
$ rpki-client -vvf rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/3131352e3138372e32382e302f32332d3234203d3e20313532303334.roa
File: 3131352e3138372e32382e302f32332d3234203d3e20313532303334.roa (raw, json)
Hash identifier: ILEPt3NLdu2PTg7IxG5hw5UfVvO4+tHzRcaeRjRDOH8=
Subject key identifier: AE:98:8B:FA:5E:34:E5:1C:27:BE:7F:D9:3A:7E:A3:B8:F9:24:1B:A8
Certificate issuer: /CN=8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC
Certificate serial: 390B0FC14B1D9A6763A82E67C5C5D4030F389226
Authority key identifier: 87:05:B5:B7:FD:97:EB:20:89:2E:8D:B5:A7:F7:BD:23:BE:82:68:CC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/3131352e3138372e32382e302f32332d3234203d3e20313532303334.roa
Signing time: Sun 03 May 2026 03:15:23 +0000
ROA not before: Sun 03 May 2026 03:10:23 +0000
ROA not after: Sun 02 May 2027 03:15:23 +0000
asID: 152034
IP address blocks: 115.187.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.crl
rsync://rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:12:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:0b:0f:c1:4b:1d:9a:67:63:a8:2e:67:c5:c5:d4:03:0f:38:92:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC
Validity
Not Before: May 3 03:10:23 2026 GMT
Not After : May 2 03:15:23 2027 GMT
Subject: CN=AE988BFA5E34E51C27BE7FD93A7EA3B8F9241BA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:46:82:38:d3:6c:c2:81:5d:02:55:03:91:a9:
de:57:7e:65:0b:1d:4a:58:45:0f:3f:6f:f1:45:00:
e5:37:42:88:6a:79:3d:f5:09:8d:ca:62:78:d0:1a:
df:78:d3:6d:30:52:0b:0c:e3:9a:d3:b1:87:0b:33:
66:21:1e:b2:30:fe:bb:9c:61:f6:b8:16:1e:29:de:
68:79:c0:37:9f:7c:0f:b5:31:92:aa:b9:22:16:05:
62:a2:2c:fb:bd:0e:37:de:25:90:c5:b7:0b:af:20:
6a:f2:0c:1d:2f:39:50:7a:b5:1d:fd:6b:fc:62:a2:
6f:34:13:15:3e:34:1c:68:24:be:51:bd:02:24:38:
3b:8a:af:3a:66:ac:8b:f3:77:83:5b:27:c9:d6:8d:
22:e7:24:d8:31:a8:38:d1:dd:04:f8:89:f2:dc:d8:
2a:5b:47:55:33:a5:b9:bd:b0:6e:3f:c4:22:a1:48:
04:b0:1c:44:8b:e9:4e:0d:cd:40:6f:04:1b:5b:16:
1d:2a:aa:da:fe:92:39:5b:f6:00:3f:be:a7:f2:7c:
a3:e1:9c:be:c1:15:34:da:86:14:d8:b1:49:64:82:
7e:cc:1a:a5:5a:5c:69:4f:e1:5e:2e:89:1e:cc:39:
c8:36:c6:36:dd:15:34:76:f0:ad:ea:fb:7e:65:b0:
65:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:98:8B:FA:5E:34:E5:1C:27:BE:7F:D9:3A:7E:A3:B8:F9:24:1B:A8
X509v3 Authority Key Identifier:
keyid:87:05:B5:B7:FD:97:EB:20:89:2E:8D:B5:A7:F7:BD:23:BE:82:68:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8705B5B7FD97EB20892E8DB5A7F7BD23BE8268CC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/3131352e3138372e32382e302f32332d3234203d3e20313532303334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.187.28.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:d0:39:ce:c9:45:db:0a:9b:19:59:66:74:68:48:ff:09:fc:
