
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131382e302f32342d3234203d3e2034373837.roa
File: 3131342e3139392e3131382e302f32342d3234203d3e2034373837.roa (raw, json)
Hash identifier: 5LtRnyd51Gt4vdTTCgwEcUvTVC/B8QtHvpdnZdER5/A=
Subject key identifier: 2A:87:C0:64:2E:CD:27:31:34:B0:C5:EA:AF:38:16:EC:E2:FD:B0:52
Certificate issuer: /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial: 6A8832ABDA283F1624D5F9DC57B5E05CE91B45A0
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131382e302f32342d3234203d3e2034373837.roa
Signing time: Sun 03 May 2026 03:08:45 +0000
ROA not before: Sun 03 May 2026 03:03:45 +0000
ROA not after: Sun 02 May 2027 03:08:45 +0000
asID: 4787
IP address blocks: 114.199.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:88:32:ab:da:28:3f:16:24:d5:f9:dc:57:b5:e0:5c:e9:1b:45:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
Validity
Not Before: May 3 03:03:45 2026 GMT
Not After : May 2 03:08:45 2027 GMT
Subject: CN=2A87C0642ECD273134B0C5EAAF3816ECE2FDB052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f6:79:43:57:85:b2:d5:aa:79:44:b9:40:6e:
50:3c:47:99:73:d9:33:3c:16:75:cb:b0:bf:4c:a1:
30:97:6c:b0:36:4c:a6:28:be:9a:c8:73:a8:88:ba:
d4:b7:1e:01:8d:c6:aa:b6:62:f8:e3:ed:d3:ab:03:
74:1a:15:02:4e:13:37:d1:43:a9:a5:ed:99:64:2c:
99:9b:b4:be:e3:73:37:b9:a3:bf:d8:05:b6:87:6e:
d5:fd:44:5f:a7:82:e5:e7:68:d8:d4:4a:2b:85:68:
5b:6e:f2:4b:be:2c:da:ad:9b:05:6b:49:d3:cf:9c:
ba:73:d7:83:2c:0a:fd:fb:fc:c6:07:62:8f:7d:7f:
c5:ff:5e:a0:49:d0:57:d5:a4:75:24:d1:6c:2f:06:
ff:85:a3:75:11:95:2b:52:11:9f:92:7b:37:88:81:
3b:ac:63:20:79:4e:47:85:aa:be:28:8f:98:b4:e1:
9d:95:cf:11:9c:e3:dd:7f:c6:69:7f:a9:45:53:f2:
6b:86:82:f1:d5:f9:e4:d7:b5:db:6d:de:7b:f2:5e:
a5:2d:70:c2:5e:2b:4b:09:e2:8e:a6:42:18:ad:ca:
da:68:c6:9c:39:b5:88:5e:b6:76:3c:ba:c4:0e:7a:
ab:b7:be:66:5e:7e:1f:0f:af:65:4d:5d:5b:8e:95:
e0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:87:C0:64:2E:CD:27:31:34:B0:C5:EA:AF:38:16:EC:E2:FD:B0:52
X509v3 Authority Key Identifier:
keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3131382e302f32342d3234203d3e2034373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.118.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:df:9e:cc:c5:a8:d9:6d:20:f5:f7:a2:92:9f:df:c1:09:77:
0e:6a:26:08:e9:16:af:42:df:75:21:3b:ba:bc:f2:26:4b:27:
65:a9:fb:3d:c7:7d:b2:b5:55:4a:a5:09:f1:53:e8:49:d8:4c:
67:bb:b8:14:2e:ce:c1:d5:1e:7e:5c:79:56:20:1b:aa:51:87:
e4:53:9f:b7:61:da:83:0d:65:00:3e:2a:9f:a6:d4:3d:2d:09:
d4:0d:7d:4b:95:75:3f:ef:af:5d:05:0e:32:72:98:9f:4d:d4:
90:6f:e2:1f:58:ff:0d:4a:76:0d:e8:5e:d8:37:e8:b7:e3:05:
a2:91:82:a6:12:00:0f:95:09:85:89:6f:b5:77:49:41:d8:9a:
28:b3:9a:36:4c:4b:a4:ea:71:7e:e7:57:67:8f:b7:a0:61:b3:
1d:c5:97:12:4a:51:7a:79:72:8c:ec:ea:70:c2:67:46:f8:91:
ff:46:31:d7:49:57:2a:b0:9b:f6:0c:82:55:99:fc:0e:3d:15:
0f:e7:52:fe:af:c8:7e:7f:20:54:21:66:ce:5c:43:fa:b9:25:
15:38:9c:6f:4c:72:bd:9f:98:de:ad:a5:a8:75:f2:34:e1:be:
25:5b:e9:d0:4a:1d:eb:e8:df:46:a3:c7:92:74:a7:3d:22:25:
65:f5:2f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:49:36 2026 by rpki-client