
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32332d3233203d3e203234353235.roa
File: 3131342e3139392e39362e302f32332d3233203d3e203234353235.roa (raw, json)
Hash identifier: dCqIlCdzdSLtpZ0zWUf9SnZ5FgjfEK8JkSOkshJO3F8=
Subject key identifier: 0A:53:EC:94:A6:8A:95:AD:9F:78:D1:17:20:04:5D:FE:8E:3D:93:BE
Certificate issuer: /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial: 4F2C22123826C43D0B7B68B7CD5A683E865390A4
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32332d3233203d3e203234353235.roa
Signing time: Sun 03 May 2026 03:08:43 +0000
ROA not before: Sun 03 May 2026 03:03:43 +0000
ROA not after: Sun 02 May 2027 03:08:43 +0000
asID: 24525
IP address blocks: 114.199.96.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:2c:22:12:38:26:c4:3d:0b:7b:68:b7:cd:5a:68:3e:86:53:90:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
Validity
Not Before: May 3 03:03:43 2026 GMT
Not After : May 2 03:08:43 2027 GMT
Subject: CN=0A53EC94A68A95AD9F78D11720045DFE8E3D93BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ff:b1:ec:a3:c6:ea:36:86:ff:e8:fb:b5:cd:
4a:47:bc:f0:03:36:52:1e:57:a4:70:5c:d0:e9:aa:
2d:d4:ba:88:7e:3f:52:fd:be:a4:97:98:4e:ee:2a:
88:96:26:07:35:6f:a6:8a:ba:83:ef:de:ba:ff:d7:
65:52:85:74:c2:4d:a9:33:d7:48:75:fd:c0:c6:d0:
70:5a:22:83:0e:e7:7a:1f:48:f2:80:e9:a1:14:fd:
5a:7e:91:55:29:2b:4b:5a:6a:3c:94:37:f1:30:a4:
03:27:91:8a:f3:84:f2:da:6a:cf:79:35:4b:09:1a:
c3:5b:a6:98:11:4b:44:66:b1:87:49:91:41:c1:5d:
7f:66:7a:04:b3:9b:93:68:ab:2c:b5:3e:00:d4:6a:
28:15:24:41:2f:75:91:7b:65:69:6a:27:6d:80:42:
a5:43:ae:fb:d2:d8:ea:9f:b9:b5:9a:d0:aa:f5:b3:
38:cc:c3:9d:03:6b:ba:25:e1:a4:76:7b:9a:43:87:
a7:76:b3:bc:f5:53:51:83:0b:6d:ed:40:60:5e:ba:
7b:9b:81:3f:02:e5:a1:5b:a2:07:80:17:3b:d3:3f:
32:84:c8:51:4a:90:f8:97:e4:a7:1f:da:50:37:8d:
33:74:ae:eb:7c:d8:0d:ca:35:fc:25:37:dc:ac:81:
d4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:53:EC:94:A6:8A:95:AD:9F:78:D1:17:20:04:5D:FE:8E:3D:93:BE
X509v3 Authority Key Identifier:
keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32332d3233203d3e203234353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.96.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:c5:2d:d9:52:7d:25:77:31:f9:f3:0b:58:de:de:6c:4d:02:
a7:37:c4:82:59:da:8d:35:5e:ad:67:85:7e:89:fa:cc:5a:df:
49:5b:22:89:41:90:24:f3:af:7d:d1:38:9d:31:be:74:17:a5:
e8:8c:6f:89:2e:5c:5e:d1:79:06:fd:52:fc:22:94:bd:5d:a2:
f3:4c:cf:be:e2:71:27:68:b6:49:ba:d2:0b:bf:05:7d:4b:36:
11:60:98:f5:f0:d2:c7:ea:eb:07:16:9e:e8:79:db:41:09:42:
e5:74:46:3a:6a:8e:c2:53:75:86:8d:c1:be:2f:43:be:05:85:
1c:85:3b:6f:97:cd:75:2f:05:7a:5b:9c:d1:15:d8:08:cf:19:
71:8e:6d:f6:18:8e:32:d2:5a:52:fa:d0:db:53:d3:d1:2a:86:
a0:1c:d4:0d:46:80:f2:54:52:f3:d9:d7:e0:2c:21:06:d3:9b:
87:fa:23:4e:df:c8:9a:41:b1:ce:dd:f9:90:c8:1f:97:c6:6a:
c1:cc:31:9d:c7:f0:15:20:3a:a0:10:26:37:9b:7d:f3:ba:98:
75:b8:30:32:35:d3:d3:69:53:a3:97:c6:54:dd:54:34:17:b9:
b3:07:a8:8b:48:cf:28:ef:4b:b0:e6:16:0b:6b:96:81:5d:59:
01:25:25:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:39:57 2026 by rpki-client