
$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38302e302f32312d3231203d3e203137373237.roa
File: 3131302e33352e38302e302f32312d3231203d3e203137373237.roa (raw, json)
Hash identifier: yPzwOUXPzy3wSA63+j+GHhPdQ01L8rvYQqxEflJ8w+M=
Subject key identifier: D1:9D:3B:11:28:01:35:5A:A2:58:17:BE:B0:4C:EF:D5:B2:82:8E:AF
Certificate issuer: /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Certificate serial: 6CEF3A7E141246BD20813FC45F63461D441A90CA
Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38302e302f32312d3231203d3e203137373237.roa
Signing time: Sun 03 May 2026 02:38:33 +0000
ROA not before: Sun 03 May 2026 02:33:33 +0000
ROA not after: Sun 02 May 2027 02:38:33 +0000
asID: 17727
IP address blocks: 110.35.80.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 07 May 2026 23:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:ef:3a:7e:14:12:46:bd:20:81:3f:c4:5f:63:46:1d:44:1a:90:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Validity
Not Before: May 3 02:33:33 2026 GMT
Not After : May 2 02:38:33 2027 GMT
Subject: CN=D19D3B112801355AA25817BEB04CEFD5B2828EAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:92:a4:bf:d0:6c:d2:c4:02:50:78:ae:31:
4e:8f:2c:11:0a:cf:51:6f:6f:f7:9c:f4:83:cf:37:
91:75:2a:68:88:05:04:90:bd:e4:ef:a6:b5:e9:3f:
ad:70:29:1a:59:20:5a:5d:ec:4c:c8:17:5c:2a:d6:
77:38:ae:fa:49:e7:9b:ac:4f:68:89:2f:75:2b:ec:
05:df:3e:81:31:11:66:fa:d1:21:77:ce:2e:5d:05:
0f:69:f8:a9:e0:40:4e:a3:bd:e2:3b:5f:04:cd:a5:
79:49:88:42:6e:21:a3:e8:b2:5c:bb:a0:a5:77:bf:
08:de:44:40:4b:23:6e:75:df:a5:65:b8:32:af:8f:
7c:4b:07:c3:6f:18:ee:ea:38:34:90:ba:a7:46:0d:
1f:77:ff:63:4f:26:f3:98:07:54:03:60:61:27:f1:
c7:04:38:7b:e1:4d:93:c9:e0:1d:0c:69:30:b8:96:
44:c6:7b:13:f5:fd:05:00:1a:f0:6b:53:89:48:07:
cb:01:0f:27:70:f1:b7:2f:fa:b3:81:32:a1:62:a7:
b3:e1:e0:e5:b6:26:a4:8c:ea:f8:d6:e2:18:7d:81:
a0:b9:53:1a:8a:05:58:dc:50:ce:71:83:2d:24:d1:
e9:da:a1:d9:ae:fc:4c:f9:c7:28:26:ea:7e:ae:e3:
cf:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9D:3B:11:28:01:35:5A:A2:58:17:BE:B0:4C:EF:D5:B2:82:8E:AF
X509v3 Authority Key Identifier:
keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38302e302f32312d3231203d3e203137373237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.35.80.0/21
Signature Algorithm: sha256WithRSAEncryption
51:1d:e9:91:62:de:93:1c:ff:19:3c:e1:fa:cb:8e:15:0b:90:
01:c3:0e:4a:eb:14:fa:0b:b5:62:92:1a:aa:96:91:0a:d2:74:
97:8e:12:70:53:b4:5a:db:28:b1:c1:39:68:91:6b:b1:71:1b:
8b:54:d0:20:0b:36:08:d9:4d:aa:f5:02:14:ea:85:b5:9e:a8:
db:39:e4:02:c6:da:62:df:26:e9:a3:eb:00:ed:d7:12:54:7c:
ea:db:26:19:ae:6b:09:ba:30:e7:08:76:02:76:bb:66:70:1e:
22:f7:85:93:3c:cc:0f:32:10:ed:60:ca:4c:ef:96:7c:a9:cf:
13:94:83:06:7c:3f:c0:67:48:f0:81:e2:1a:95:9f:2d:af:58:
db:1f:d8:5e:51:f1:ae:4e:85:50:c1:62:75:74:c7:2c:51:20:
37:f6:d3:01:b8:92:c3:8c:3f:f9:a7:75:36:01:d8:4a:95:2d:
be:8a:5e:5a:16:1b:80:77:7b:25:2c:ce:06:07:c9:cb:60:35:
ac:a1:d0:67:a6:7f:e7:62:22:fc:fa:78:c2:d9:0f:4e:f4:69:
05:af:a3:08:4b:00:ba:50:85:cc:1e:68:54:a6:5d:19:e7:71:
24:0d:73:a2:2d:5a:f0:c7:2a:7d:c3:05:db:bf:1f:4b:f1:9a:
5e:ec:61:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:29:14 2026 by rpki-client