
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3131362e3230362e3231322e302f32322d3234203d3e203539323832.roa
File: 3131362e3230362e3231322e302f32322d3234203d3e203539323832.roa (raw, json)
Hash identifier: JaMj7Mn/vinF3SqmQ06RkAsyunCmsAh4LYSl4fBlc2I=
Subject key identifier: 1C:90:7B:88:2C:FE:F2:A3:9F:2F:F7:5F:97:B4:29:6D:13:23:DB:D1
Certificate issuer: /CN=69955FC73F1288024E7CAF0C1D825E8389B6B25D
Certificate serial: 24F7E2536F0238B034560896A9E7318C6B1D8633
Authority key identifier: 69:95:5F:C7:3F:12:88:02:4E:7C:AF:0C:1D:82:5E:83:89:B6:B2:5D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3131362e3230362e3231322e302f32322d3234203d3e203539323832.roa
Signing time: Sun 03 May 2026 02:57:47 +0000
ROA not before: Sun 03 May 2026 02:52:47 +0000
ROA not after: Sun 02 May 2027 02:57:47 +0000
asID: 59282
IP address blocks: 116.206.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl
rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 12:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:f7:e2:53:6f:02:38:b0:34:56:08:96:a9:e7:31:8c:6b:1d:86:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69955FC73F1288024E7CAF0C1D825E8389B6B25D
Validity
Not Before: May 3 02:52:47 2026 GMT
Not After : May 2 02:57:47 2027 GMT
Subject: CN=1C907B882CFEF2A39F2FF75F97B4296D1323DBD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a7:4c:72:e9:ac:66:70:0c:a4:60:65:7a:6f:
45:d9:c8:73:ca:e9:32:69:aa:ed:4c:57:0e:2d:79:
07:54:5b:b8:19:4f:6c:86:5a:2c:8e:ef:80:69:5a:
a2:48:24:68:d8:af:da:59:1c:89:15:63:79:c3:d0:
79:4e:52:75:ce:61:3b:65:97:b0:99:88:70:f0:f1:
66:40:e2:a3:a0:e4:43:87:20:90:f9:52:ad:12:9d:
5c:83:7a:71:8b:fa:ea:3a:5e:5b:8b:0d:f6:fa:f8:
67:b5:f0:44:3b:11:50:ad:12:94:a6:6b:04:62:e3:
61:c9:94:bf:99:32:45:cc:8c:72:85:1a:ad:24:cf:
88:1f:1c:d8:3c:f5:9c:41:1c:6f:0a:4a:7c:e8:09:
8a:27:24:e0:2a:6f:ac:a2:94:37:48:09:1a:8c:0e:
79:ca:91:ca:85:ff:79:5d:63:3c:1d:f5:73:84:db:
eb:95:bc:6e:56:a9:58:59:ed:6d:06:f0:8b:df:4b:
5c:07:ee:d2:e0:e6:ab:e2:4a:1e:c4:60:40:8e:d4:
d2:82:a8:34:d4:f7:fd:46:e0:3b:cc:82:4f:00:61:
66:fc:3b:ee:3c:4b:5b:61:66:41:9c:da:52:f6:15:
b7:a9:4a:54:73:bf:f8:df:dd:a7:99:d4:02:fb:48:
0c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:90:7B:88:2C:FE:F2:A3:9F:2F:F7:5F:97:B4:29:6D:13:23:DB:D1
X509v3 Authority Key Identifier:
keyid:69:95:5F:C7:3F:12:88:02:4E:7C:AF:0C:1D:82:5E:83:89:B6:B2:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3131362e3230362e3231322e302f32322d3234203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.206.212.0/22
Signature Algorithm: sha256WithRSAEncryption
