
$ rpki-client -vvf rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/3132302e38392e39342e302f32332d3234203d3e203536323333.roa
File: 3132302e38392e39342e302f32332d3234203d3e203536323333.roa (raw, json)
Hash identifier: Ywxuhkdga9hO4itaG+v5I5zsagA1Lbo8qR7ItHh5q8A=
Subject key identifier: 1F:05:D6:02:1E:94:91:6F:D0:6D:C7:2C:15:0D:4D:8B:1C:54:77:BA
Certificate issuer: /CN=E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED
Certificate serial: 7DD92DF9288F0D07BADF53C12D9200CEB40873B1
Authority key identifier: E5:AD:37:F5:8F:E5:B7:B2:D6:C8:78:CC:65:72:DC:D9:7F:32:60:ED
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/3132302e38392e39342e302f32332d3234203d3e203536323333.roa
Signing time: Sun 03 May 2026 02:11:05 +0000
ROA not before: Sun 03 May 2026 02:06:05 +0000
ROA not after: Sun 02 May 2027 02:11:05 +0000
asID: 56233
IP address blocks: 120.89.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.crl
rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:d9:2d:f9:28:8f:0d:07:ba:df:53:c1:2d:92:00:ce:b4:08:73:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED
Validity
Not Before: May 3 02:06:05 2026 GMT
Not After : May 2 02:11:05 2027 GMT
Subject: CN=1F05D6021E94916FD06DC72C150D4D8B1C5477BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:24:ee:46:01:ca:33:9a:3e:7a:bd:7a:11:01:
d1:a6:60:56:03:90:2e:02:94:51:17:f8:88:59:76:
b6:25:eb:c8:9e:cc:9d:88:44:85:f5:6a:b2:76:e5:
97:92:f5:14:13:c8:07:db:2e:9a:60:f3:ae:2f:81:
31:55:07:0d:d4:9e:85:cb:d4:dd:51:43:81:82:90:
38:97:5d:e0:bc:4f:47:48:5e:ae:f9:ca:31:75:4a:
ed:94:2e:44:13:d2:f5:4c:fd:d0:ec:53:09:e0:f0:
a6:b9:09:14:04:75:b5:e1:64:ad:f6:ab:09:18:73:
73:34:43:e4:8a:c0:6c:a4:c1:09:a8:82:80:fa:68:
2b:c7:91:ba:86:9a:b0:91:b9:c1:d9:7e:4f:ec:4e:
7d:0f:95:e6:b0:6b:e1:fa:53:55:c4:d1:84:2f:84:
8c:18:38:85:44:be:13:e1:45:5b:bb:88:35:4a:f1:
98:27:42:2c:f1:76:de:37:85:4c:04:55:36:61:d5:
19:ff:67:4b:11:81:1c:eb:58:a6:82:e4:25:f3:5e:
9a:55:8f:8c:92:b0:1b:70:09:4c:2f:63:89:fa:e2:
b6:16:6c:3c:03:28:4b:6c:4b:89:df:23:1d:f2:62:
23:5d:d8:0a:49:78:f6:d7:07:c5:35:82:fa:ca:ec:
79:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:05:D6:02:1E:94:91:6F:D0:6D:C7:2C:15:0D:4D:8B:1C:54:77:BA
X509v3 Authority Key Identifier:
keyid:E5:AD:37:F5:8F:E5:B7:B2:D6:C8:78:CC:65:72:DC:D9:7F:32:60:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/3132302e38392e39342e302f32332d3234203d3e203536323333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.89.94.0/23
Signature Algorithm: sha256WithRSAEncryption
87:d2:08:0b:e0:8d:56:ec:e6:e2:ea:ab:b7:83:1a:c8:ca:d3:
7d:b7:df:35:8f:47:de:b7:9f:a8:d4:89:53:47:be:2b:f8:30:
38:20:ce:60:6c:6a:4b:7e:30:f0:60:ce:d6:d8:f3:a2:fa:cb:
f4:f0:2d:82:0b:e1:3e:ba:e7:7e:d2:46:50:92:40:ec:e5:2b:
29:da:89:77:57:84:55:88:9b:4c:e7:83:2e:83:8f:ba:81:c0:
b9:40:a8:e4:45:d5:61:2e:f3:12:c3:87:b1:ba:c8:fa:0d:fd:
6e:00:8e:74:76:e8:40:7f:1b:79:67:39:94:bb:28:fa:91:85:
20:a6:7a:09:ae:6d:fa:4f:e4:c8:e7:56:a2:82:60:c0:cf:bb:
15:63:16:0e:2d:c9:f2:60:d9:c6:ae:4f:8c:00:30:b7:13:46:
4b:b3:c6:e2:52:68:fc:b3:1f:c4:66:9a:04:5f:8c:eb:4c:6a:
4c:aa:e1:7e:71:6e:49:41:3b:8e:81:e8:e7:92:fa:3a:bd:d3:
09:a3:90:c7:0b:57:ee:83:84:de:db:e3:06:2f:cf:25:41:90:
44:fe:c8:93:2e:4d:f7:a5:4d:e7:1f:a5:cc:55:02:34:b5:3d:
0a:44:be:e8:37:02:a4:5e:32:aa:32:94:cc:d4:64:56:92:8a:
a1:b8:27:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:20:32 2026 by rpki-client