
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131382e302f32332d3233203d3e203234353235.roa
File: 3131342e3139392e3131382e302f32332d3233203d3e203234353235.roa (raw, json)
Hash identifier: 2ERP1mnLi6+krfaSmM6N2njDCbCP1/PdVb74qt+/700=
Subject key identifier: 00:2B:81:FB:1A:F8:FB:25:22:97:10:A8:CC:24:6E:04:3E:DC:F9:0D
Certificate issuer: /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial: 373BD8FFF3B2241A614F2E738E81F27FF9FBBF3D
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131382e302f32332d3233203d3e203234353235.roa
Signing time: Sun 03 May 2026 03:08:38 +0000
ROA not before: Sun 03 May 2026 03:03:38 +0000
ROA not after: Sun 02 May 2027 03:08:38 +0000
asID: 24525
IP address blocks: 114.199.118.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:3b:d8:ff:f3:b2:24:1a:61:4f:2e:73:8e:81:f2:7f:f9:fb:bf:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
Validity
Not Before: May 3 03:03:38 2026 GMT
Not After : May 2 03:08:38 2027 GMT
Subject: CN=002B81FB1AF8FB25229710A8CC246E043EDCF90D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:46:ec:98:73:e9:b4:97:92:fe:42:60:2e:57:
27:65:dc:6f:12:e1:fe:5f:26:7f:82:05:2f:15:11:
27:66:ed:ad:a5:a6:e4:79:aa:b9:6e:56:b2:f8:53:
cb:a5:88:30:11:9a:55:1f:81:a1:75:9c:bb:a4:ba:
ea:e6:b9:0b:39:b0:8b:0c:4a:52:ff:04:52:89:89:
b6:6f:d9:82:8f:0f:12:24:71:e8:ea:12:4b:05:5f:
d3:d8:d1:bc:e1:e3:4e:9f:85:dd:e1:fe:8f:1c:1f:
da:3f:99:4b:6e:6c:27:31:b9:80:37:18:cd:56:f1:
b2:61:55:c7:e9:f8:7e:51:4a:c2:b3:07:b9:0b:2e:
43:12:ba:ad:23:ca:5b:c4:de:f7:2b:2f:dc:9d:b5:
a3:df:96:23:bc:ff:7d:0c:80:d9:a1:72:89:e6:e8:
d2:9f:86:cb:7b:fa:9f:a0:04:0d:91:a4:90:ec:0d:
a3:27:17:ab:b2:b7:f9:7d:80:55:4a:89:3b:04:ad:
64:e1:2b:d9:db:9e:05:6e:11:a2:29:de:7b:7c:e2:
24:d0:27:e9:28:a1:24:3f:df:40:43:fa:25:0b:7c:
47:71:86:30:2a:b3:dc:03:2c:9f:d9:24:51:fe:f7:
f8:26:59:9e:8c:5f:91:51:5e:09:cb:d9:4f:4c:40:
20:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2B:81:FB:1A:F8:FB:25:22:97:10:A8:CC:24:6E:04:3E:DC:F9:0D
X509v3 Authority Key Identifier:
keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131382e302f32332d3233203d3e203234353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.118.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:3d:4a:7c:0c:aa:d0:1c:8b:2d:36:72:f8:42:39:09:20:95:
f2:2b:67:a0:c4:61:d0:2d:ce:d0:6e:fb:ae:22:30:ce:f8:3e:
4a:c6:70:2f:56:38:8e:6c:e8:bc:ca:dd:3d:70:c0:b0:7b:31:
c2:81:a2:eb:be:4e:80:c3:a5:dd:a8:ab:25:0e:85:ee:de:9b:
a5:74:1e:11:1d:68:b3:3c:a3:a4:ee:d0:7a:fb:9c:eb:5d:aa:
23:da:d0:5e:dd:9b:c1:66:cc:a9:f2:cc:05:15:8c:fd:16:bf:
aa:04:47:9e:c3:76:dc:8f:46:f1:49:ba:ec:e8:bc:f5:33:0c:
b3:04:a0:74:33:f9:d4:4a:55:90:39:a0:b1:59:c0:20:29:16:
55:38:5a:64:9c:07:57:fb:51:24:d6:c5:30:06:f8:6a:5a:ce:
86:7c:77:6e:04:82:36:56:b2:04:74:bb:6d:2d:35:b4:b7:09:
8d:c9:45:c5:e2:4f:d6:f2:08:c8:f0:22:0b:82:73:39:8e:be:
c2:e7:9f:53:0a:26:a5:80:72:0d:5d:02:3c:1f:bd:a8:9e:d8:
1f:21:6a:4d:bd:2b:e6:e3:34:1a:66:b5:e7:cf:2f:ac:74:d6:
57:f8:6e:a7:9c:51:77:f6:79:33:dd:8d:6c:db:07:85:53:2d:
bf:66:2f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:25:56 2026 by rpki-client