
$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131342e302f32342d3234203d3e203435313437.roa
File: 3131392e3131302e3131342e302f32342d3234203d3e203435313437.roa (raw, json)
Hash identifier: jQju4vrmIfyX84EnoeVMV2sURdLQ4DQrI116w4sdgCY=
Subject key identifier: 76:C9:D8:03:35:C9:A1:AE:03:C2:FD:97:41:43:1F:F4:7C:E7:25:1B
Certificate issuer: /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Certificate serial: 60306C5559E75BBFB55D740A77BF6862C9B10C18
Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131342e302f32342d3234203d3e203435313437.roa
Signing time: Sun 03 May 2026 02:38:26 +0000
ROA not before: Sun 03 May 2026 02:33:26 +0000
ROA not after: Sun 02 May 2027 02:38:26 +0000
asID: 45147
IP address blocks: 119.110.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 07 May 2026 23:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:30:6c:55:59:e7:5b:bf:b5:5d:74:0a:77:bf:68:62:c9:b1:0c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Validity
Not Before: May 3 02:33:26 2026 GMT
Not After : May 2 02:38:26 2027 GMT
Subject: CN=76C9D80335C9A1AE03C2FD9741431FF47CE7251B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:e6:53:ed:d8:5f:2a:a0:ea:5a:cd:33:c8:9c:
ef:10:c0:d4:8a:d7:93:37:b8:7b:e0:51:74:9d:84:
96:99:a8:cd:5c:b1:5a:cc:d5:be:7b:69:f0:dd:0d:
83:a1:03:54:9b:ee:81:19:46:60:7a:d4:fe:56:b2:
cf:bb:b0:aa:5c:65:25:5c:2b:64:62:2a:89:ec:2b:
76:4b:b1:d9:1f:a9:96:b9:e6:a2:e2:a4:03:b6:9e:
93:ea:23:7b:c2:c8:11:69:ba:c0:d4:49:4b:0a:f2:
aa:2e:9d:af:b3:87:7a:18:0a:23:27:80:0b:0c:49:
f2:a6:5d:56:a8:a5:4e:0c:9e:21:f9:47:1d:61:05:
a9:86:79:39:30:b4:56:a2:2a:cf:69:c4:3e:4b:36:
f2:22:1e:7f:c1:20:c0:57:0d:4b:96:29:b7:8b:0c:
29:8c:00:99:ee:17:9b:34:79:16:4a:56:54:ce:36:
bd:a2:12:eb:ad:bc:da:d0:ab:35:8c:71:b8:9e:95:
7e:c3:eb:02:5f:70:9a:01:b9:7c:3a:ea:0a:93:bc:
9b:9b:15:c8:c3:af:b8:70:bd:a4:03:e1:eb:3f:cd:
5d:16:b9:99:86:75:2f:ca:44:73:13:80:0c:b9:50:
7a:14:1f:1b:04:e7:60:20:fd:67:8f:e2:e0:29:b6:
a5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C9:D8:03:35:C9:A1:AE:03:C2:FD:97:41:43:1F:F4:7C:E7:25:1B
X509v3 Authority Key Identifier:
keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131342e302f32342d3234203d3e203435313437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.110.114.0/24
Signature Algorithm: sha256WithRSAEncryption
45:97:d7:43:62:09:6d:40:cc:b0:14:0f:53:7d:ce:b5:87:ca:
f3:0c:ae:c5:54:e1:47:e7:8f:ff:9a:7a:f4:79:6f:24:cf:e2:
d2:39:27:c0:aa:5f:fb:04:42:55:b3:ba:46:f9:c4:43:61:dc:
3d:32:37:68:49:19:40:5f:37:1e:8a:d4:44:79:f5:3b:2e:e6:
4d:f5:96:bb:18:67:b2:7e:f0:36:5a:48:ca:96:f3:81:bc:90:
96:95:b2:f8:5c:03:ef:8f:e4:66:49:4b:12:ff:d2:62:c9:7e:
f8:76:15:70:99:95:33:f9:0e:16:34:bd:d5:0c:ae:0a:82:6c:
9b:f4:75:c3:15:15:f2:36:2c:02:94:6b:6c:5b:ef:92:36:e1:
0e:bd:92:fe:f6:c5:9b:e4:6a:25:77:4a:04:7c:ea:c0:4b:91:
15:f1:80:35:a8:70:84:ef:7a:57:a9:d4:f4:27:05:93:d7:cb:
b5:11:95:cc:79:71:91:4d:e8:ec:85:f0:e4:fa:af:01:99:2b:
00:66:2a:cc:69:9e:68:e7:9d:85:a7:0d:a9:48:7b:bc:95:cf:
22:93:9e:5f:e1:f3:f6:c7:8c:3b:00:b1:4a:66:76:ec:43:c1:
29:1f:5d:21:c4:d0:aa:54:c9:2f:a2:0d:37:cd:6d:d9:3a:35:
ee:46:02:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:12:25 2026 by rpki-client