
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38322e302f32342d3234203d3e20313338303737.roa
File: 3131342e3139392e38322e302f32342d3234203d3e20313338303737.roa (raw, json)
Hash identifier: 6mHwG1PMQsD/GklC9gDu3CSvDZW10TZpTdVyM0RMxoQ=
Subject key identifier: 6F:84:02:C0:05:37:82:49:09:E9:FE:BC:64:B3:97:90:6A:1F:60:DD
Certificate issuer: /CN=CA547F005E84823E6A8A471723C17168E8E44644
Certificate serial: 2BCAE30B43266D9F43454C3BA4E5C21F58E8DF0B
Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38322e302f32342d3234203d3e20313338303737.roa
Signing time: Thu 17 Sep 2026 03:14:33 +0000
ROA not before: Thu 17 Sep 2026 03:09:33 +0000
ROA not after: Thu 16 Sep 2027 03:14:33 +0000
asID: 138077
IP address blocks: 114.199.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl
rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 01:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:ca:e3:0b:43:26:6d:9f:43:45:4c:3b:a4:e5:c2:1f:58:e8:df:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644
Validity
Not Before: Sep 17 03:09:33 2026 GMT
Not After : Sep 16 03:14:33 2027 GMT
Subject: CN=6F8402C00537824909E9FEBC64B397906A1F60DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7e:82:d7:47:51:d2:ca:e7:80:d4:3e:55:46:
1d:1b:b8:74:44:95:58:ea:b4:3e:25:19:54:e5:de:
97:88:a0:38:2b:34:44:95:14:61:13:ef:ad:7e:ba:
8e:ca:81:cd:b0:0a:fd:ee:07:f9:52:4d:32:e5:f9:
a8:bb:be:b5:47:f0:e5:cb:6a:d6:12:1d:3b:af:99:
0a:5e:02:62:6f:24:c9:88:a1:d7:13:71:1a:ab:b0:
4e:ab:00:cd:c3:a4:84:00:c1:b4:f8:24:f5:a2:4d:
7a:fb:d9:f0:7e:55:ce:1f:4a:10:04:a1:a0:13:83:
af:28:7b:3d:ad:4f:47:84:18:66:9a:23:33:41:c6:
c8:5d:c0:f7:cd:eb:fa:39:59:49:58:d9:10:e4:6a:
5e:f8:ba:23:95:15:8a:3f:b1:7f:58:24:dd:f3:0b:
17:31:b2:bd:2e:ea:6d:aa:03:97:31:58:fa:f6:d5:
aa:8b:1b:cf:3f:90:38:a6:6b:98:79:6b:47:cc:02:
d7:b1:0b:06:ab:c6:0b:f9:54:96:c7:74:98:a6:9b:
0c:44:ed:b1:00:07:35:d9:b5:25:5e:ae:66:32:2e:
95:da:e9:23:0b:f4:85:1c:ec:9a:d5:1b:7c:0c:e9:
50:f1:14:ac:1f:48:d8:6e:03:5b:52:26:0e:5d:3c:
37:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:84:02:C0:05:37:82:49:09:E9:FE:BC:64:B3:97:90:6A:1F:60:DD
X509v3 Authority Key Identifier:
keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3131342e3139392e38322e302f32342d3234203d3e20313338303737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.82.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:5b:a7:91:86:e8:18:0a:92:51:93:73:ad:18:45:f3:b3:5a:
f9:15:4c:9e:cd:b6:73:e2:5f:d9:19:fd:73:39:b2:ab:06:88:
8b:9c:9d:8f:14:df:12:12:40:8c:2c:d6:cb:3f:71:fa:e4:93:
da:57:a8:16:34:b9:c5:1a:7a:b0:2e:db:61:fc:ef:46:89:e7:
ee:34:9e:bb:74:38:74:56:98:43:01:59:d4:9f:83:55:0b:a8:
a0:c4:64:71:15:8e:5d:07:29:c5:4e:49:0c:6d:08:4d:cd:d1:
83:29:8a:a5:a7:d8:69:a3:e1:a8:8d:b3:0b:5c:2b:2c:10:5a:
8c:b5:d6:e1:cf:8a:a1:12:90:9a:d1:ee:bd:e7:ef:54:f9:4b:
ed:da:64:eb:90:9a:9b:6b:d1:31:ba:f5:31:7a:72:a5:bb:0a:
6d:d3:6e:23:52:7a:b3:81:02:a0:cf:74:4b:05:08:a9:9d:7e:
d0:11:01:69:cd:6f:1a:36:2b:ee:ac:25:e7:2d:19:66:78:1f:
52:e2:3c:34:5e:0b:f8:99:75:8f:ea:cb:89:4d:bc:79:11:8e:
41:e1:19:8d:95:2a:e0:ac:a2:a3:c3:e9:c9:d1:e8:3a:3c:17:
1d:88:cf:3a:e7:19:d9:5d:49:2c:4f:39:cf:ef:fe:22:1b:cb:
14:cf:2e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:37:58 2026 by rpki-client