81:f5:05:43:21:40:ed:10:74:05:80:b6:44:41:a5:db:78:ae:
5c:49:39:d9:30:3d:c4:5f:7f:97:34:3c:e7:12:1b:f6:3e:15:
d9:db:ba:f5:79:8d:83:fe:a5:ae:5b:ba:3d:14:74:38:07:fd:
79:8f:e9:aa:8b:21:ee:ab:26:9b:5b:69:56:53:52:14:2f:ef:
01:74:48:a2:48:0c:41:ff:f5:8e:e3:0d:40:31:0a:d7:9a:02:
6c:fd:4b:34:6d:b8:59:77:95:29:71:05:60:04:b5:0f:b0:65:
44:7c:af:34:9b:2f:da:8a:64:f5:65:f2:3d:7c:38:a6:52:d0:
7e:07:22:e7:be:4f:c1:8d:de:68:86:e4:b2:bd:bd:2d:14:ef:
74:38:dd:78:12:84:a9:39:ee:0b:98:a7:33:7a:75:53:d1:7f:
5d:60:bb:67:a2:48:09:89:91:04:71:31:06:66:bb:36:42:80:
47:70:f2:7a:48:f2:e2:19:22:14:56:96:5b:73:ba:e5:03:be:
ea:fd:19:91:c0:0b:b0:9d:bd:3e:6d:92:a9:d8:2f:00:26:8e:
c6:f6:55:70:fe:d8:fb:e7:04:d6:41:d4:80:60:21:48:f9:23:
de:6a:cd:0a:6c:21:24:34:14:53:3a:15:4e:e2:ce:10:11:52:
18:72:20:45
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUJPfiU28COLA0VgiWqecxjGsdhjMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk5NTVGQzczRjEyODgwMjRFN0NBRjBDMUQ4MjVFODM4
OUI2QjI1RDAeFw0yNjA1MDMwMjUyNDdaFw0yNzA1MDIwMjU3NDdaMDMxMTAvBgNV
BAMTKDFDOTA3Qjg4MkNGRUYyQTM5RjJGRjc1Rjk3QjQyOTZEMTMyM0RCRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0p0xy6axmcAykYGV6b0XZyHPK
6TJpqu1MVw4teQdUW7gZT2yGWiyO74BpWqJIJGjYr9pZHIkVY3nD0HlOUnXOYTtl
l7CZiHDw8WZA4qOg5EOHIJD5Uq0SnVyDenGL+uo6XluLDfb6+Ge18EQ7EVCtEpSm
awRi42HJlL+ZMkXMjHKFGq0kz4gfHNg89ZxBHG8KSnzoCYonJOAqb6yilDdICRqM
DnnKkcqF/3ldYzwd9XOE2+uVvG5WqVhZ7W0G8IvfS1wH7tLg5qviSh7EYECO1NKC
qDTU9/1G4DvMgk8AYWb8O+48S1thZkGc2lL2FbepSlRzv/jf3aeZ1AL7SAx1AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUHJB7iCz+8qOfL/dfl7QpbRMj29EwHwYDVR0j
BBgwFoAUaZVfxz8SiAJOfK8MHYJeg4m2sl0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTg0NjRhNWItMmZjZS00N2RhLTgwNDctNjhkMmJkNjNjOWMzLzAvNjk5NTVGQzcz
RjEyODgwMjRFN0NBRjBDMUQ4MjVFODM4OUI2QjI1RC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82OTk1NUZDNzNGMTI4ODAyNEU3Q0FGMEMxRDgyNUU4Mzg5QjZC
MjVELmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMxMzEzNjJlMzIzMDM2MmUzMjMxMzIyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzNTM5MzIzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCdM7UMA0GCSqG
SIb3DQEBCwUAA4IBAQCB9QVDIUDtEHQFgLZEQaXbeK5cSTnZMD3EX3+XNDznEhv2
PhXZ27r1eY2D/qWuW7o9FHQ4B/15j+mqiyHuqyabW2lWU1IUL+8BdEiiSAxB//WO
4w1AMQrXmgJs/Us0bbhZd5UpcQVgBLUPsGVEfK80my/aimT1ZfI9fDimUtB+ByLn
vk/Bjd5ohuSyvb0tFO90ON14EoSpOe4LmKczenVT0X9dYLtnokgJiZEEcTEGZrs2
QoBHcPJ6SPLiGSIUVpZbc7rlA77q/RmRwAuwnb0+bZKp2C8AJo7G9lVw/tj75wTW
QdSAYCFI+SPeas0KbCEkNBRTOhVO4s4QEVIYciBF
-----END CERTIFICATE-----
Generated at Tue May 5 21:02:54 2026 by rpki-client