
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e36342e302f31392d3234203d3e203435373836.roa
File: 3131312e36372e36342e302f31392d3234203d3e203435373836.roa (raw, json)
Hash identifier: U2ap+e12vTMaTWTUslebQCqX7KlurU+JCU+tN10AEBc=
Subject key identifier: 70:0B:C0:21:F6:A2:78:23:94:86:1C:EA:47:67:FC:1D:FF:36:26:DE
Certificate issuer: /CN=BCD5E05E570F2280ECEF33171EB7ADC87DF556D8
Certificate serial: 4F9F86D7C25433FA2A0573299527DD3D0DC5F085
Authority key identifier: BC:D5:E0:5E:57:0F:22:80:EC:EF:33:17:1E:B7:AD:C8:7D:F5:56:D8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e36342e302f31392d3234203d3e203435373836.roa
Signing time: Sun 03 May 2026 03:13:25 +0000
ROA not before: Sun 03 May 2026 03:08:25 +0000
ROA not after: Sun 02 May 2027 03:13:25 +0000
asID: 45786
IP address blocks: 111.67.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.crl
rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:00:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:9f:86:d7:c2:54:33:fa:2a:05:73:29:95:27:dd:3d:0d:c5:f0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCD5E05E570F2280ECEF33171EB7ADC87DF556D8
Validity
Not Before: May 3 03:08:25 2026 GMT
Not After : May 2 03:13:25 2027 GMT
Subject: CN=700BC021F6A2782394861CEA4767FC1DFF3626DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ea:5d:d1:4a:0b:1d:fe:2d:b7:df:f7:52:3e:
24:3b:8b:c5:d2:52:43:d1:a4:58:33:79:6c:4a:ea:
ca:33:84:22:61:58:17:21:5f:5e:c5:eb:c2:07:98:
83:4e:7e:bc:98:03:10:ec:1b:c3:f0:bd:b3:3e:bf:
ea:80:c6:80:20:c4:b0:bc:2a:c7:b3:5a:df:0f:59:
78:a9:9b:67:a7:ba:49:c0:81:6e:1e:5e:35:ed:7d:
62:14:09:da:ea:93:31:9c:0d:8b:41:a7:40:6c:71:
8f:b6:fa:f5:bd:8f:a0:b6:c0:34:b8:2b:f4:c5:ce:
49:00:e8:72:cd:c0:67:29:4d:5f:fc:9d:06:f7:2d:
de:e6:cb:dd:b1:e3:07:a1:57:8c:ca:7c:9b:db:e8:
96:4c:c4:21:84:5d:16:3c:31:ba:f4:da:78:a7:45:
cf:00:55:d7:3e:0f:ba:98:46:cb:14:32:05:a2:fa:
5d:3d:da:0e:cc:9c:7f:f8:49:1d:34:54:76:45:53:
e2:f6:3a:8f:a1:9b:b2:c8:db:a5:e8:f6:c8:56:99:
79:51:45:ac:f2:71:a6:7c:0d:29:5c:12:5c:46:9a:
e3:e9:d1:92:d0:e8:4f:ad:7d:3a:30:b5:9d:a8:5a:
fb:61:4d:b1:f7:15:bf:a0:4d:61:52:ca:31:e6:d3:
e2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0B:C0:21:F6:A2:78:23:94:86:1C:EA:47:67:FC:1D:FF:36:26:DE
X509v3 Authority Key Identifier:
keyid:BC:D5:E0:5E:57:0F:22:80:EC:EF:33:17:1E:B7:AD:C8:7D:F5:56:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3131312e36372e36342e302f31392d3234203d3e203435373836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.67.64.0/19
Signature Algorithm: sha256WithRSAEncryption
67:8b:7d:d1:30:19:06:43:f8:2d:19:a7:a2:43:b1:f6:ab:ba:
08:71:94:48:d2:95:af:0f:26:0c:6f:93:de:be:4b:60:a8:57:
26:bc:5e:5c:8b:c1:0d:4f:5f:93:d4:5e:ed:7c:8e:01:d9:df:
f9:2a:92:eb:c7:3c:06:0a:cc:a6:f7:ed:2e:e2:97:63:ba:87:
6c:3e:c8:f9:fa:7b:e3:d9:c0:c3:14:2d:a5:ed:06:84:e2:39:
ef:79:50:02:f9:30:b1:03:2a:08:8e:0e:63:22:28:28:b6:3b:
55:07:25:8b:8e:ff:ea:66:68:9a:5c:3b:d9:aa:f2:dd:23:e6:
95:c5:b7:c4:f9:6b:a9:ca:6a:5d:76:29:ac:19:d5:7c:56:18:
c1:f0:83:b0:3b:cc:3c:59:96:16:da:ba:73:db:bc:3c:7b:0a:
78:1c:70:ab:89:02:9e:ba:e8:5d:c7:ca:3c:43:a3:cf:4c:1d:
8b:8c:29:fa:bf:96:f9:52:51:38:55:76:fb:91:dd:b3:1c:c8:
0d:8b:b9:fd:7d:73:7e:88:e1:f3:91:92:51:fd:85:1d:08:1c:
ca:f1:6a:bd:d0:68:a4:ae:5a:0e:ec:03:ad:d1:62:46:25:5d:
15:df:b8:b7:b1:b6:4c:67:6c:53:74:24:d5:ac:e0:0f:e9:f6:
e0:33:41:31
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUT5+G18JUM/oqBXMplSfdPQ3F8IUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNENUUwNUU1NzBGMjI4MEVDRUYzMzE3MUVCN0FEQzg3
REY1NTZEODAeFw0yNjA1MDMwMzA4MjVaFw0yNzA1MDIwMzEzMjVaMDMxMTAvBgNV
BAMTKDcwMEJDMDIxRjZBMjc4MjM5NDg2MUNFQTQ3NjdGQzFERkYzNjI2REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU6l3RSgsd/i233/dSPiQ7i8XS
UkPRpFgzeWxK6sozhCJhWBchX17F68IHmINOfryYAxDsG8PwvbM+v+qAxoAgxLC8
KsezWt8PWXipm2enuknAgW4eXjXtfWIUCdrqkzGcDYtBp0BscY+2+vW9j6C2wDS4
K/TFzkkA6HLNwGcpTV/8nQb3Ld7my92x4wehV4zKfJvb6JZMxCGEXRY8Mbr02nin
Rc8AVdc+D7qYRssUMgWi+l092g7MnH/4SR00VHZFU+L2Oo+hm7LI26Xo9shWmXlR
RazycaZ8DSlcElxGmuPp0ZLQ6E+tfTowtZ2oWvthTbH3Fb+gTWFSyjHm0+LhAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUcAvAIfaieCOUhhzqR2f8Hf82Jt4wHwYDVR0j
BBgwFoAUvNXgXlcPIoDs7zMXHretyH31VtgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTUwZGE0NDctYTEzOC00NjI1LWE0MjAtYTcxMWFjMjQzNTE5LzAvQkNENUUwNUU1
NzBGMjI4MEVDRUYzMzE3MUVCN0FEQzg3REY1NTZEOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CQ0Q1RTA1RTU3MEYyMjgwRUNFRjMzMTcxRUI3QURDODdERjU1
NkQ4LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U1MGRhNDQ3LWExMzgtNDYyNS1h
NDIwLWE3MTFhYzI0MzUxOS8wLzMxMzEzMTJlMzYzNzJlMzYzNDJlMzAyZjMxMzky
ZDMyMzQyMDNkM2UyMDM0MzUzNzM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAVvQ0AwDQYJKoZIhvcN
AQELBQADggEBAGeLfdEwGQZD+C0Zp6JDsfarughxlEjSla8PJgxvk96+S2CoVya8
XlyLwQ1PX5PUXu18jgHZ3/kqkuvHPAYKzKb37S7il2O6h2w+yPn6e+PZwMMULaXt
BoTiOe95UAL5MLEDKgiODmMiKCi2O1UHJYuO/+pmaJpcO9mq8t0j5pXFt8T5a6nK
al12KawZ1XxWGMHwg7A7zDxZlhbaunPbvDx7CngccKuJAp666F3HyjxDo89MHYuM
Kfq/lvlSUThVdvuR3bMcyA2Luf19c36I4fORklH9hR0IHMrxar3QaKSuWg7sA63R
YkYlXRXfuLextkxnbFN0JNWs4A/p9uAzQTE=
-----END CERTIFICATE-----
Generated at Wed May 13 06:58:18 2026 by rpki-client