
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3131362e3230362e3233362e302f32322d3234203d3e2034373837.roa
File: 3131362e3230362e3233362e302f32322d3234203d3e2034373837.roa (raw, json)
Hash identifier: mML8Y06xC1Ba28dmIO2VE5Ln2tzvvZV3niqEU4AWOB4=
Subject key identifier: 41:13:DD:A7:8D:1C:B0:67:B7:B9:E1:09:16:E7:13:25:7C:D2:C2:1B
Certificate issuer: /CN=488A458129866D0E7DBFF7668D82664F584F8541
Certificate serial: 4F7F13E81CA4EC023A20F9816629D87997EC2CA2
Authority key identifier: 48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3131362e3230362e3233362e302f32322d3234203d3e2034373837.roa
Signing time: Sun 03 May 2026 03:15:14 +0000
ROA not before: Sun 03 May 2026 03:10:14 +0000
ROA not after: Sun 02 May 2027 03:15:14 +0000
asID: 4787
IP address blocks: 116.206.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl
rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:7f:13:e8:1c:a4:ec:02:3a:20:f9:81:66:29:d8:79:97:ec:2c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488A458129866D0E7DBFF7668D82664F584F8541
Validity
Not Before: May 3 03:10:14 2026 GMT
Not After : May 2 03:15:14 2027 GMT
Subject: CN=4113DDA78D1CB067B7B9E10916E713257CD2C21B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:60:33:eb:eb:56:fb:3a:ce:b2:37:fe:c2:31:
29:be:58:cc:01:e7:96:95:7b:7e:fa:b8:ea:2d:4f:
36:d0:5b:e9:7c:98:25:dd:0d:90:93:e1:a3:0a:20:
ed:92:86:21:b1:83:d7:fe:5f:45:14:1e:4a:27:cd:
3e:ac:b2:92:5d:1d:c0:0e:78:ef:0d:96:fe:23:49:
48:4f:ad:12:db:b9:94:00:3e:6b:ff:8c:84:6e:90:
f8:ae:99:25:1e:6e:b5:16:1b:f1:a5:cf:68:2a:ef:
5c:cb:05:5b:71:33:4b:06:b3:de:30:99:b1:17:3f:
58:79:67:58:d1:6a:16:41:d9:a0:d9:ab:97:5e:b5:
cd:75:1e:86:11:69:9f:bb:fb:d9:a0:33:6e:4c:34:
a0:c9:72:e1:30:c5:93:a3:13:04:e5:77:01:57:0c:
8a:94:44:a2:fb:2f:0e:b3:3f:78:4a:86:69:43:20:
9b:2c:60:28:7d:1c:09:66:8b:8f:d9:de:7e:97:e4:
9e:92:69:c9:31:1c:10:72:18:95:24:0e:17:4c:2c:
f1:65:c3:79:f4:db:b8:9f:fc:bf:9b:17:b9:d5:87:
f9:c8:a2:c8:cb:b3:22:d3:c3:8b:65:97:9c:6b:c8:
93:a9:3d:a0:45:f0:8c:b9:f9:77:ad:ba:41:ac:1b:
5c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:13:DD:A7:8D:1C:B0:67:B7:B9:E1:09:16:E7:13:25:7C:D2:C2:1B
X509v3 Authority Key Identifier:
keyid:48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3131362e3230362e3233362e302f32322d3234203d3e2034373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.206.236.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:0e:a5:45:9a:cb:20:c8:90:0a:a5:0f:ae:d0:04:82:8d:16:
ab:58:21:74:79:e2:2d:ad:86:1b:59:79:38:ee:2b:1f:ca:04:
9d:9f:34:a8:56:6f:e5:b8:68:a7:66:f9:bd:d3:aa:ff:7a:10:
d9:68:87:65:75:07:2d:65:06:d4:bc:c0:c5:80:b9:f2:a0:df:
44:53:65:43:07:9a:46:46:04:d6:a7:d7:b3:47:e9:d5:5c:e3:
b0:6e:ea:5f:5b:37:06:af:d5:67:e2:79:22:07:c8:25:e0:41:
b0:52:45:8c:d2:95:02:a5:62:02:be:b2:84:6a:2b:b1:69:8b:
24:d8:86:47:b5:63:1d:98:50:49:f0:c6:96:dd:3f:45:e3:92:
f5:9f:03:a2:5c:74:ec:ca:8b:f4:8b:cb:ed:d7:2a:ad:a9:ca:
a9:08:2b:9f:a1:8e:03:be:39:01:be:39:1c:06:4b:33:57:5f:
a2:b6:a5:30:84:65:5d:66:fa:da:7d:a0:21:93:91:1f:41:80:
1b:a0:35:4c:68:90:29:04:91:ad:f4:df:aa:92:39:57:da:e0:
5f:2b:7f:8e:bd:62:97:f3:cb:5d:7c:fa:e4:4e:25:08:b0:8c:
27:98:34:9c:32:d4:9a:c1:1e:78:bb:f6:3b:b8:09:44:a5:d1:
f0:1a:20:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:27:24 2026 by rpki-client