
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3137312e302f32342d3234203d3e203233363731.roa
File: 3131312e39322e3137312e302f32342d3234203d3e203233363731.roa (raw, json)
Hash identifier: LSQJykz8Xa8OUBE1CJt+TyLaezRgkEysTciohkEfAhc=
Subject key identifier: C7:5A:87:D1:4D:74:3D:BE:DB:27:77:21:CE:73:12:21:A0:CA:15:74
Certificate issuer: /CN=A9BFA348A050E46482F4E00C605FF9961247FC64
Certificate serial: 7939D383BFA2B9D6770518B8231A517F50A559B6
Authority key identifier: A9:BF:A3:48:A0:50:E4:64:82:F4:E0:0C:60:5F:F9:96:12:47:FC:64
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3137312e302f32342d3234203d3e203233363731.roa
Signing time: Sun 03 May 2026 03:15:56 +0000
ROA not before: Sun 03 May 2026 03:10:56 +0000
ROA not after: Sun 02 May 2027 03:15:56 +0000
asID: 23671
IP address blocks: 111.92.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.crl
rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 16:58:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:39:d3:83:bf:a2:b9:d6:77:05:18:b8:23:1a:51:7f:50:a5:59:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9BFA348A050E46482F4E00C605FF9961247FC64
Validity
Not Before: May 3 03:10:56 2026 GMT
Not After : May 2 03:15:56 2027 GMT
Subject: CN=C75A87D14D743DBEDB277721CE731221A0CA1574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c5:d5:d3:bf:98:0f:ad:21:c0:65:7f:e6:7f:
f5:dc:e1:d6:48:ed:e4:f2:22:b6:31:8e:22:91:66:
c7:75:db:3d:6c:26:ea:5a:3d:e0:1b:62:e7:37:30:
dc:29:fb:64:b5:77:43:c5:45:6a:ab:e0:86:59:fa:
b0:a8:cd:8b:69:0b:08:e6:98:a3:0f:68:7a:a4:c7:
3d:fd:e8:3b:08:c4:07:df:6f:46:88:9e:cb:7f:59:
96:79:9f:b8:76:e9:e2:cd:1a:f5:a4:26:5c:d6:fb:
62:be:6c:cd:6c:77:a6:ad:b1:09:d2:6b:f0:79:40:
9f:76:22:8c:b0:8f:b8:3c:ff:8f:09:f7:d6:1a:9e:
d0:57:69:9d:05:3d:ab:7f:f6:6d:a4:a2:4f:a6:b2:
b6:00:0a:86:e7:1d:a6:ad:01:3d:95:8d:70:a0:6c:
90:08:32:36:f5:33:a2:6d:ae:30:f2:fc:a1:97:8e:
9c:87:61:48:63:61:d1:06:6f:50:00:0b:df:b4:c8:
23:b3:61:51:4a:d1:d5:cd:5b:d2:3e:49:b9:ea:26:
dc:5c:29:80:5b:d7:5d:38:71:1d:7a:ab:d1:a0:91:
6a:2d:31:ee:51:48:c7:95:dc:a9:45:e6:2c:12:b6:
75:b8:ab:25:42:92:27:e4:95:7d:fe:59:05:1a:44:
4b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5A:87:D1:4D:74:3D:BE:DB:27:77:21:CE:73:12:21:A0:CA:15:74
X509v3 Authority Key Identifier:
keyid:A9:BF:A3:48:A0:50:E4:64:82:F4:E0:0C:60:5F:F9:96:12:47:FC:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3137312e302f32342d3234203d3e203233363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.92.171.0/24
Signature Algorithm: sha256WithRSAEncryption
40:2e:c6:66:ca:16:eb:64:b4:dd:13:24:c4:0a:6f:93:4f:ff:
d4:b9:ca:02:fa:74:4b:64:5d:4d:90:08:ca:a0:a6:70:4e:0a:
a1:11:81:54:63:d5:fc:d9:5e:0e:17:5f:20:26:85:f4:88:db:
2a:80:40:d4:d2:21:09:7f:bd:8e:ea:65:43:91:2a:53:52:92:
1e:96:fc:f1:cc:94:5d:75:50:0e:e5:f3:02:9a:a8:3f:0f:81:
ba:8a:12:2a:80:09:20:5a:3f:c9:50:18:25:65:86:a0:02:38:
1b:43:b0:67:b0:7f:f7:65:15:ef:a1:ec:53:cd:e2:90:7a:f0:
a3:79:86:c6:13:38:fe:e1:38:79:96:f4:4e:61:5f:6b:cb:b6:
f9:83:67:16:b4:06:b5:d5:e2:1c:e9:e1:11:0f:9f:9d:3f:fa:
76:a6:2e:ec:f0:89:0a:a2:4b:27:8c:c3:c6:01:51:22:7f:6d:
6b:91:a4:de:c1:33:9b:cd:75:2f:7f:b5:c5:e2:22:87:04:3f:
1b:1b:95:06:4e:c1:db:db:46:ca:e9:22:bc:f8:fa:bd:4a:0b:
67:a2:43:31:1a:dc:76:4d:8a:39:8b:a1:94:9e:8d:ca:7b:16:
60:5f:a9:05:08:bd:25:51:fd:8d:a1:b3:ed:52:74:93:6a:f9:
f9:de:6c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:51:51 2026 by rpki-client