
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f31392d3139203d3e203234353235.roa
File: 3131342e3139392e39362e302f31392d3139203d3e203234353235.roa (raw, json)
Hash identifier: 9h1nrNVl38GUoCneZCisbT8/bFdZLlI+9x7ORbEiDTY=
Subject key identifier: 4F:7D:E1:64:74:FA:CB:C3:49:85:A1:E8:5E:54:A5:8E:27:DD:06:18
Certificate issuer: /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial: 315E428F9EEF16780819C992BB0B109F480C2D69
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f31392d3139203d3e203234353235.roa
Signing time: Sun 03 May 2026 03:09:01 +0000
ROA not before: Sun 03 May 2026 03:04:01 +0000
ROA not after: Sun 02 May 2027 03:09:01 +0000
asID: 24525
IP address blocks: 114.199.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:5e:42:8f:9e:ef:16:78:08:19:c9:92:bb:0b:10:9f:48:0c:2d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
Validity
Not Before: May 3 03:04:01 2026 GMT
Not After : May 2 03:09:01 2027 GMT
Subject: CN=4F7DE16474FACBC34985A1E85E54A58E27DD0618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:12:ac:02:8b:34:0a:98:93:47:37:42:25:43:
63:d5:aa:72:81:8a:5d:76:74:c2:b1:57:f0:04:c9:
69:10:4b:c0:5d:fb:1d:c7:03:c0:dc:be:a7:ea:8a:
81:b7:f3:bf:67:50:e8:4d:8a:88:90:b8:42:c3:99:
19:c2:9b:a8:09:7d:cf:a3:8a:d0:ad:80:02:7e:fe:
dd:b2:14:92:a4:1b:96:63:ce:c9:12:ac:2f:95:05:
dd:12:4d:db:71:66:ee:22:c2:52:a2:71:a4:de:36:
5e:b1:4c:a9:4e:9d:9f:03:73:7d:c5:f1:f0:35:f5:
90:d4:4a:68:8f:a3:d0:25:58:f3:77:1f:40:14:3e:
59:af:e4:e4:d6:80:eb:98:36:83:f7:b4:11:80:2b:
c2:be:36:8f:81:11:41:37:6e:e4:19:03:50:d8:b9:
39:78:19:b3:fd:12:5b:a5:6c:7f:16:3f:85:46:7b:
ee:af:cb:44:af:f9:cb:46:3f:0e:37:48:ba:bc:61:
82:39:ea:fd:15:50:44:c3:a0:3a:d6:6e:34:82:93:
47:92:eb:03:b7:c9:a8:48:ce:29:1c:85:9c:bf:aa:
88:e2:52:8d:5e:f5:52:18:a2:b6:f7:73:06:f6:37:
a4:99:3d:c6:93:06:ee:29:1d:30:95:56:1d:dc:4d:
0d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7D:E1:64:74:FA:CB:C3:49:85:A1:E8:5E:54:A5:8E:27:DD:06:18
X509v3 Authority Key Identifier:
keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f31392d3139203d3e203234353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.96.0/19
Signature Algorithm: sha256WithRSAEncryption
5b:e1:63:f9:29:62:45:1e:a7:32:35:c7:90:c1:51:61:73:64:
b0:f6:3a:ed:ad:c3:3f:b2:c8:29:a8:e1:a8:09:ae:c4:b8:a4:
23:75:a9:03:19:ba:25:9d:69:46:8c:d1:04:4e:7e:fc:f8:57:
55:a0:81:db:6d:6f:63:72:59:d7:24:9f:2d:5c:d6:31:f1:a0:
b8:bc:e6:f9:4d:9c:51:29:c9:2a:22:a3:9c:3d:fc:e1:f4:f2:
30:1d:ed:7a:1b:76:34:9d:6a:94:93:b4:a2:3c:8a:c5:25:9c:
67:b5:27:0f:69:b3:16:98:72:31:92:12:b3:7f:8d:a0:63:5a:
c2:8b:b8:85:cb:46:66:13:ed:0b:2d:4a:40:63:cb:3a:8b:77:
23:c5:93:33:fa:01:10:d3:91:67:a5:7f:cb:5c:f6:df:12:b3:
c9:35:4d:fe:93:f1:70:a5:26:ce:19:26:db:da:18:44:0c:d1:
a4:14:03:9d:bd:ed:2f:73:8e:66:6e:ee:fd:6c:e0:53:25:bd:
f6:bf:3c:05:a3:bc:b3:32:7b:f9:35:36:e0:1f:2c:be:27:ef:
fb:f5:a8:65:78:dd:ae:eb:ab:dd:1f:9c:78:61:62:1b:1b:fc:
7d:00:0f:88:28:1b:81:f0:e8:81:42:9a:b8:bb:f6:8e:00:11:
7b:a8:4e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:47:42 2026 by rpki-client