
$ rpki-client -vvf rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/3139322e3134302e3232342e302f32332d3234203d3e203536323333.roa
File: 3139322e3134302e3232342e302f32332d3234203d3e203536323333.roa (raw, json)
Hash identifier: Q4P3JJdyz+sguA+ShSmoSl4Uj2/ltj/HEOGjPDV46Ws=
Subject key identifier: D3:B8:E5:57:67:8F:C0:F2:F8:6F:88:A3:6B:3A:72:AE:19:24:F6:A7
Certificate issuer: /CN=E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED
Certificate serial: 7F139E92E5C2F8864FD9DA410B8BB802D3190330
Authority key identifier: E5:AD:37:F5:8F:E5:B7:B2:D6:C8:78:CC:65:72:DC:D9:7F:32:60:ED
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/3139322e3134302e3232342e302f32332d3234203d3e203536323333.roa
Signing time: Sun 03 May 2026 02:11:06 +0000
ROA not before: Sun 03 May 2026 02:06:06 +0000
ROA not after: Sun 02 May 2027 02:11:06 +0000
asID: 56233
IP address blocks: 192.140.224.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.crl
rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:13:9e:92:e5:c2:f8:86:4f:d9:da:41:0b:8b:b8:02:d3:19:03:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED
Validity
Not Before: May 3 02:06:06 2026 GMT
Not After : May 2 02:11:06 2027 GMT
Subject: CN=D3B8E557678FC0F2F86F88A36B3A72AE1924F6A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:92:d4:3c:4d:35:0e:a5:80:4b:4f:85:1f:61:
d5:59:2e:9d:10:4e:31:37:33:ac:60:8e:d8:5c:bd:
b4:20:48:f6:6d:d9:81:29:57:7e:36:4f:7b:51:26:
e4:2f:45:64:bc:6b:0a:c5:4a:01:8b:b5:63:cb:bb:
55:71:ad:1d:a1:d0:2f:bc:ce:9e:02:4e:e2:64:43:
ed:99:12:31:53:d2:93:a5:30:6e:81:26:e1:2d:28:
bb:12:b1:71:20:ba:25:5b:41:6f:68:d0:c6:cf:0d:
28:a6:0b:71:7a:61:c5:06:8b:5b:57:06:b4:6b:27:
68:c0:4a:c9:67:dc:c0:b4:71:5d:6e:67:e4:4c:0d:
85:97:f3:66:62:fd:05:3b:b2:14:9a:a2:b6:9f:95:
26:a7:b0:08:03:19:e9:11:0c:c5:cb:87:48:b8:a8:
d0:3c:bb:0a:9d:6a:39:d7:45:b9:cb:e3:e5:90:65:
7a:30:54:a0:92:81:1c:9d:a2:9e:22:e0:8a:2d:9e:
6c:5a:1e:ab:f0:e8:86:27:6d:b0:56:85:18:28:94:
44:a2:f2:47:11:82:79:f5:76:66:23:7d:dd:97:dc:
e1:32:74:0f:36:4d:e4:98:d4:80:5a:03:f2:22:d2:
8c:f0:4c:9f:13:2e:c1:8b:f4:f4:a9:71:5e:a1:26:
bc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B8:E5:57:67:8F:C0:F2:F8:6F:88:A3:6B:3A:72:AE:19:24:F6:A7
X509v3 Authority Key Identifier:
keyid:E5:AD:37:F5:8F:E5:B7:B2:D6:C8:78:CC:65:72:DC:D9:7F:32:60:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/3139322e3134302e3232342e302f32332d3234203d3e203536323333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.140.224.0/23
Signature Algorithm: sha256WithRSAEncryption
82:d4:62:30:b4:6c:81:78:21:c5:b7:cb:cf:58:e9:30:96:f0:
