
$ rpki-client -vvf rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/34332e3235322e3134342e302f32332d3234203d3e203536323333.roa
File: 34332e3235322e3134342e302f32332d3234203d3e203536323333.roa (raw, json)
Hash identifier: +7LdedJhuPY+xo3rq8YD2pVQmA3XwTXZAE9pIrm2QyM=
Subject key identifier: 27:42:0D:CA:D7:4E:E7:BF:F2:4B:CD:A7:B9:F4:24:68:9D:C5:5A:00
Certificate issuer: /CN=E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED
Certificate serial: 6293A03E3BA8C05426792F042AE6475AD28CF04D
Authority key identifier: E5:AD:37:F5:8F:E5:B7:B2:D6:C8:78:CC:65:72:DC:D9:7F:32:60:ED
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/34332e3235322e3134342e302f32332d3234203d3e203536323333.roa
Signing time: Sun 03 May 2026 02:11:06 +0000
ROA not before: Sun 03 May 2026 02:06:06 +0000
ROA not after: Sun 02 May 2027 02:11:06 +0000
asID: 56233
IP address blocks: 43.252.144.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.crl
rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:93:a0:3e:3b:a8:c0:54:26:79:2f:04:2a:e6:47:5a:d2:8c:f0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED
Validity
Not Before: May 3 02:06:06 2026 GMT
Not After : May 2 02:11:06 2027 GMT
Subject: CN=27420DCAD74EE7BFF24BCDA7B9F424689DC55A00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:1e:29:a6:29:92:7b:ab:d1:7a:d8:81:69:
50:a5:3f:93:00:c4:22:7c:e2:3d:1d:8f:3e:41:65:
6f:b1:c9:c4:18:7b:d9:e9:d5:db:52:8d:15:b9:8a:
9c:66:65:c8:5c:63:e2:f7:ef:b1:a5:a6:a5:fa:bc:
d9:7a:64:8a:73:7d:8c:70:43:c9:18:a8:24:ea:d3:
83:de:83:b3:e0:e8:98:2b:12:62:ea:84:5f:ef:0c:
be:a6:fc:eb:63:c2:d9:82:d0:17:fb:96:33:24:b9:
a8:9b:2a:c1:81:b5:d0:c4:2e:90:d8:09:a8:10:b1:
da:16:ca:f8:1e:0f:b0:50:95:8c:5d:b1:9f:d5:38:
71:09:fb:04:86:fa:3f:ce:91:d7:99:79:7b:87:9d:
e6:cc:1d:3d:a9:f4:58:f1:a4:ef:c6:c2:04:e5:75:
87:c3:8a:2e:db:0f:bc:9a:b2:a1:62:f8:70:da:6f:
85:b8:cc:f8:db:61:c4:f1:d2:d8:0c:64:f6:5c:66:
e8:50:df:cc:fc:d8:3c:0a:4c:2c:97:98:b1:30:24:
dc:33:96:4b:f9:5e:01:0d:b6:03:51:e6:45:66:cb:
8e:66:6b:73:e6:45:8a:76:76:96:e9:6f:5a:04:ff:
f4:52:0b:d7:7a:0f:fb:67:ef:85:e3:a9:6a:f7:7d:
68:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:42:0D:CA:D7:4E:E7:BF:F2:4B:CD:A7:B9:F4:24:68:9D:C5:5A:00
X509v3 Authority Key Identifier:
keyid:E5:AD:37:F5:8F:E5:B7:B2:D6:C8:78:CC:65:72:DC:D9:7F:32:60:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5AD37F58FE5B7B2D6C878CC6572DCD97F3260ED.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/34332e3235322e3134342e302f32332d3234203d3e203536323333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.252.144.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:b0:72:3c:7e:30:63:06:6c:f2:51:a3:88:31:ee:22:95:1f:
ea:37:20:4b:bc:f9:6b:03:16:cf:55:01:62:8a:85:6e:8e:f2:
b7:de:5c:3d:07:ab:16:3c:61:e6:bc:fc:d9:14:e7:b9:9c:ac:
73:28:a8:bc:03:3b:93:b8:9f:78:f2:b2:99:2d:f9:b7:ce:ce:
f7:a7:ae:f2:93:6e:76:5e:56:ed:c9:2c:0c:80:54:ec:99:86:
18:aa:da:1b:7c:ff:f6:e3:f1:05:79:25:79:c8:bc:94:52:ee:
cf:88:4d:20:1c:ae:d2:78:0a:63:b2:05:42:30:54:48:11:d7:
87:33:3b:a8:da:ac:85:0b:31:9a:b7:4a:fc:ef:05:1b:c7:cf:
fb:bf:b5:2d:de:70:de:c1:62:7d:6d:17:95:1d:41:92:b4:41:
58:ce:81:28:b8:a8:f2:a4:64:e9:8f:f6:b2:43:36:a2:55:82:
68:4f:3a:0e:79:a3:f2:c2:ba:03:48:63:02:5b:21:5c:98:4a:
74:87:09:d1:a1:a6:e9:a3:6d:87:1a:8e:26:96:d6:18:f1:c3:
38:d4:e0:bf:2e:a5:0c:7c:6b:d9:6a:08:58:f2:b9:29:7b:d0:
e2:fa:f5:8f:a8:04:fe:df:f7:87:dc:76:e6:34:6e:c6:b3:10:
6b:cd:3c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:32 2026 by rpki-client