
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32342d3234203d3e203234353235.roa
File: 3131342e3139392e39362e302f32342d3234203d3e203234353235.roa (raw, json)
Hash identifier: JU1tL9Iq9eK5WaLmdJGaESV8Inrt4T8ohx22l3Md5y4=
Subject key identifier: F1:B5:05:6A:2D:08:32:B2:47:9A:8D:14:B2:D3:B3:5B:69:CA:3B:A0
Certificate issuer: /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial: 3921A8670E299EDD499AEB0459B474BC6A7828A7
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32342d3234203d3e203234353235.roa
Signing time: Sun 03 May 2026 03:08:54 +0000
ROA not before: Sun 03 May 2026 03:03:54 +0000
ROA not after: Sun 02 May 2027 03:08:54 +0000
asID: 24525
IP address blocks: 114.199.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:21:a8:67:0e:29:9e:dd:49:9a:eb:04:59:b4:74:bc:6a:78:28:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
Validity
Not Before: May 3 03:03:54 2026 GMT
Not After : May 2 03:08:54 2027 GMT
Subject: CN=F1B5056A2D0832B2479A8D14B2D3B35B69CA3BA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a6:c6:ed:66:5e:81:52:16:a9:fc:44:26:38:
92:22:54:f9:15:bb:d2:c0:86:65:b1:e9:4d:d2:1a:
7c:ce:df:53:d5:6f:1b:af:18:c0:88:15:cb:b0:1b:
86:c2:2b:fa:af:1b:4f:f3:47:0f:4e:ff:bd:f4:00:
60:96:c1:e7:80:fb:f4:c6:8e:39:8f:28:d8:7f:8c:
1b:2c:67:d4:7d:f8:e7:ae:be:16:f5:c9:4f:34:ce:
e9:65:08:d7:e6:9e:b9:7c:4f:e0:a8:3d:18:1b:5a:
e6:d1:97:4e:3c:e8:c3:8d:d4:9a:22:20:3c:ae:a4:
48:95:5c:c4:e2:6e:41:38:1b:a1:c7:eb:cc:07:37:
26:da:f2:b8:43:00:d0:a4:90:70:52:03:c8:10:9d:
65:05:68:10:4a:0e:17:92:0c:43:d1:4b:24:75:14:
65:f6:ea:15:16:cf:89:68:53:91:6c:3d:6d:14:31:
ef:74:d1:6f:a1:3f:66:87:7e:5d:8c:a6:2f:c5:ce:
20:b3:7a:77:b5:69:5b:6a:d2:be:a0:e0:a7:73:ed:
dc:c6:41:dd:04:fb:a0:c0:49:6c:2c:20:75:d3:4c:
3e:82:03:39:59:b9:46:cc:48:e6:2c:4b:4c:99:f5:
aa:9f:9d:d0:49:83:7d:a2:f9:ef:36:86:92:fd:5c:
b7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B5:05:6A:2D:08:32:B2:47:9A:8D:14:B2:D3:B3:5B:69:CA:3B:A0
X509v3 Authority Key Identifier:
keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39362e302f32342d3234203d3e203234353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.96.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:06:1d:6f:6d:de:64:e6:83:cd:95:04:c5:4b:ac:e1:03:38:
64:a4:97:df:ef:04:99:af:09:81:4e:2c:6d:22:dd:11:a8:56:
5c:e5:cd:ce:71:28:28:e3:c0:14:45:60:95:8c:51:54:68:83:
eb:e6:1c:07:a5:bc:bf:8a:70:18:58:7d:9a:84:4e:2e:76:cd:
18:d1:45:bd:90:ba:87:b1:8c:3d:8c:94:b8:15:29:89:9b:e1:
17:e0:09:2e:b9:56:27:77:b4:6e:63:2e:9a:db:87:c1:a6:25:
6d:f6:3d:4a:df:89:7a:c6:aa:77:d6:39:f2:8b:17:2f:70:b9:
5b:8a:2e:10:58:35:4b:d8:42:d9:1f:31:ed:d2:ca:c1:f7:64:
1d:c9:cb:b5:df:06:e9:13:30:df:f0:98:82:3d:d7:e6:0c:c2:
ac:60:b5:ea:03:ad:0a:81:3b:2c:94:33:14:d9:1e:2f:06:5a:
fc:43:76:14:39:b7:6b:a5:1f:ba:cf:c5:07:b1:5b:c5:9b:2b:
58:a9:ac:4c:de:3b:ed:1f:5d:6b:a6:18:81:b5:9a:cc:bb:8a:
0a:fd:72:77:a1:26:18:b0:8f:6e:52:30:06:b4:a5:53:a5:13:
65:47:2b:3b:b1:93:cb:e1:7c:6c:b0:67:0e:8f:fe:7d:4f:61:
c4:b2:67:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:47 2026 by rpki-client