
$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3132362e302f32342d3234203d3e203435313437.roa
File: 3131392e3131302e3132362e302f32342d3234203d3e203435313437.roa (raw, json)
Hash identifier: /X0ioMd7A47R4Aqa2WG2L8OBSR64wzLT/CMYskdewAs=
Subject key identifier: 0C:FD:FC:B5:14:B6:B0:73:FF:DC:96:39:FE:90:F3:86:86:07:7B:59
Certificate issuer: /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Certificate serial: 1BE9B3EC158AB2543B766C021BA6173F6F6315C2
Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3132362e302f32342d3234203d3e203435313437.roa
Signing time: Sun 03 May 2026 02:38:26 +0000
ROA not before: Sun 03 May 2026 02:33:26 +0000
ROA not after: Sun 02 May 2027 02:38:26 +0000
asID: 45147
IP address blocks: 119.110.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 07 May 2026 23:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:e9:b3:ec:15:8a:b2:54:3b:76:6c:02:1b:a6:17:3f:6f:63:15:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Validity
Not Before: May 3 02:33:26 2026 GMT
Not After : May 2 02:38:26 2027 GMT
Subject: CN=0CFDFCB514B6B073FFDC9639FE90F38686077B59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:95:4f:18:86:98:9d:3d:8b:4e:f5:c4:f0:
27:bc:f0:49:02:3f:56:2a:a8:0c:c9:92:ca:bd:52:
2e:df:97:3b:69:97:63:f7:73:92:82:b4:7a:83:0c:
3e:7b:fb:42:d0:ea:90:ff:c1:1c:f2:b2:79:aa:b9:
f0:5c:ae:9f:ea:eb:c9:04:ee:a9:31:e3:2f:c0:92:
83:06:48:65:d2:37:51:46:df:dd:e8:f2:3b:af:2a:
25:e2:d3:e3:61:8f:2a:76:64:bb:ec:e7:1d:b5:e6:
27:00:bd:b7:d8:50:5d:46:ef:51:66:2e:a4:2e:ae:
2e:d4:a7:82:5b:4f:00:1b:62:b0:83:92:1f:17:26:
f6:67:bf:5f:a9:42:4e:da:7b:53:c0:c0:b6:e7:68:
38:53:21:f8:9e:db:80:79:7e:07:c9:34:6c:63:b0:
17:cf:90:95:31:34:25:0c:3e:ed:0e:2c:64:28:01:
83:cf:4f:ec:d2:78:d0:83:60:c5:98:79:6a:4e:d6:
ba:80:c0:57:dc:46:54:07:b1:98:2c:81:e2:de:6f:
1b:1e:82:ba:ca:ab:f1:1e:ca:87:04:2c:83:84:2e:
cb:5d:12:1f:7e:6d:3a:db:0f:1e:27:e4:10:86:08:
3a:10:e4:b5:60:f1:d4:a6:37:f1:a9:40:b8:8b:91:
0a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FD:FC:B5:14:B6:B0:73:FF:DC:96:39:FE:90:F3:86:86:07:7B:59
X509v3 Authority Key Identifier:
keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3132362e302f32342d3234203d3e203435313437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.110.126.0/24
Signature Algorithm: sha256WithRSAEncryption
21:0e:f8:48:30:47:bd:89:b4:b9:c7:c5:93:53:e9:1a:11:d1:
e8:33:fa:4e:3b:91:5e:15:ae:d0:ae:08:ac:99:7d:97:f3:a2:
05:d4:83:75:27:3b:3c:d8:07:d8:07:bb:a7:ae:06:99:6b:18:
92:d3:74:70:86:ea:df:08:29:1b:f1:f1:26:fd:8c:7d:3e:e5:
b3:25:a2:92:95:7f:c6:4c:de:2b:ed:83:22:58:c7:37:4a:80:
7b:f6:f7:bd:e6:bd:8b:be:e7:e7:81:38:9b:c8:cf:68:d8:ee:
da:de:b8:64:a1:56:67:ca:89:92:0f:67:5c:08:5c:69:80:dd:
19:b4:7f:1b:42:56:17:36:60:57:b7:98:0a:a7:78:42:c2:a4:
d3:bd:dc:d6:fc:e9:b7:3f:f0:46:0a:bb:50:d1:63:0e:38:b9:
af:77:19:e9:99:fe:2a:2d:58:53:bc:96:9b:73:63:79:81:cc:
4a:b9:f7:09:c6:8e:3c:a9:d9:d4:e7:31:82:ae:6a:7c:9b:b5:
8b:4f:97:70:85:22:04:f9:1a:5a:87:22:2c:38:5d:c1:41:db:
47:c5:cb:00:ce:d4:68:d9:a1:0f:e1:30:54:be:44:5b:01:8a:
52:f3:28:3d:58:ac:c2:01:2e:35:53:70:e6:0b:5e:3e:d3:cd:
ac:54:30:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:12:23 2026 by rpki-client