
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32322d3232203d3e203234353235.roa
File: 3131342e3139392e39362e302f32322d3232203d3e203234353235.roa (raw, json)
Hash identifier: N8LW6IpE9ZLJDpGRrKQfV51Sed3FCPx+CKTrqPh/ifs=
Subject key identifier: 29:CE:83:6C:A5:53:FC:D3:99:BD:53:BE:9A:98:0C:C4:44:B1:98:6A
Certificate issuer: /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial: 6729A4F99D41B903D7CF201EBA31D3E46AE9118A
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32322d3232203d3e203234353235.roa
Signing time: Sun 03 May 2026 03:08:53 +0000
ROA not before: Sun 03 May 2026 03:03:53 +0000
ROA not after: Sun 02 May 2027 03:08:53 +0000
asID: 24525
IP address blocks: 114.199.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:29:a4:f9:9d:41:b9:03:d7:cf:20:1e:ba:31:d3:e4:6a:e9:11:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
Validity
Not Before: May 3 03:03:53 2026 GMT
Not After : May 2 03:08:53 2027 GMT
Subject: CN=29CE836CA553FCD399BD53BE9A980CC444B1986A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b1:84:64:94:a6:2b:48:be:e5:a1:81:3f:c7:
a7:6d:88:f7:d2:f8:37:4e:09:5c:55:48:34:65:53:
60:b8:86:d5:fb:1e:4d:b6:84:df:18:c2:04:1b:72:
4a:6f:2c:7e:67:67:83:c8:cc:70:17:5a:18:db:2c:
0c:99:f9:c7:e1:6f:57:91:b0:e9:9d:e8:ad:3b:d7:
19:ad:b9:02:05:e8:88:6d:fb:75:bf:4c:0a:df:1c:
63:99:01:30:bf:d0:d4:af:48:dd:ac:a4:89:8e:f7:
5d:37:86:50:44:75:a7:48:50:92:ce:23:8e:ad:a4:
aa:fc:88:2b:0b:95:b5:1c:92:09:6f:33:04:2f:51:
80:09:18:9a:a5:5a:9a:92:e1:6e:3f:be:7b:ef:bb:
01:58:80:2f:84:7a:3b:7d:64:33:4f:df:d7:03:d5:
95:b8:8d:9a:e6:47:d6:78:ab:63:77:15:c6:89:1c:
be:5c:42:12:34:b8:6f:21:5d:04:76:67:eb:bc:09:
6c:b1:fe:5c:9c:a3:dd:79:ac:d4:21:ae:0d:e0:c8:
ef:ae:73:07:58:b2:fd:12:65:c6:ab:d2:c9:c9:b7:
96:1a:02:e7:09:11:84:d7:6c:82:46:c4:36:33:e3:
6d:5e:80:2e:e3:ad:b6:b6:cd:11:a1:0d:74:73:a2:
98:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CE:83:6C:A5:53:FC:D3:99:BD:53:BE:9A:98:0C:C4:44:B1:98:6A
X509v3 Authority Key Identifier:
keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32322d3232203d3e203234353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.96.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:16:dd:2d:cb:0b:50:d8:43:3c:e3:65:1e:6c:a4:0b:a3:46:
c8:e7:32:ec:40:7c:a0:64:73:6b:31:af:ff:7e:48:7c:9a:ab:
dd:9c:ea:bf:61:42:0d:0d:af:35:cb:93:a9:ca:29:40:97:1e:
93:dc:d1:5a:ec:3d:8f:70:13:25:4b:f1:e9:38:35:3c:ba:03:
39:da:d4:9e:e7:96:ef:44:32:36:67:df:37:30:06:9f:8f:54:
57:18:db:79:c7:8b:ce:bf:54:05:57:f9:82:25:70:f6:2a:3a:
3a:cc:12:d4:b4:3f:78:c9:87:be:89:92:bd:7e:c1:4c:0a:9b:
91:c9:8d:94:71:f2:4f:ea:88:8e:87:8c:c3:b4:0e:f7:e4:73:
b8:cb:77:1f:89:0a:a7:2a:ff:1c:10:16:b7:ce:00:4a:d6:03:
85:6f:8f:73:b8:51:c4:66:93:8f:8e:e8:74:99:75:a0:cc:98:
7f:27:c9:e5:32:ff:ef:73:4b:64:88:35:29:7b:6e:7c:ad:c7:
e1:0d:f6:05:cb:e4:fa:a5:45:5d:6e:8b:e5:06:99:fa:81:e7:
04:8e:5b:23:04:ec:f6:a6:85:f9:19:e4:99:d7:bf:c9:35:30:
ad:1f:f5:da:8b:6e:da:5f:b4:3a:cc:db:2c:72:8f:d5:0d:fc:
0c:32:20:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:28 2026 by rpki-client