
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38352e302f32342d3234203d3e20323032303336.roa
File: 3131342e3139392e38352e302f32342d3234203d3e20323032303336.roa (raw, json)
Hash identifier: +xMjk07PVFN4WKRC2S/9TE23WQEtwI2GHs9R15LxpbU=
Subject key identifier: C0:16:95:6C:5B:11:59:E1:77:CF:E5:38:CA:9D:8B:9F:C2:A8:7E:FA
Certificate issuer: /CN=CA547F005E84823E6A8A471723C17168E8E44644
Certificate serial: 28F9BAF5B373AEFBEE45E829203CFEC178B3F4CB
Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38352e302f32342d3234203d3e20323032303336.roa
Signing time: Mon 31 Aug 2026 10:47:16 +0000
ROA not before: Mon 31 Aug 2026 10:42:16 +0000
ROA not after: Mon 30 Aug 2027 10:47:16 +0000
asID: 202036
IP address blocks: 114.199.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl
rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Sep 2026 09:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:f9:ba:f5:b3:73:ae:fb:ee:45:e8:29:20:3c:fe:c1:78:b3:f4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644
Validity
Not Before: Aug 31 10:42:16 2026 GMT
Not After : Aug 30 10:47:16 2027 GMT
Subject: CN=C016956C5B1159E177CFE538CA9D8B9FC2A87EFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:97:5a:83:8a:f5:ab:66:c0:bd:82:e7:27:12:
e5:38:39:da:62:06:f2:25:1d:90:a0:c7:66:0b:2e:
33:75:76:72:ae:e7:f7:05:29:92:b6:4f:51:55:cf:
b1:e6:9c:6b:16:f3:d9:e8:c7:1c:a2:ac:5c:a6:71:
48:3a:9c:9a:18:9a:a1:ba:12:90:f5:c0:e1:28:f4:
93:23:62:68:75:9b:b4:49:f2:03:a9:94:08:1e:4b:
54:7b:a5:a6:01:3d:ba:5b:d9:9e:76:bc:7e:99:d4:
9c:89:50:a7:3b:ad:1c:a5:35:8b:6c:37:7e:c3:86:
24:e5:b8:7c:38:2a:47:a5:60:30:58:b4:cb:dd:47:
7d:db:65:ab:8a:9d:ba:6b:54:e3:82:14:b4:01:22:
5c:eb:a2:d3:9e:02:72:b2:17:43:6b:85:15:94:31:
6d:66:62:52:ab:de:d4:9c:62:14:c0:3f:28:7b:be:
cb:83:6d:b2:86:e8:9a:0d:95:60:a9:4b:c8:bc:c4:
2f:19:7f:e9:fc:80:f1:1c:01:bc:f0:d1:50:91:58:
de:16:ef:34:63:0c:86:42:23:d4:34:4b:73:a4:7a:
df:6f:92:e1:d3:10:87:9e:04:27:51:ae:ea:86:4f:
1d:84:f3:79:66:3a:fd:0f:94:c6:d0:c9:a7:26:ea:
b8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:16:95:6C:5B:11:59:E1:77:CF:E5:38:CA:9D:8B:9F:C2:A8:7E:FA
X509v3 Authority Key Identifier:
keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38352e302f32342d3234203d3e20323032303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.85.0/24
Signature Algorithm: sha256WithRSAEncryption
13:34:bd:24:94:58:17:e1:70:14:aa:e4:13:60:2a:12:f7:86:
d3:ad:8c:3a:52:e9:bd:57:be:e4:bf:8d:68:69:e6:23:36:21:
ac:8b:d7:42:9e:81:62:e1:18:fd:98:33:5b:d2:4d:04:c1:64:
e6:ff:02:8e:45:c8:d0:f2:69:86:c1:63:68:e8:d7:b1:90:9d:
23:3b:70:ae:b3:69:a2:5e:47:79:5b:a1:43:ad:97:6a:94:c8:
9d:eb:0b:c4:f7:e4:4b:a7:78:da:87:4c:fa:a7:cb:69:68:14:
ea:af:e4:1b:1a:25:eb:bb:b0:c3:37:56:fc:9f:bc:6a:d0:96:
27:76:b1:68:aa:a6:db:56:64:fe:7a:c8:75:3b:04:a4:a7:7f:
5e:12:d6:19:49:8d:22:76:e2:cf:bb:31:68:8d:5a:a6:f9:3a:
d8:5a:fd:28:ce:70:73:f7:ee:75:2f:aa:16:ed:02:c6:25:9a:
7e:3e:59:18:41:77:90:02:ef:a7:00:36:a8:7f:3c:ff:4d:14:
a9:f0:c4:9a:4f:0c:cb:c2:67:9b:72:b6:d6:30:ba:57:e8:79:
1a:dc:3b:61:c2:59:4d:bb:6f:53:f5:e0:f9:88:57:cf:7b:b8:
85:be:ce:21:54:c3:4c:19:ef:d9:ec:bb:fd:c6:f5:2d:e3:8e:
7e:fb:12:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 00:20:44 2026 by rpki-client