
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132312e302f32342d3234203d3e2034373837.roa
File: 3131342e3139392e3132312e302f32342d3234203d3e2034373837.roa (raw, json)
Hash identifier: wbTxunnk3f0nCdLar3cD9C2jQ1cSe0heeE+woKMHv7Y=
Subject key identifier: CB:D5:96:CB:0A:98:C4:04:9B:CE:2B:BF:29:80:DD:FD:91:24:15:69
Certificate issuer: /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial: 0DBC7B6592F1BD91788337632C43447F5BA41ECA
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132312e302f32342d3234203d3e2034373837.roa
Signing time: Sun 03 May 2026 03:08:48 +0000
ROA not before: Sun 03 May 2026 03:03:48 +0000
ROA not after: Sun 02 May 2027 03:08:48 +0000
asID: 4787
IP address blocks: 114.199.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:bc:7b:65:92:f1:bd:91:78:83:37:63:2c:43:44:7f:5b:a4:1e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
Validity
Not Before: May 3 03:03:48 2026 GMT
Not After : May 2 03:08:48 2027 GMT
Subject: CN=CBD596CB0A98C4049BCE2BBF2980DDFD91241569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f1:dd:f7:64:8d:64:46:1f:59:df:6b:7e:66:
96:a3:df:e6:17:91:38:79:11:4c:0e:12:60:29:37:
ba:41:0e:08:86:c5:fc:75:e3:98:bc:30:ae:d8:36:
9d:f7:c6:71:4f:6c:04:14:1e:56:5f:95:b9:3e:4a:
32:32:b0:b3:17:b0:cc:85:5b:02:71:9c:ef:8f:6b:
47:68:02:3b:60:a4:f4:28:d8:ee:80:4c:66:76:95:
bf:37:de:a3:3a:4d:7a:c2:a5:a1:6a:b5:26:f7:34:
a8:54:d2:84:18:51:21:d1:38:25:e6:4b:d4:07:e0:
a3:13:d2:23:2f:1e:77:12:14:c1:73:67:90:f7:8a:
70:e9:6f:5a:33:e9:60:eb:e7:ec:1e:a2:12:a9:29:
f1:16:73:96:b7:9d:11:38:46:4d:99:2e:34:8c:fb:
2f:8f:3e:ed:7b:af:4f:a2:8a:41:c1:f0:66:6b:56:
a0:06:2e:13:4f:85:5a:93:96:ff:43:c3:34:f6:96:
5d:e1:1b:ec:f8:2a:41:44:23:13:1a:44:5c:9d:3f:
4d:4f:fb:4b:f1:fd:68:e5:e8:5c:a6:68:12:cf:f2:
dc:88:28:50:7e:21:81:62:61:e8:d8:68:b8:bd:4e:
f9:fa:f9:f7:ad:19:43:1b:39:c6:8e:2f:6c:93:20:
08:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D5:96:CB:0A:98:C4:04:9B:CE:2B:BF:29:80:DD:FD:91:24:15:69
X509v3 Authority Key Identifier:
keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3132312e302f32342d3234203d3e2034373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.121.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:14:96:2b:c8:df:d2:46:5c:9e:3d:2d:c3:75:1a:8c:77:38:
c4:69:b5:5d:72:f0:43:3f:f4:b4:49:15:93:31:1b:cd:f8:fe:
77:e1:22:f1:43:1d:55:1a:af:8b:c2:a0:f1:55:cf:ea:d1:7f:
f7:20:53:e2:8d:de:10:87:f0:4a:16:98:c2:7e:b3:75:07:49:
e9:b6:42:20:a2:bb:b3:18:8f:01:60:0c:08:4d:2b:87:81:2a:
cf:7a:3d:b2:22:03:66:b9:37:7c:66:54:58:ab:9b:a3:5d:89:
f3:96:38:93:5d:c2:b9:03:48:ae:13:cf:62:6f:1f:0c:22:6d:
e0:03:1d:a4:6c:9b:29:6a:9b:d8:79:1b:53:0c:6d:e4:db:f3:
cc:09:68:ce:a0:59:09:55:ec:ba:58:53:48:a7:eb:61:4c:b9:
9b:13:8c:85:39:39:ed:f4:ef:47:8d:f3:e1:68:2e:54:0b:5b:
05:79:bb:2e:8d:ac:c8:df:c6:76:40:8a:e3:23:72:84:ba:2e:
93:03:ea:34:3d:51:c0:6f:15:8c:98:cc:eb:98:e5:71:47:43:
1e:cf:cf:3d:1f:b7:d1:3e:5e:f3:6f:04:ca:7d:4f:a9:da:97:
70:6a:10:16:3c:39:55:9f:e8:9e:1d:64:d4:d4:22:85:e6:ef:
66:35:f5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:15:41 2026 by rpki-client