
$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38362e302f32342d3234203d3e203137373237.roa
File: 3131302e33352e38362e302f32342d3234203d3e203137373237.roa (raw, json)
Hash identifier: Y/5q7IjNfe242EF68Jpr7JcxFniMf1S+XscpLHU9C+c=
Subject key identifier: 7D:16:0A:56:F4:F9:8C:7D:FD:3B:CB:C9:2E:49:5E:90:8B:3C:A0:50
Certificate issuer: /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Certificate serial: 6709F89E9EE194CB43079667C2A97F45B15EDE28
Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38362e302f32342d3234203d3e203137373237.roa
Signing time: Sun 03 May 2026 02:38:26 +0000
ROA not before: Sun 03 May 2026 02:33:26 +0000
ROA not after: Sun 02 May 2027 02:38:26 +0000
asID: 17727
IP address blocks: 110.35.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 07 May 2026 23:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:09:f8:9e:9e:e1:94:cb:43:07:96:67:c2:a9:7f:45:b1:5e:de:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Validity
Not Before: May 3 02:33:26 2026 GMT
Not After : May 2 02:38:26 2027 GMT
Subject: CN=7D160A56F4F98C7DFD3BCBC92E495E908B3CA050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4b:c0:b7:96:32:77:82:d2:55:40:1f:91:eb:
3b:18:8b:f4:3a:f6:f3:45:4f:01:e7:1f:5b:61:90:
22:c1:d0:ef:9d:06:2d:76:d1:39:71:c1:00:4a:0d:
fd:4d:13:3a:5c:64:2f:d8:ea:56:08:d6:4f:27:4c:
26:d3:6a:fa:e3:3c:7d:ed:5a:3d:4b:4e:db:ed:69:
9a:4d:31:0e:7f:36:9b:92:ae:07:14:b3:2d:bb:2a:
76:d9:99:a8:1b:a3:c6:c3:d7:0b:56:ac:f6:a4:aa:
69:89:ef:67:ed:bf:73:68:31:91:7f:c5:4b:5d:58:
a2:da:c1:3e:d1:1c:93:78:7a:12:7f:d3:b0:b7:a7:
bb:92:87:48:e4:99:28:85:ce:8d:7d:24:5d:58:34:
12:f9:b7:d4:43:2a:d9:9e:67:b6:af:91:ce:94:d4:
8a:fb:15:b4:1b:8a:ab:d3:6e:f4:76:d7:18:4d:34:
0a:08:bf:da:a1:00:61:45:2f:2d:10:73:17:8b:fd:
43:fc:9f:cc:f0:e6:7d:9a:44:50:f9:a1:15:27:38:
98:c4:b4:1a:c1:96:6d:f2:22:ad:8b:d7:f9:82:a8:
cc:7e:e9:bf:c6:04:39:e7:45:6c:c1:fa:71:c1:58:
b2:79:62:1b:3d:68:82:d1:28:5e:fe:ea:26:e0:46:
3b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:16:0A:56:F4:F9:8C:7D:FD:3B:CB:C9:2E:49:5E:90:8B:3C:A0:50
X509v3 Authority Key Identifier:
keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38362e302f32342d3234203d3e203137373237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.35.86.0/24
Signature Algorithm: sha256WithRSAEncryption
89:01:9c:09:9f:41:7d:21:f1:10:bf:21:c0:7c:3c:15:f0:b7:
72:9e:6d:f9:51:4b:fd:b7:ec:d2:1d:4d:73:5f:90:7f:de:88:
4e:fe:80:59:3f:b9:fb:d3:3f:fc:69:96:c3:88:8b:a1:6e:51:
f0:b5:dd:d8:12:dd:3d:d0:39:a8:ee:04:68:61:6e:c2:a3:64:
08:47:6d:03:92:e8:e2:85:e3:42:05:25:85:80:63:3a:06:09:
3c:b1:5f:a6:04:e3:13:f7:a4:bb:24:9a:75:c3:25:ab:b8:f1:
b1:e4:de:78:6a:0f:e2:63:cc:3d:f3:f9:45:72:81:66:23:24:
70:9b:49:fe:ce:45:ea:99:9e:91:da:98:9a:4c:8e:46:dc:bc:
aa:c2:70:5c:fe:b3:86:7e:60:bc:cd:8e:d4:d2:c0:56:41:97:
ce:79:93:f2:ab:37:2c:22:e2:f3:78:1d:81:2f:ee:8c:23:6e:
6c:3f:1e:57:30:6f:7b:90:49:f6:e5:4b:00:63:bc:5c:ed:e5:
d6:3b:ae:67:bd:2c:40:db:75:ac:36:13:a5:07:66:78:10:a7:
f5:c5:89:72:c4:30:11:f9:a8:b2:d4:1c:ec:49:a4:9a:9c:48:
9f:c8:e3:ed:95:04:96:5f:1a:2c:29:bd:98:20:01:ef:bc:9b:
06:62:b6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:29:33 2026 by rpki-client