b2:2e:ee:9f:77:b8:f2:eb:3e:c0:f3:49:9e:15:0b:b7:5f:18:
b0:93:6f:45:13:82:2f:35:af:81:0d:62:32:11:a9:77:de:70:
93:3c:c0:52:bb:ae:80:6b:3a:69:b9:ae:0f:a9:19:07:7e:62:
91:d5:25:d9:76:8d:c1:d7:be:65:1d:a8:74:36:b1:bb:4e:9c:
90:e7:bc:cd:29:24:43:08:d6:00:dd:18:b3:14:a9:44:01:c5:
dc:73:f7:d5:25:4d:d7:db:7f:2c:66:69:2c:f3:6f:7f:d0:39:
c9:c6:6e:08:6f:b1:9c:30:3f:e6:e5:a7:c9:59:8c:c6:2f:b6:
25:96:19:67:91:b4:fb:a6:a3:ac:68:28:48:94:15:f7:09:0b:
05:6c:81:cc:72:e2:66:09:0a:db:fd:8f:a7:a9:54:79:05:37:
6c:aa:4f:8f:97:40:ba:36:4f:08:10:a5:3e:69:49:e1:dc:5d:
a2:86:7b:e0:0c:17:b7:ff:b0:f8:e2:9b:fb:cf:30:eb:ec:4e:
cd:26:b0:82:bc:e1:27:cf:3e:12:86:f0:fa:8b:29:57:ee:87:
b7:ff:99:d0:98:64:f4:70:02:44:a6:ed:dc:dd:a9:1f:b0:1b:
c1:d0:c3:43
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUOQsPwUsdmmdjqC5nxcXUAw84kiYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODcwNUI1QjdGRDk3RUIyMDg5MkU4REI1QTdGN0JEMjNC
RTgyNjhDQzAeFw0yNjA1MDMwMzEwMjNaFw0yNzA1MDIwMzE1MjNaMDMxMTAvBgNV
BAMTKEFFOTg4QkZBNUUzNEU1MUMyN0JFN0ZEOTNBN0VBM0I4RjkyNDFCQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/RoI402zCgV0CVQORqd5XfmUL
HUpYRQ8/b/FFAOU3QohqeT31CY3KYnjQGt94020wUgsM45rTsYcLM2YhHrIw/ruc
Yfa4Fh4p3mh5wDeffA+1MZKquSIWBWKiLPu9DjfeJZDFtwuvIGryDB0vOVB6tR39
a/xiom80ExU+NBxoJL5RvQIkODuKrzpmrIvzd4NbJ8nWjSLnJNgxqDjR3QT4ifLc
2CpbR1Uzpbm9sG4/xCKhSASwHESL6U4NzUBvBBtbFh0qqtr+kjlb9gA/vqfyfKPh
nL7BFTTahhTYsUlkgn7MGqVaXGlP4V4uiR7MOcg2xjbdFTR28K3q+35lsGX3AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUrpiL+l405Rwnvn/ZOn6juPkkG6gwHwYDVR0j
BBgwFoAUhwW1t/2X6yCJLo21p/e9I76CaMwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZWI3NGVjZTYtODgwYy00Y2VmLWFkZDItNzc3MTllYmVkZWM5LzAvODcwNUI1QjdG
RDk3RUIyMDg5MkU4REI1QTdGN0JEMjNCRTgyNjhDQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84NzA1QjVCN0ZEOTdFQjIwODkyRThEQjVBN0Y3QkQyM0JFODI2
OENDLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2ViNzRlY2U2LTg4MGMtNGNlZi1h
ZGQyLTc3NzE5ZWJlZGVjOS8wLzMxMzEzNTJlMzEzODM3MmUzMjM4MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNTMyMzAzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBc7scMA0GCSqG
SIb3DQEBCwUAA4IBAQBK0DnOyUXbCpsZWWZ0aEj/CfyyLu6fd7jy6z7A80meFQu3
Xxiwk29FE4IvNa+BDWIyEal33nCTPMBSu66Aazppua4PqRkHfmKR1SXZdo3B175l
Hah0NrG7TpyQ57zNKSRDCNYA3RizFKlEAcXcc/fVJU3X238sZmks829/0DnJxm4I
b7GcMD/m5afJWYzGL7YllhlnkbT7pqOsaChIlBX3CQsFbIHMcuJmCQrb/Y+nqVR5
BTdsqk+Pl0C6Nk8IEKU+aUnh3F2ihnvgDBe3/7D44pv7zzDr7E7NJrCCvOEnzz4S
hvD6iylX7oe3/5nQmGT0cAJEpu3c3akfsBvB0MND
-----END CERTIFICATE-----
Generated at Wed May 13 05:50:46 2026 by rpki-client