
$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131322e302f32342d3234203d3e203435313437.roa
File: 3131392e3131302e3131322e302f32342d3234203d3e203435313437.roa (raw, json)
Hash identifier: LnDcLVYNIslp+XHFRA9jgwKm4SbVfKMj79VOkrxy8zE=
Subject key identifier: D7:9D:7F:BF:5B:FF:81:B6:35:FA:49:F9:96:A5:F8:CE:40:10:DC:81
Certificate issuer: /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Certificate serial: 0AA86B846C3440866B4C1E783BA382CAAB44E3BD
Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131322e302f32342d3234203d3e203435313437.roa
Signing time: Sun 03 May 2026 02:38:29 +0000
ROA not before: Sun 03 May 2026 02:33:29 +0000
ROA not after: Sun 02 May 2027 02:38:29 +0000
asID: 45147
IP address blocks: 119.110.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 07 May 2026 23:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:a8:6b:84:6c:34:40:86:6b:4c:1e:78:3b:a3:82:ca:ab:44:e3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Validity
Not Before: May 3 02:33:29 2026 GMT
Not After : May 2 02:38:29 2027 GMT
Subject: CN=D79D7FBF5BFF81B635FA49F996A5F8CE4010DC81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8c:7a:9e:c2:e5:fb:92:22:6e:f7:63:b6:b3:
c1:b0:05:82:ea:f3:cb:ff:d0:c0:cd:ad:19:59:85:
a9:f3:c9:59:95:73:32:cb:f7:44:ec:06:2c:bf:dd:
d8:b6:b1:83:b9:91:e6:42:64:32:5e:29:4e:a3:e7:
df:7d:04:c0:10:63:9e:f9:56:a3:71:f6:8d:52:e1:
8a:16:ea:98:7d:77:0e:80:c0:5c:f6:36:da:76:6d:
ce:95:bb:0e:50:09:86:c9:f1:b1:ee:b6:ca:2f:c9:
31:ab:d9:13:b9:ab:85:10:27:7d:2d:8e:62:56:1b:
76:39:29:cf:4b:c4:bc:d3:13:c2:89:ce:4d:dc:5b:
cb:b0:fb:e2:27:8e:a1:1d:f7:fb:46:92:6e:3a:69:
c8:50:16:69:2d:da:ef:60:ff:42:34:45:6c:69:d7:
90:e7:73:9f:ec:9e:ff:eb:f2:c5:46:a4:a1:ed:53:
95:70:cc:57:68:0e:7b:49:6f:32:22:af:d6:db:68:
be:ea:a2:4e:47:d5:f9:d7:93:73:49:f2:82:c4:55:
03:4f:d5:2d:40:69:66:8d:80:ac:cd:56:0b:b6:86:
c3:ca:6f:5f:52:06:85:5e:da:fd:5a:77:58:a6:e0:
65:a6:b7:4a:e7:9d:ec:85:01:82:97:bd:60:dc:7f:
9b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9D:7F:BF:5B:FF:81:B6:35:FA:49:F9:96:A5:F8:CE:40:10:DC:81
X509v3 Authority Key Identifier:
keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131322e302f32342d3234203d3e203435313437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.110.112.0/24
Signature Algorithm: sha256WithRSAEncryption
83:ab:ff:9c:f3:ac:00:43:b4:66:fc:6d:74:20:44:42:85:c5:
e0:bb:50:64:6b:ff:83:87:dd:10:33:b9:b7:44:42:80:2b:bf:
ac:5a:44:4e:68:76:53:86:2c:53:ac:64:f0:ec:4f:c8:67:be:
18:27:13:9e:01:e6:4d:da:5e:07:f5:48:9f:32:f7:d3:63:2d:
92:2e:fb:21:17:98:85:bf:0c:f9:b0:c8:77:2d:dc:04:8c:2b:
5d:63:61:16:a0:21:44:3b:a5:63:9b:06:5d:a2:c9:7f:9e:40:
3f:25:d6:ad:eb:d1:ba:10:b1:fc:b6:11:bf:79:10:31:41:17:
d0:9f:65:4e:6a:8f:07:09:84:56:65:db:53:01:82:9e:72:bc:
e3:a9:63:d1:5d:e1:0e:2e:d5:87:5a:86:47:26:e4:f5:41:35:
71:fd:f1:b5:6a:bb:16:ef:bf:59:29:d6:15:1a:1c:5b:4a:67:
f8:02:e9:5a:74:e2:d4:a8:00:ab:d6:52:e0:a2:55:22:10:ba:
54:2a:7e:f8:2f:02:79:b1:be:c6:cb:d7:e9:e8:37:50:26:0c:
22:11:8f:d7:66:5f:ce:14:ad:ca:20:cb:d6:47:6f:65:0c:fd:
3c:df:7d:cb:9e:16:0d:31:6d:a6:bd:05:ec:35:9b:b4:93:6d:
a7:1a:a1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:12:23 2026 by rpki-client