
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e31362e302f32302d3234203d3e2034373837.roa
File: 3130312e35302e31362e302f32302d3234203d3e2034373837.roa (raw, json)
Hash identifier: +b5NqaJS6v9hXzvZigHVYiJMJdXpHZYJPG2i54V2Zkg=
Subject key identifier: B6:78:86:6A:A1:63:C2:CF:40:82:65:EA:FB:58:7C:56:8B:98:CB:DA
Certificate issuer: /CN=488A458129866D0E7DBFF7668D82664F584F8541
Certificate serial: 0915081C2F1047C8E7B9917833ECDE9DCE45D37A
Authority key identifier: 48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e31362e302f32302d3234203d3e2034373837.roa
Signing time: Sun 03 May 2026 03:15:09 +0000
ROA not before: Sun 03 May 2026 03:10:09 +0000
ROA not after: Sun 02 May 2027 03:15:09 +0000
asID: 4787
IP address blocks: 101.50.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl
rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:15:08:1c:2f:10:47:c8:e7:b9:91:78:33:ec:de:9d:ce:45:d3:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488A458129866D0E7DBFF7668D82664F584F8541
Validity
Not Before: May 3 03:10:09 2026 GMT
Not After : May 2 03:15:09 2027 GMT
Subject: CN=B678866AA163C2CF408265EAFB587C568B98CBDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:01:52:d2:5a:30:82:9c:88:53:6b:6b:5d:fe:
68:2c:bf:37:ce:93:7e:a3:30:13:73:41:61:d8:64:
fd:8b:6c:65:66:92:e6:09:7d:7f:96:ac:15:f0:9f:
56:d9:16:3c:5b:a9:82:29:00:85:88:9d:f3:26:c4:
ba:9d:f7:5d:4c:c1:73:be:93:16:d3:10:fb:3d:cc:
bc:a3:51:af:f3:2b:83:21:db:28:a2:f2:29:90:38:
ee:9e:20:6f:2f:72:f7:1b:45:cc:69:b0:f8:e3:07:
29:90:dc:3e:e5:45:9c:df:76:25:2f:9c:2a:48:ab:
50:ea:2e:c4:fe:58:dc:a0:c2:b7:e8:a7:11:92:eb:
86:a7:80:2b:1e:9d:38:4b:36:99:0e:78:d7:11:b6:
b4:df:f9:7f:34:4c:ad:2f:8c:0e:46:5c:5a:aa:01:
e4:4f:6e:34:ae:8b:e2:f5:4f:27:90:96:09:79:0e:
35:1a:a9:84:ef:1c:bd:69:9c:ad:fb:98:6d:9e:e7:
21:27:db:63:bc:22:59:84:f4:5b:9c:43:fa:85:99:
73:26:f9:4f:71:d9:14:d1:18:07:53:14:98:e5:20:
44:81:e8:e5:96:bb:d2:04:8d:5a:b3:cc:fe:8a:61:
50:b7:58:fc:a2:a1:18:77:d6:52:32:f4:0f:12:aa:
75:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:78:86:6A:A1:63:C2:CF:40:82:65:EA:FB:58:7C:56:8B:98:CB:DA
X509v3 Authority Key Identifier:
keyid:48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e31362e302f32302d3234203d3e2034373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.50.16.0/20
Signature Algorithm: sha256WithRSAEncryption
4a:ac:fd:40:25:9c:5f:12:17:61:05:f6:de:11:58:fc:bf:51:
84:91:35:44:be:6e:c2:59:a3:65:ff:0d:ea:16:1a:9a:be:fe:
