
$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131362e302f32332d3233203d3e203535383138.roa
File: 3131392e3131302e3131362e302f32332d3233203d3e203535383138.roa (raw, json)
Hash identifier: E5GJM5fG4lo4/aeXiAEkn7iP6iI8MxHDqnacpsNib0E=
Subject key identifier: 45:C0:DE:D5:95:37:32:2F:84:FF:00:2B:4D:93:18:FB:3D:71:BE:67
Certificate issuer: /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Certificate serial: 48F6BCEB0340E554880357E07D9F5654F418B361
Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131362e302f32332d3233203d3e203535383138.roa
Signing time: Sun 03 May 2026 02:38:25 +0000
ROA not before: Sun 03 May 2026 02:33:25 +0000
ROA not after: Sun 02 May 2027 02:38:25 +0000
asID: 55818
IP address blocks: 119.110.116.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 07 May 2026 23:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:f6:bc:eb:03:40:e5:54:88:03:57:e0:7d:9f:56:54:f4:18:b3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Validity
Not Before: May 3 02:33:25 2026 GMT
Not After : May 2 02:38:25 2027 GMT
Subject: CN=45C0DED59537322F84FF002B4D9318FB3D71BE67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:14:8f:49:85:38:4c:e7:ed:93:a6:73:3d:bc:
f7:04:c4:03:1a:4e:bf:4d:e2:cd:0a:b8:1b:35:a2:
51:b2:6b:6b:37:1a:6f:ca:0f:30:6c:f5:ed:2b:ee:
63:80:7e:5c:62:53:a8:90:aa:fd:b6:86:f6:14:b4:
3a:22:b4:f6:5c:39:36:09:88:c1:17:57:54:3a:44:
47:8d:c7:24:82:3a:6c:a9:6e:b4:70:e3:c7:ff:e2:
a1:0e:f7:c3:54:db:7c:1f:0c:63:ed:67:4a:b3:a1:
4b:40:bd:28:fd:e6:04:1d:85:8e:d1:6f:43:c3:c9:
dd:81:ad:13:88:79:01:9c:23:e8:43:2c:68:2c:74:
ea:16:75:15:52:b7:44:49:11:86:89:4a:37:81:49:
fb:de:21:c2:44:4a:2e:8a:bf:2e:8e:cf:65:58:29:
c3:cf:db:a0:be:87:77:53:61:5a:32:7e:fa:4b:20:
2c:df:73:0c:e5:f7:9e:01:e4:6d:17:40:29:15:7c:
90:07:8a:60:22:60:61:36:27:cc:68:44:44:4a:68:
d8:e1:ef:0e:21:f1:65:05:dd:26:2c:72:73:59:dc:
6f:21:69:97:f9:44:9e:8b:dc:24:87:8e:3a:f9:14:
d4:52:32:61:2b:81:9a:74:9d:c5:e9:65:7d:2d:0f:
a7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C0:DE:D5:95:37:32:2F:84:FF:00:2B:4D:93:18:FB:3D:71:BE:67
X509v3 Authority Key Identifier:
keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131362e302f32332d3233203d3e203535383138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.110.116.0/23
Signature Algorithm: sha256WithRSAEncryption
79:5e:89:5e:f2:b9:ab:b2:23:a0:d4:96:c5:fe:a5:c8:01:89:
1f:97:c5:d7:18:22:08:8a:f6:a1:80:d4:03:ea:1e:bc:85:ea:
a6:80:19:8d:7f:7c:bb:46:5c:91:ff:37:64:44:eb:8f:14:c0:
