
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39392e302f32342d3234203d3e203234353235.roa
File: 3131342e3139392e39392e302f32342d3234203d3e203234353235.roa (raw, json)
Hash identifier: Cxr+C6wXYlNsfVGNUDMNfWlZArT0WdISgR4nNGYHvyw=
Subject key identifier: A3:27:3F:91:99:0A:E4:BD:D3:A6:C7:93:61:4A:2E:A3:0A:55:94:4C
Certificate issuer: /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial: 14BBFDB9311C448948B5BD3F845D2E13048EA8B1
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39392e302f32342d3234203d3e203234353235.roa
Signing time: Sun 03 May 2026 03:08:46 +0000
ROA not before: Sun 03 May 2026 03:03:46 +0000
ROA not after: Sun 02 May 2027 03:08:46 +0000
asID: 24525
IP address blocks: 114.199.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:bb:fd:b9:31:1c:44:89:48:b5:bd:3f:84:5d:2e:13:04:8e:a8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
Validity
Not Before: May 3 03:03:46 2026 GMT
Not After : May 2 03:08:46 2027 GMT
Subject: CN=A3273F91990AE4BDD3A6C793614A2EA30A55944C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:56:3e:87:aa:22:ff:3c:af:09:b1:fe:cc:5a:
ad:e5:cc:27:eb:f0:8f:74:73:b6:91:a1:80:78:16:
e6:a6:77:1d:4a:63:d5:15:a1:a5:2f:1a:ca:7b:ab:
73:18:ba:86:b5:5c:aa:06:73:30:a5:26:81:50:cf:
45:50:38:27:12:65:47:94:f8:e4:60:7a:e4:68:d6:
00:a4:e8:a8:7f:5b:d0:92:95:87:5d:79:dd:3f:bd:
60:44:4d:34:1b:de:47:ca:f2:24:43:ac:c9:7a:6d:
c5:96:30:b4:e4:47:bd:88:ab:c9:3f:a0:01:03:89:
1f:d4:a3:20:c2:b6:e8:b5:9a:02:8c:b0:84:c0:5c:
4f:ed:05:2e:bf:4e:70:ba:41:cd:1b:0e:9f:05:a7:
43:2b:7f:de:bc:3d:77:e8:93:e2:69:e7:ef:9b:3b:
e1:46:63:15:fb:db:08:83:9c:84:6d:bd:ba:eb:a0:
57:7d:de:3c:5a:54:e3:8d:33:f4:fc:10:19:a2:4a:
45:73:85:e9:76:8d:5a:ed:36:a6:1f:5e:3d:46:39:
1b:1d:19:67:bd:e0:1d:83:91:0e:04:3d:85:cb:4c:
44:f7:2c:31:f1:b4:ec:e3:80:52:65:38:4e:29:22:
a3:b2:31:a5:7a:f8:4b:5f:1d:3f:35:4c:86:92:8e:
21:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:27:3F:91:99:0A:E4:BD:D3:A6:C7:93:61:4A:2E:A3:0A:55:94:4C
X509v3 Authority Key Identifier:
keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e39392e302f32342d3234203d3e203234353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.99.0/24
Signature Algorithm: sha256WithRSAEncryption
61:27:ce:3a:93:74:45:d8:60:48:3d:1f:99:91:e7:ae:ed:f7:
17:e5:14:e5:28:88:18:64:0d:ca:ef:14:de:53:cd:18:78:c2:
8a:d5:9a:9b:bd:c4:f0:ec:44:45:ec:91:49:b4:c3:b1:d2:fd:
e6:c1:b9:6d:fc:2a:9c:5e:5f:fb:b1:a4:19:4d:cf:51:79:fa:
6b:32:b3:ef:9e:7a:53:01:18:72:5c:fe:50:9f:d2:6d:55:6b:
fb:7b:9b:a0:e1:76:8f:48:45:97:88:79:d7:f8:b0:3c:f3:a9:
cd:ca:1c:36:12:2c:44:30:b9:a1:a0:5c:65:98:3e:fa:ee:24:
49:40:b6:40:fa:b4:39:94:28:94:70:b2:07:51:9b:83:e4:76:
15:ee:54:7a:53:84:fd:1c:66:88:82:e1:bf:76:7c:f2:7a:db:
7b:99:b1:c3:a4:bb:64:c6:fb:35:fe:57:bc:19:9e:dd:28:fb:
82:98:bc:08:fc:e9:91:50:63:9a:d1:ac:b2:75:dc:01:87:0b:
5f:9f:33:72:b5:fb:36:95:83:b8:b6:19:7b:98:65:aa:b0:68:
04:ea:2d:a8:33:00:f7:d9:a0:d7:ff:16:e7:d0:33:79:32:d2:
2b:e0:e6:a8:4e:48:d5:75:50:d2:7f:7a:63:98:6a:24:ac:9e:
92:46:d4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:09:50 2026 by rpki-client