40:36:5f:b8:79:91:24:e9:fd:4e:32:d6:00:48:cc:2d:72:7f:
52:eb:3c:32:6f:55:06:97:09:ad:68:53:7b:a5:44:e2:94:d4:
37:93:6e:36:a0:ad:0c:a8:65:fc:0c:39:67:8e:b5:16:75:9d:
a6:9c:41:b3:86:56:4d:44:db:90:2b:05:3f:dd:f5:96:e6:12:
99:1a:cb:f7:64:ce:16:04:32:08:cf:02:97:23:64:a3:ee:b3:
2f:e1:85:eb:b9:f8:f6:69:5d:70:a7:f6:6a:1f:4b:d2:84:eb:
11:c8:56:85:f0:04:f8:ec:05:70:68:e6:6c:da:25:1a:10:18:
0e:cd:6b:ba:2a:f4:55:66:54:49:ae:7c:22:00:14:04:41:b3:
d5:2e:c3:d0:89:15:e8:2d:65:da:19:8b:b8:be:25:21:a7:7f:
58:8c:e7:d0:be:14:2c:e5:48:9f:77:f1:67:d6:e4:06:38:72:
81:51:1a:89:47:0a:63:bd:86:42:a5:e2:4b:e2:3f:2a:9a:69:
9f:47:0e:12:e1:30:65:a2:3f:be:e1:56:fd:b0:c3:4c:53:c7:
0f:ce:2f:92
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUCRUIHC8QR8jnuZF4M+zenc5F03owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDg4QTQ1ODEyOTg2NkQwRTdEQkZGNzY2OEQ4MjY2NEY1
ODRGODU0MTAeFw0yNjA1MDMwMzEwMDlaFw0yNzA1MDIwMzE1MDlaMDMxMTAvBgNV
BAMTKEI2Nzg4NjZBQTE2M0MyQ0Y0MDgyNjVFQUZCNTg3QzU2OEI5OENCREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/AVLSWjCCnIhTa2td/mgsvzfO
k36jMBNzQWHYZP2LbGVmkuYJfX+WrBXwn1bZFjxbqYIpAIWInfMmxLqd911MwXO+
kxbTEPs9zLyjUa/zK4Mh2yii8imQOO6eIG8vcvcbRcxpsPjjBymQ3D7lRZzfdiUv
nCpIq1DqLsT+WNygwrfopxGS64angCsenThLNpkOeNcRtrTf+X80TK0vjA5GXFqq
AeRPbjSui+L1TyeQlgl5DjUaqYTvHL1pnK37mG2e5yEn22O8IlmE9FucQ/qFmXMm
+U9x2RTRGAdTFJjlIESB6OWWu9IEjVqzzP6KYVC3WPyioRh31lIy9A8SqnW1AgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUtniGaqFjws9AgmXq+1h8VouYy9owHwYDVR0j
BBgwFoAUSIpFgSmGbQ59v/dmjYJmT1hPhUEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZWE3MDI3MjYtYjJjNi00NmZjLTgyOTctMmRiZGVjNmQ2ZDVkLzAvNDg4QTQ1ODEy
OTg2NkQwRTdEQkZGNzY2OEQ4MjY2NEY1ODRGODU0MS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80ODhBNDU4MTI5ODY2RDBFN0RCRkY3NjY4RDgyNjY0RjU4NEY4
NTQxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE3MDI3MjYtYjJjNi00NmZjLTgy
OTctMmRiZGVjNmQ2ZDVkLzAvMzEzMDMxMmUzNTMwMmUzMTM2MmUzMDJmMzIzMDJk
MzIzNDIwM2QzZTIwMzQzNzM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARlMhAwDQYJKoZIhvcNAQEL
BQADggEBAEqs/UAlnF8SF2EF9t4RWPy/UYSRNUS+bsJZo2X/DeoWGpq+/kA2X7h5
kSTp/U4y1gBIzC1yf1LrPDJvVQaXCa1oU3ulROKU1DeTbjagrQyoZfwMOWeOtRZ1
naacQbOGVk1E25ArBT/d9ZbmEpkay/dkzhYEMgjPApcjZKPusy/hheu5+PZpXXCn
9mofS9KE6xHIVoXwBPjsBXBo5mzaJRoQGA7Na7oq9FVmVEmufCIAFARBs9Uuw9CJ
FegtZdoZi7i+JSGnf1iM59C+FCzlSJ938WfW5AY4coFRGolHCmO9hkKl4kviPyqa
aZ9HDhLhMGWiP77hVv2ww0xTxw/OL5I=
-----END CERTIFICATE-----
Generated at Wed May 13 01:40:57 2026 by rpki-client