53:ff:4d:2e:aa:ed:e4:df:6e:fe:28:bd:24:49:a1:44:36:a7:
45:a1:2c:98:fc:11:bc:0f:21:7c:37:e2:4d:be:51:bb:8a:c7:
54:e9:63:90:e6:a3:47:10:29:8e:9f:47:33:7e:dc:5e:79:f5:
60:d5:15:84:19:61:c6:79:3e:b1:83:cf:72:82:9f:ef:49:36:
64:7a:9a:89:a5:9e:d1:f0:d6:76:48:10:1d:d5:fa:f9:36:33:
98:95:23:34:8f:e1:b3:70:69:54:38:93:4d:62:6b:5c:3a:23:
1f:24:24:04:69:d4:6b:3a:c6:bf:cc:89:ab:27:63:67:71:ac:
d3:b3:6b:d4:71:6a:21:10:47:37:e4:5c:c8:65:e2:8c:e1:31:
85:cb:ce:57:f1:7e:72:cb:8e:cf:c0:87:7b:3e:46:d0:ca:ea:
6e:77:f3:4b:5f:1a:bd:a4:eb:b9:b5:a5:a6:a9:12:1c:03:df:
ee:16:bb:47:4e:e9:e0:c9:0e:f3:f0:0f:20:d0:b5:09:4e:a7:
6e:52:5e:0d
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUSPa86wNA5VSIA1fgfZ9WVPQYs2EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUFFMTU4QjNDODREMzA3NjhDQkMwRDFENTYwMzRFMjZF
NzA0QjVEMDAeFw0yNjA1MDMwMjMzMjVaFw0yNzA1MDIwMjM4MjVaMDMxMTAvBgNV
BAMTKDQ1QzBERUQ1OTUzNzMyMkY4NEZGMDAyQjREOTMxOEZCM0Q3MUJFNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAFI9JhThM5+2TpnM9vPcExAMa
Tr9N4s0KuBs1olGya2s3Gm/KDzBs9e0r7mOAflxiU6iQqv22hvYUtDoitPZcOTYJ
iMEXV1Q6REeNxySCOmypbrRw48f/4qEO98NU23wfDGPtZ0qzoUtAvSj95gQdhY7R
b0PDyd2BrROIeQGcI+hDLGgsdOoWdRVSt0RJEYaJSjeBSfveIcJESi6Kvy6Oz2VY
KcPP26C+h3dTYVoyfvpLICzfcwzl954B5G0XQCkVfJAHimAiYGE2J8xoRERKaNjh
7w4h8WUF3SYscnNZ3G8haZf5RJ6L3CSHjjr5FNRSMmErgZp0ncXpZX0tD6frAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQURcDe1ZU3Mi+E/wArTZMY+z1xvmcwHwYDVR0j
BBgwFoAU6uFYs8hNMHaMvA0dVgNOJucEtdAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjM1ZjdhMmYtNzI1ZS00Mzk5LTg2OWEtNGIxZmNmMmM2YTBjLzAvRUFFMTU4QjND
ODREMzA3NjhDQkMwRDFENTYwMzRFMjZFNzA0QjVEMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FQUUxNThCM0M4NEQzMDc2OENCQzBEMUQ1NjAzNEUyNkU3MDRC
NUQwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04
NjlhLTRiMWZjZjJjNmEwYy8wLzMxMzEzOTJlMzEzMTMwMmUzMTMxMzYyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzNTM1MzgzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBd250MA0GCSqG
SIb3DQEBCwUAA4IBAQB5Xole8rmrsiOg1JbF/qXIAYkfl8XXGCIIivahgNQD6h68
heqmgBmNf3y7RlyR/zdkROuPFMBT/00uqu3k327+KL0kSaFENqdFoSyY/BG8DyF8
N+JNvlG7isdU6WOQ5qNHECmOn0czftxeefVg1RWEGWHGeT6xg89ygp/vSTZkepqJ
pZ7R8NZ2SBAd1fr5NjOYlSM0j+GzcGlUOJNNYmtcOiMfJCQEadRrOsa/zImrJ2Nn
cazTs2vUcWohEEc35FzIZeKM4TGFy85X8X5yy47PwId7PkbQyupud/NLXxq9pOu5
taWmqRIcA9/uFrtHTungyQ7z8A8g0LUJTqduUl4N
-----END CERTIFICATE-----
Generated at Thu May 7 04:29:40 2026 by rpki-client