
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38302e302f32342d3234203d3e20313439363632.roa
File: 3131342e3139392e38302e302f32342d3234203d3e20313439363632.roa (raw, json)
Hash identifier: XbFM/MsMwO9/XRhknNQbeHePSLN/NdPoTOwfdwxC+gQ=
Subject key identifier: AF:F1:57:25:30:5A:7C:E8:88:D8:6B:81:F9:AD:F2:18:60:A5:ED:2A
Certificate issuer: /CN=CA547F005E84823E6A8A471723C17168E8E44644
Certificate serial: 258D476A3A9EE2BD064F1384FC6135FB8ED0258A
Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38302e302f32342d3234203d3e20313439363632.roa
Signing time: Tue 01 Sep 2026 02:48:07 +0000
ROA not before: Tue 01 Sep 2026 02:43:07 +0000
ROA not after: Tue 31 Aug 2027 02:48:07 +0000
asID: 149662
IP address blocks: 114.199.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl
rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 18:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:8d:47:6a:3a:9e:e2:bd:06:4f:13:84:fc:61:35:fb:8e:d0:25:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644
Validity
Not Before: Sep 1 02:43:07 2026 GMT
Not After : Aug 31 02:48:07 2027 GMT
Subject: CN=AFF15725305A7CE888D86B81F9ADF21860A5ED2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a4:17:13:5f:7d:b8:17:7d:98:2a:82:c7:9c:
a6:24:d0:85:68:94:f0:f9:be:12:79:82:71:e7:5e:
99:5a:a7:38:dc:71:ec:d9:70:a9:f4:33:81:59:6b:
80:d6:96:84:e1:0d:39:9c:4d:fd:03:d9:97:b8:6c:
21:d3:7e:11:60:b9:b1:d6:0f:c9:b8:75:b5:97:d9:
89:b7:70:72:4b:dc:54:c2:19:07:bf:71:fe:61:62:
b7:05:33:d5:a1:6c:9c:e8:fe:1d:b7:8b:07:be:51:
43:77:d4:c5:34:14:35:53:15:7a:e1:ab:a3:52:d0:
ec:5f:71:d6:95:9a:90:4b:95:81:75:e5:bb:71:8a:
cd:49:af:5c:18:e1:55:fc:42:11:55:98:3d:47:ea:
35:65:0b:56:ad:1b:37:b9:c3:89:f0:fa:09:87:2d:
12:90:90:f0:23:d3:f8:bc:1e:8e:da:6a:fe:41:0e:
19:3a:51:72:70:d9:45:75:b0:ea:bb:70:72:f5:32:
ae:82:39:18:8b:e2:f4:71:1b:fe:2d:ea:66:72:fb:
c9:2d:d3:f7:b4:41:ec:5e:3f:d0:1f:e1:74:48:42:
54:11:ae:33:c5:0d:fc:d4:ad:54:f8:25:13:9f:c0:
65:c4:9f:5e:af:39:bd:c7:20:92:b0:59:cc:da:0b:
6d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F1:57:25:30:5A:7C:E8:88:D8:6B:81:F9:AD:F2:18:60:A5:ED:2A
X509v3 Authority Key Identifier:
keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38302e302f32342d3234203d3e20313439363632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.80.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:e4:48:71:8b:81:04:37:0b:c3:b4:1e:8b:c0:1e:d7:4a:8e:
ba:e9:8f:ab:b7:46:97:c5:18:a4:b8:c5:16:0d:1f:b4:59:b6:
c8:4d:11:c9:a4:95:be:c8:6a:96:dc:90:fe:9e:7d:9a:8c:48:
29:d0:a2:16:db:5f:46:7d:4c:3f:9e:7f:5c:50:95:52:73:a2:
af:08:e4:1e:8a:17:fc:8b:5b:77:f7:16:e5:60:7a:aa:cb:b9:
d2:fc:c8:14:1d:3a:ab:dc:16:5d:de:b0:d3:9b:f8:25:e2:c8:
5c:ec:f7:e9:d3:c9:51:c6:49:e1:6d:aa:c8:22:93:ba:5e:fa:
ee:88:7a:84:a4:64:3b:00:57:8b:51:1d:9f:a1:12:39:f7:2b:
6e:04:f7:04:b4:9e:25:8b:4e:01:a1:04:b6:ae:ef:75:c6:c7:
b5:3d:ad:5c:28:07:8c:25:02:75:0c:2e:41:57:10:29:38:d1:
85:17:33:f9:63:d2:cf:b0:a2:89:4b:03:19:29:2c:ef:ac:6f:
1b:93:94:f9:d9:34:04:e8:5a:93:f3:f3:04:d6:ab:68:eb:44:
95:d3:4d:7c:37:25:47:1a:70:53:b5:ef:9e:db:81:ae:91:29:
85:d7:25:13:85:d7:bb:02:d3:c7:45:a2:b6:62:24:fc:18:e4:
97:e8:de:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 10:09:02 2026 by rpki-client