
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133332e302f32342d3234203d3e2039373934.roa
File: 3131352e3137382e3133332e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier: uFyG7fz1iiFSbXHpQDtkdfhhQNMrGKcoeuvCqM9XbxQ=
Subject key identifier: 9A:79:51:C0:01:72:7A:19:22:9B:33:CC:5D:DC:2A:07:D0:58:49:B3
Certificate issuer: /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial: 3B93210141FF0BD45870A34823BFBFAD021A1198
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133332e302f32342d3234203d3e2039373934.roa
Signing time: Sun 03 May 2026 03:17:25 +0000
ROA not before: Sun 03 May 2026 03:12:25 +0000
ROA not after: Sun 02 May 2027 03:17:25 +0000
asID: 9794
IP address blocks: 115.178.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:40:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:93:21:01:41:ff:0b:d4:58:70:a3:48:23:bf:bf:ad:02:1a:11:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Validity
Not Before: May 3 03:12:25 2026 GMT
Not After : May 2 03:17:25 2027 GMT
Subject: CN=9A7951C001727A19229B33CC5DDC2A07D05849B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:71:4c:9d:23:14:0d:3f:06:dc:a5:f3:e5:ba:
7e:74:c3:23:45:7a:90:99:5a:96:a7:a4:52:27:c7:
e8:83:15:6e:48:ab:55:44:c1:b3:bb:eb:b0:d6:1f:
15:e6:44:71:52:0a:6e:bc:99:26:23:b3:09:99:70:
a0:2e:d2:bf:49:48:e7:5a:77:95:c8:50:09:01:cb:
fa:ae:3d:f6:fe:93:2a:e3:dd:bc:f4:c8:43:5c:24:
09:00:c2:21:77:39:86:b8:47:c1:61:47:8b:34:ba:
40:8a:82:a4:5e:9a:98:4b:80:b3:4b:7a:ba:43:8a:
b1:ed:b4:47:c4:3c:92:8e:36:4a:b3:bd:db:66:73:
32:37:37:03:cc:48:ba:28:40:49:59:39:b5:00:95:
38:1d:b7:a1:f0:8f:49:71:1d:58:f7:de:9a:48:3f:
19:23:bb:f2:0e:be:10:f7:f7:0b:8f:be:75:12:6f:
fe:94:6c:ed:79:36:03:bb:50:af:92:ca:76:1e:56:
da:98:f7:a9:d9:dd:25:6d:a3:9a:42:e6:b7:01:c2:
4f:09:8f:62:34:35:47:b9:b5:8e:f3:d2:b9:3a:ce:
d0:11:80:46:20:df:f4:2c:d2:09:de:d2:06:b1:21:
b2:56:6f:8c:10:c4:2c:20:1a:f6:04:a9:6b:14:30:
04:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:79:51:C0:01:72:7A:19:22:9B:33:CC:5D:DC:2A:07:D0:58:49:B3
X509v3 Authority Key Identifier:
keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133332e302f32342d3234203d3e2039373934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.178.133.0/24
Signature Algorithm: sha256WithRSAEncryption
93:65:38:d8:b1:74:06:f0:92:65:12:09:c9:41:3d:90:b8:e0:
36:98:6c:0a:0c:27:d7:19:57:eb:c5:69:3d:bf:8b:6b:a7:8e:
3f:00:09:81:29:ac:a0:e6:42:0d:50:ea:5a:84:2a:84:8c:7a:
b8:bd:87:bc:49:54:77:63:d6:c8:1d:58:f3:e0:94:43:c0:75:
8e:84:c5:0f:b8:4d:0f:21:8f:2c:93:51:ac:3c:83:dc:ad:85:
40:d5:8e:ed:19:85:4b:51:2d:61:8e:33:00:4a:e9:0d:0f:08:
a0:48:2b:8b:5f:65:d9:93:9a:a6:76:6a:9a:da:06:bf:55:74:
87:7b:01:5b:9c:83:af:a7:b7:72:d6:e6:51:c3:ad:47:15:8f:
28:e1:91:d6:d4:90:2d:b3:bc:26:1d:de:05:4c:a3:e6:44:63:
90:3e:79:eb:5d:c9:e0:55:35:f5:52:81:d8:b0:e6:e2:c3:40:
29:c8:10:c2:65:db:62:27:39:30:93:fb:aa:75:35:5e:b2:8b:
df:39:e9:60:eb:af:6d:9d:bb:a0:77:d2:ca:e3:36:d4:31:a5:
10:61:6c:49:ec:e5:8d:21:d8:98:cd:5d:29:22:24:58:c9:76:
42:dc:dd:09:fd:70:06:b2:f7:f6:a4:3c:6d:ba:b2:04:3e:ab:
4c:c2:78:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:01:20 2026 by rpki-client