
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34302e302f32342d3234203d3e203338313635.roa
File: 3131362e31322e34302e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier: solCgiJ0IBXmILHhdk+WcwssrUHzmifkTZH0iCFde94=
Subject key identifier: B7:59:FD:64:70:5D:D9:B3:98:03:1A:3E:B0:99:09:4F:F0:F2:6D:E8
Certificate issuer: /CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
Certificate serial: 1189C36C27C6BFA7F51C749241DCE11E18E8275D
Authority key identifier: A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34302e302f32342d3234203d3e203338313635.roa
Signing time: Sun 03 May 2026 03:18:11 +0000
ROA not before: Sun 03 May 2026 03:13:11 +0000
ROA not after: Sun 02 May 2027 03:18:11 +0000
asID: 38165
IP address blocks: 116.12.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl
rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:89:c3:6c:27:c6:bf:a7:f5:1c:74:92:41:dc:e1:1e:18:e8:27:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
Validity
Not Before: May 3 03:13:11 2026 GMT
Not After : May 2 03:18:11 2027 GMT
Subject: CN=B759FD64705DD9B398031A3EB099094FF0F26DE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a4:6a:62:0f:df:f2:4e:b5:73:92:5d:07:8b:
dd:7c:88:21:f3:8c:c5:86:17:9c:99:38:c5:80:be:
b6:58:e9:a5:23:a5:87:09:11:68:3c:08:40:06:10:
9d:2c:77:e9:21:66:80:8d:05:50:45:85:fc:ff:25:
55:a5:5b:75:05:d4:ae:a1:bd:4f:f0:e2:d2:6d:58:
18:c3:6a:33:e3:07:30:0b:71:01:16:7c:65:c4:55:
23:6a:46:e7:97:13:e2:04:79:6c:4d:21:7d:d4:28:
4a:8f:1a:42:ce:89:87:96:56:8c:1d:0e:b9:31:f5:
1b:5a:33:39:a8:da:e1:42:99:9d:ae:4b:a2:92:a6:
b2:46:a9:48:c8:8d:4a:ff:08:84:3b:66:c4:55:5e:
fa:27:1c:29:d1:27:1e:6e:e4:2f:bc:7f:f0:c0:ae:
c6:09:e3:cd:1b:61:0d:8f:f8:65:01:99:43:24:96:
2f:97:52:73:f9:96:af:a1:59:e9:6a:e4:1d:c6:6b:
1e:be:4a:d1:e8:4c:72:8e:b2:d2:94:9f:ac:6b:96:
c1:92:7e:cc:f3:3f:43:06:28:52:e8:3b:61:c5:f1:
ea:c9:c2:5b:a8:48:e0:0b:df:ed:b7:bb:aa:c4:ae:
ed:35:37:c6:f0:65:1c:e1:5c:08:23:38:f2:50:bb:
21:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:59:FD:64:70:5D:D9:B3:98:03:1A:3E:B0:99:09:4F:F0:F2:6D:E8
X509v3 Authority Key Identifier:
keyid:A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34302e302f32342d3234203d3e203338313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.12.40.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:c0:77:cb:5d:7e:09:7c:e8:c9:88:df:8f:14:2a:c2:16:85:
81:27:f5:d8:ac:88:04:c9:3e:34:2d:5c:c0:1d:8c:89:b4:79:
55:f9:7c:0b:fa:c0:05:89:69:77:90:ca:de:b3:f8:75:47:2b:
14:07:96:95:e4:b1:dd:25:78:e6:2f:32:4f:81:f5:a8:b9:32:
b1:d0:f8:da:7f:85:f1:68:01:b8:e9:3e:f8:5a:68:d3:e7:32:
dd:98:59:c5:43:75:d5:e7:08:25:05:89:35:2c:04:12:30:f9:
d3:cd:5b:7e:42:f1:6b:bc:75:b5:8d:81:01:af:15:eb:ec:79:
d4:a6:30:dc:a9:54:f5:2c:bc:5e:91:d9:1a:17:4f:ee:1e:24:
01:5e:63:af:e0:11:a2:e5:b0:40:05:94:dd:56:9b:a6:39:b2:
e8:f6:fc:9e:b7:f1:50:01:87:7d:91:75:22:0d:57:0d:bf:63:
68:eb:0c:9a:9c:b1:be:b3:b9:6f:da:5e:f1:53:a7:5b:fe:60:
8e:da:23:cc:c2:a6:f7:14:bc:7c:a9:02:d8:52:a5:ca:05:27:
7f:8e:2f:9f:90:e3:f3:31:7c:15:ed:d2:0d:a1:36:96:28:6f:
0c:4d:41:ea:d1:56:8e:57:91:3a:f1:2a:3a:d1:72:5a:04:c8:
4b:f0:7f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:33:24 2026 by rpki-client