de:f4:53:2c:a7:a1:9d:08:d5:4e:71:2d:0b:40:bb:
fb:2d:2c:b3:9f:a5:a7:c1:45:7e:1e:f5:74:8f:5b:
ac:4a:a0:09:02:99:e3:1b:c0:11:c3:f3:a9:d2:5d:
37:39:73:01:a7:9d:5c:b2:2e:30:eb:4f:8e:15:b4:
fd:26:c5:62:9a:5a:84:d7:06:65:38:c3:b8:6e:45:
62:7a:9a:fd:98:2e:8d:95:c8:23:46:90:ef:6c:e5:
fb:09:8a:6f:bc:32:64:39:e5:ee:f5:e6:04:48:17:
dd:97:ef:39:2b:8a:fa:0a:31:13:de:6c:fd:ba:82:
af:bc:16:69:08:06:f7:53:4c:3d:e0:bc:12:69:1d:
71:f6:d9:42:68:cb:74:62:d1:2c:80:16:55:74:68:
80:b5:17:4b:13:79:3f:7e:42:d9:1e:9b:54:3a:26:
27:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9E:03:39:5D:D1:B8:E4:A0:3D:C5:09:34:95:EF:42:88:52:FC:90
X509v3 Authority Key Identifier:
keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131322e302f32302d3234203d3e2034373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.112.0/20
Signature Algorithm: sha256WithRSAEncryption
0d:0d:fc:16:cf:95:01:a0:a7:f9:30:04:26:c7:4e:57:60:d9:
69:d2:b0:43:e9:e2:4e:bc:d0:3a:33:d2:5d:d7:fa:f4:63:64:
2c:90:3b:ef:99:6a:d8:f5:b0:a7:6d:71:96:7c:05:d7:d0:4b:
a2:11:30:8b:4f:f8:3d:a7:ad:5f:84:86:55:73:b5:3e:57:3f:
1e:a0:2d:18:b6:a9:72:41:a8:35:00:c2:ca:f5:44:d9:13:ca:
f2:80:23:71:41:31:23:9e:c3:27:7f:ed:db:ac:e5:48:19:28:
6f:07:f5:44:47:d4:cf:57:db:46:70:25:98:cb:e9:1c:50:f5:
cf:2d:4f:e7:6c:c6:a5:d9:59:f1:28:b7:9c:a0:3d:2b:23:5f:
02:71:b7:b7:e6:b7:15:a0:91:44:b1:f3:9e:76:3d:5d:50:25:
2a:ef:84:00:be:8e:a7:f8:8e:af:f4:d3:eb:75:8e:47:92:56:
0b:2a:a4:d9:7e:8f:05:7c:47:14:e5:b7:3f:8c:65:52:6d:72:
26:c8:f1:10:91:5c:a6:9d:f9:3b:33:2d:3b:2a:9a:f6:dd:92:
ea:b8:99:24:33:47:e3:ef:df:6a:df:d8:33:d0:52:31:e1:f0:
eb:df:7b:bd:c2:8c:6f:b1:ef:a5:3b:50:b2:40:48:a6:1f:d4:
e9:a9:d5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:32 2026 by rpki-client