d3:cd:13:b4:e9:eb:22:e2:3a:8a:50:91:5f:e1:d7:7f:3a:ca:
58:ef:79:49:7c:86:00:6a:de:e1:00:49:fc:9e:21:fe:4a:f4:
8f:29:e4:1c:b6:40:8a:b0:33:42:40:58:06:68:f6:7f:d9:d5:
52:95:f2:c7:2f:ce:33:cd:e3:e7:cb:af:19:57:20:b0:5c:eb:
d9:17:c7:59:e5:c3:39:36:71:35:c0:37:74:48:7a:d6:26:d0:
26:10:54:19:94:1c:dc:9f:62:e5:80:c6:53:b0:c4:80:22:cc:
34:53:9b:ea:a7:9d:04:73:79:21:25:84:3a:12:71:d7:2c:31:
1d:48:77:28:cb:fc:fb:92:c5:e9:3a:9d:7d:ab:54:2c:66:dd:
57:7f:80:9f:8f:a3:96:11:ec:ca:27:2d:e9:0b:52:68:5f:c0:
ff:a9:1d:c5:79:7c:5e:9f:b7:8b:ff:1b:d4:29:41:03:25:be:
1d:bd:4d:08:2f:36:47:ec:f6:b0:62:79:36:95:0d:4b:c9:fe:
eb:34:42:1d:31:1d:36:ce:21:33:5f:4c:9e:c9:79:a8:7f:a1:
10:9d:d8:62:b7:2a:44:2b:be:1a:12:c2:ca:e9:03:12:07:d7:
d0:8e:55:49
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUfxOekuXC+IZP2dpBC4u4AtMZAzAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVBRDM3RjU4RkU1QjdCMkQ2Qzg3OENDNjU3MkRDRDk3
RjMyNjBFRDAeFw0yNjA1MDMwMjA2MDZaFw0yNzA1MDIwMjExMDZaMDMxMTAvBgNV
BAMTKEQzQjhFNTU3Njc4RkMwRjJGODZGODhBMzZCM0E3MkFFMTkyNEY2QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvktQ8TTUOpYBLT4UfYdVZLp0Q
TjE3M6xgjthcvbQgSPZt2YEpV342T3tRJuQvRWS8awrFSgGLtWPLu1VxrR2h0C+8
zp4CTuJkQ+2ZEjFT0pOlMG6BJuEtKLsSsXEguiVbQW9o0MbPDSimC3F6YcUGi1tX
BrRrJ2jASsln3MC0cV1uZ+RMDYWX82Zi/QU7shSaoraflSansAgDGekRDMXLh0i4
qNA8uwqdajnXRbnL4+WQZXowVKCSgRydop4i4IotnmxaHqvw6IYnbbBWhRgolESi
8kcRgnn1dmYjfd2X3OEydA82TeSY1IBaA/Ii0ozwTJ8TLsGL9PSpcV6hJrxBAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU07jlV2ePwPL4b4ijazpyrhkk9qcwHwYDVR0j
BBgwFoAU5a039Y/lt7LWyHjMZXLc2X8yYO0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDRmZDRiYzItNDFkNC00MmU2LWE3ZmYtNTk0OTM4ODUxMjZhLzAvRTVBRDM3RjU4
RkU1QjdCMkQ2Qzg3OENDNjU3MkRDRDk3RjMyNjBFRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FNUFEMzdGNThGRTVCN0IyRDZDODc4Q0M2NTcyRENEOTdGMzI2
MEVELmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA0ZmQ0YmMyLTQxZDQtNDJlNi1h
N2ZmLTU5NDkzODg1MTI2YS8wLzMxMzkzMjJlMzEzNDMwMmUzMjMyMzQyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzNTM2MzIzMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwIzgMA0GCSqG
SIb3DQEBCwUAA4IBAQCC1GIwtGyBeCHFt8vPWOkwlvDTzRO06esi4jqKUJFf4dd/
OspY73lJfIYAat7hAEn8niH+SvSPKeQctkCKsDNCQFgGaPZ/2dVSlfLHL84zzePn
y68ZVyCwXOvZF8dZ5cM5NnE1wDd0SHrWJtAmEFQZlBzcn2LlgMZTsMSAIsw0U5vq
p50Ec3khJYQ6EnHXLDEdSHcoy/z7ksXpOp19q1QsZt1Xf4Cfj6OWEezKJy3pC1Jo
X8D/qR3FeXxen7eL/xvUKUEDJb4dvU0ILzZH7PawYnk2lQ1Lyf7rNEIdMR02ziEz
X0yeyXmof6EQndhitypEK74aEsLK6QMSB9fQjlVJ
-----END CERTIFICATE-----
Generated at Wed May 13 00:44:12 2026 by rpki-client