
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136382e302f32342d3234203d3e203233363731.roa
File: 3131312e39322e3136382e302f32342d3234203d3e203233363731.roa (raw, json)
Hash identifier: Zs7TRnZe5BNsoAw7Vlg7d8WTD6Yej6D1y1DZK+qwGSo=
Subject key identifier: 81:91:73:E6:0B:CD:00:75:52:E6:5E:AC:93:DD:7D:42:3A:0A:A2:7D
Certificate issuer: /CN=A9BFA348A050E46482F4E00C605FF9961247FC64
Certificate serial: 06582944B27D077592FFEE48C9AE34BF1BAFDA33
Authority key identifier: A9:BF:A3:48:A0:50:E4:64:82:F4:E0:0C:60:5F:F9:96:12:47:FC:64
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136382e302f32342d3234203d3e203233363731.roa
Signing time: Sun 03 May 2026 03:15:58 +0000
ROA not before: Sun 03 May 2026 03:10:58 +0000
ROA not after: Sun 02 May 2027 03:15:58 +0000
asID: 23671
IP address blocks: 111.92.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.crl
rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 16:58:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:58:29:44:b2:7d:07:75:92:ff:ee:48:c9:ae:34:bf:1b:af:da:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9BFA348A050E46482F4E00C605FF9961247FC64
Validity
Not Before: May 3 03:10:58 2026 GMT
Not After : May 2 03:15:58 2027 GMT
Subject: CN=819173E60BCD007552E65EAC93DD7D423A0AA27D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:46:ce:7d:4a:f2:2e:b7:45:eb:8a:12:ae:06:
48:c0:ad:20:80:68:56:53:56:1e:56:01:8e:fa:89:
f4:10:05:58:16:f8:f6:8c:e1:8b:59:cf:33:a6:e2:
ae:15:d1:fe:0f:a8:6b:89:0e:40:1c:69:5d:b2:45:
45:69:3d:d5:05:3b:d6:6f:55:ca:07:9f:d3:77:93:
82:ba:4b:a4:0c:8a:6f:c0:49:f1:e7:f4:c0:6e:45:
cb:a5:5f:b5:23:cf:08:aa:3f:e7:26:20:df:57:b1:
6b:1f:f9:22:14:7f:e4:9c:bb:23:f8:6e:5b:b3:5a:
f0:41:ee:fd:9a:11:59:b5:cf:da:7d:71:b4:f4:72:
0a:7b:12:d7:d1:48:a7:95:05:19:b8:57:39:b6:6b:
94:23:3b:23:59:94:3e:04:c2:c4:ea:a4:7b:6e:ff:
47:2d:19:ba:a1:64:fa:58:7d:cb:b4:7d:31:c1:3d:
05:ef:72:bf:92:d8:6e:dc:b2:ae:fb:b1:fe:2c:ce:
26:a5:66:88:29:8f:aa:8a:35:8a:ed:4f:83:1a:71:
d4:a7:84:d6:24:92:28:e7:4c:76:e8:55:6f:dc:e9:
4e:5f:9c:d7:28:db:b4:39:1f:3b:f8:93:23:3c:ae:
f6:49:c0:e9:76:d3:79:81:78:7a:37:9b:37:93:1a:
31:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:91:73:E6:0B:CD:00:75:52:E6:5E:AC:93:DD:7D:42:3A:0A:A2:7D
X509v3 Authority Key Identifier:
keyid:A9:BF:A3:48:A0:50:E4:64:82:F4:E0:0C:60:5F:F9:96:12:47:FC:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3136382e302f32342d3234203d3e203233363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.92.168.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:40:6d:9d:62:80:58:d5:a6:88:a2:5b:53:0a:88:94:55:67:
4c:88:ce:b0:04:c7:53:6d:a5:de:eb:95:af:eb:73:75:54:b7:
cc:6b:ad:5f:5a:88:62:90:49:16:f0:15:ef:29:c2:e4:c0:1c:
a4:1a:94:53:0f:ae:60:ae:b3:36:b3:46:87:70:71:53:9d:ef:
83:20:2a:8b:07:c4:de:c9:3d:5b:5b:e5:07:fa:18:15:07:01:
c8:1e:15:4d:a5:2b:0a:94:1e:e6:b4:33:7a:c5:19:eb:0e:47:
f7:d1:32:1a:ee:0c:13:7a:6f:50:dc:95:8f:1e:b4:eb:45:48:
2e:9a:6b:a2:ed:56:bd:17:fe:1e:ca:8c:88:06:f9:e0:e9:64:
5a:01:51:d8:02:bf:6d:a3:43:82:a4:8c:3a:8f:38:c3:94:8b:
2f:0e:db:f1:42:5b:de:e2:6d:31:d2:2c:ea:e4:99:a2:5e:ad:
a2:4a:54:2f:b4:cd:9d:3d:ec:14:70:52:62:5c:ab:aa:0e:c0:
09:13:8d:a8:c4:38:4a:09:0b:08:c3:f5:42:9d:8a:a0:6f:fe:
c8:b1:fb:f8:25:ae:7b:54:f1:1e:3a:f9:3a:ab:b8:7d:48:58:
54:e1:ae:e8:41:0a:a8:ce:36:23:b1:f4:2f:72:83:2f:42:93:
64:7f:ee:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:00:48 2026 by rpki-client