
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/31342e3130322e34362e302f32342d3234203d3e20313531353532.roa
File: 31342e3130322e34362e302f32342d3234203d3e20313531353532.roa (raw, json)
Hash identifier: QDc5KnPsd+1W5VTMbiCmcCYlaBNYf/gPBi8MwRRhJlk=
Subject key identifier: C7:87:E0:EC:25:F3:C6:96:B1:33:00:AE:D1:B5:D3:D0:CE:77:87:21
Certificate issuer: /CN=67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00
Certificate serial: 520B8C13777F487F6560D4A99D23DD4C70574E66
Authority key identifier: 67:AD:5E:A3:AE:9E:CB:1B:B4:4A:A1:00:8D:70:40:BE:02:61:3E:00
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/31342e3130322e34362e302f32342d3234203d3e20313531353532.roa
Signing time: Sun 03 May 2026 03:10:15 +0000
ROA not before: Sun 03 May 2026 03:05:15 +0000
ROA not after: Sun 02 May 2027 03:10:15 +0000
asID: 151552
IP address blocks: 14.102.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl
rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:0b:8c:13:77:7f:48:7f:65:60:d4:a9:9d:23:dd:4c:70:57:4e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00
Validity
Not Before: May 3 03:05:15 2026 GMT
Not After : May 2 03:10:15 2027 GMT
Subject: CN=C787E0EC25F3C696B13300AED1B5D3D0CE778721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:be:42:d4:c4:46:40:94:da:83:e3:bb:75:d2:
bb:e4:50:4e:75:b6:2b:eb:c5:1d:53:9d:41:f5:49:
a7:4d:b9:ac:d3:08:76:42:63:c7:7b:a3:46:18:35:
6b:04:5a:17:d8:66:08:31:ed:f0:b8:20:3b:42:7e:
c3:e0:6b:52:1a:c4:43:ef:c1:9b:f3:8f:98:4e:ab:
87:a0:c9:c7:60:98:d1:63:0d:ae:5b:20:90:3f:e2:
31:e7:a5:32:c9:0a:eb:e4:e3:75:fe:64:19:a8:77:
e6:30:c0:7c:8f:cd:5e:97:ee:af:d6:7e:15:9d:55:
6a:c1:80:16:2d:8b:60:7d:59:d8:d7:52:a9:14:17:
b7:22:cb:c0:91:0b:ba:37:33:7a:b7:4a:ed:45:83:
64:ec:28:ac:7d:3c:7e:63:4e:1a:83:02:d5:6d:f8:
7e:e3:76:12:ee:d9:99:b5:7a:a9:45:1d:d8:2e:ea:
04:55:94:27:11:ff:cb:51:66:f9:ff:36:65:0b:2c:
b3:08:29:59:e4:9b:ae:a2:66:42:a4:8c:80:f1:cb:
51:39:73:a8:63:36:ff:15:fe:8f:e2:52:42:10:97:
ff:cc:bc:9e:a7:1b:d3:dd:cd:6a:ee:ee:4b:bc:43:
4b:b3:05:d3:84:88:9f:28:fe:c4:fa:a9:b2:e6:69:
67:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:87:E0:EC:25:F3:C6:96:B1:33:00:AE:D1:B5:D3:D0:CE:77:87:21
X509v3 Authority Key Identifier:
keyid:67:AD:5E:A3:AE:9E:CB:1B:B4:4A:A1:00:8D:70:40:BE:02:61:3E:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67AD5EA3AE9ECB1BB44AA1008D7040BE02613E00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7d15d53-a4b4-4435-a1da-52d0212ef33d/0/31342e3130322e34362e302f32342d3234203d3e20313531353532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.46.0/24
Signature Algorithm: sha256WithRSAEncryption
36:25:84:26:87:5e:a1:c1:a1:10:0f:62:0f:c2:f5:f5:1d:27:
f1:bd:7a:75:86:3c:04:1a:64:26:1e:71:91:e7:bc:0f:86:f5:
b3:c2:3b:c2:8a:cd:62:6f:b9:9b:01:88:1e:da:9f:4d:42:4a:
7e:99:dc:b1:53:e9:2d:c9:a7:4c:17:78:b0:c8:c9:ae:f1:e9:
2b:a0:c6:55:ae:bc:75:d0:e2:0e:9d:24:2a:68:01:f4:86:41:
29:37:f2:36:b7:b6:66:c1:0a:63:3f:13:e3:d9:c2:d3:4a:21:
49:22:e5:43:62:1b:34:76:71:45:d5:66:e5:87:2b:bd:09:4a:
0b:58:77:0c:59:b1:28:98:30:94:85:32:83:5d:5d:87:40:20:
c8:71:fd:7e:ca:31:06:08:21:23:af:7c:d0:92:06:50:48:f7:
3d:68:b5:ab:53:67:fc:f5:6e:f5:87:7c:dc:e5:ad:f3:cc:17:
5b:ca:fd:78:76:75:21:b1:8f:e2:71:6c:8e:95:5e:af:65:52:
90:0f:0b:f6:b5:f5:36:41:73:3c:53:32:f0:0b:be:b8:37:6a:
60:5d:6d:bf:66:fe:1e:41:14:a9:e7:f9:7f:1d:30:c0:bd:77:
21:1a:99:9f:b0:79:a4:e3:ea:9b:35:3a:08:d5:13:fa:8c:fa:
95:c3:44:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:17:10 2026 by rpki-client