
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138362e302f32342d3234203d3e203234353334.roa
File: 35382e3134372e3138362e302f32342d3234203d3e203234353334.roa (raw, json)
Hash identifier: jPDRbw49v7/x8exk1bJ0ina/caLrmzrS8avW8MUPoko=
Subject key identifier: BC:68:E1:4F:8A:53:1C:8F:8C:EB:17:DA:66:BB:C3:F2:69:64:35:7B
Certificate issuer: /CN=54A9AA4CF14C7CF2ED286484218857A15AE91E9A
Certificate serial: 4253C997D5901DAA0BB94A4730DC54A0187C5499
Authority key identifier: 54:A9:AA:4C:F1:4C:7C:F2:ED:28:64:84:21:88:57:A1:5A:E9:1E:9A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138362e302f32342d3234203d3e203234353334.roa
Signing time: Sun 03 May 2026 02:11:35 +0000
ROA not before: Sun 03 May 2026 02:06:35 +0000
ROA not after: Sun 02 May 2027 02:11:35 +0000
asID: 24534
IP address blocks: 58.147.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.crl
rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:53:c9:97:d5:90:1d:aa:0b:b9:4a:47:30:dc:54:a0:18:7c:54:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54A9AA4CF14C7CF2ED286484218857A15AE91E9A
Validity
Not Before: May 3 02:06:35 2026 GMT
Not After : May 2 02:11:35 2027 GMT
Subject: CN=BC68E14F8A531C8F8CEB17DA66BBC3F26964357B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6f:b1:4d:3e:91:b6:3c:ad:ad:da:12:85:dd:
3f:57:9f:88:5e:d7:49:41:4f:00:03:17:92:3d:58:
bb:f2:5e:2b:f1:8e:8c:4e:a6:6b:0d:1e:b9:dd:1c:
dc:aa:df:dc:27:45:c3:61:03:75:53:dd:b2:e2:40:
82:2f:19:14:14:b5:3a:9a:50:d3:b6:4d:f3:6e:5f:
fc:b8:2b:91:39:79:e7:47:9f:1e:36:19:b3:66:61:
4d:ad:6b:cb:61:a6:cf:cb:11:f7:18:20:64:c5:58:
21:49:0f:9a:90:aa:14:c2:64:a8:54:19:b0:03:66:
c6:d2:cc:a3:4c:7b:0f:0f:28:32:34:c4:46:25:20:
6f:35:57:fa:7c:e4:34:71:d0:aa:d8:bb:ee:2d:8e:
97:b6:b6:d4:4e:12:cc:c5:70:f0:7a:ca:13:70:1c:
a6:64:ed:fd:78:bb:d9:89:21:9b:a1:36:e3:f7:52:
96:18:5d:21:37:a9:13:b3:7d:fb:1b:a9:08:4a:b7:
b6:fc:d4:18:ba:f6:ba:fb:62:63:6d:02:e4:f7:9c:
0e:04:82:a1:8d:38:e3:9f:c9:0b:9f:7a:4d:b1:e5:
d1:cb:19:e0:af:a1:2f:18:d0:63:0f:70:67:87:46:
4c:ac:58:f3:8f:35:e0:ee:41:34:e8:1f:9c:c0:ae:
a3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:68:E1:4F:8A:53:1C:8F:8C:EB:17:DA:66:BB:C3:F2:69:64:35:7B
X509v3 Authority Key Identifier:
keyid:54:A9:AA:4C:F1:4C:7C:F2:ED:28:64:84:21:88:57:A1:5A:E9:1E:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138362e302f32342d3234203d3e203234353334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.147.186.0/24
Signature Algorithm: sha256WithRSAEncryption
76:d5:ac:f8:28:67:10:57:10:05:5d:af:0f:d4:30:65:61:29:
88:a2:ce:3c:cd:fc:f0:62:86:e1:f5:aa:43:f4:bf:56:e7:5c:
68:f1:c3:18:e4:95:70:33:3a:db:7c:d3:2a:d5:d5:1b:b3:c8:
78:e2:8c:02:d4:50:66:e6:c9:f5:87:cc:07:2e:51:0e:55:4f:
ac:8b:a9:93:dc:d3:4b:58:e3:f2:48:48:a9:82:33:cd:8f:23:
46:fb:c1:71:21:9e:cc:9c:3b:c8:4c:4b:2a:42:a9:4b:8b:5f:
68:c2:ac:37:92:b8:8b:05:e8:58:3c:28:ce:6a:7b:81:c2:4f:
96:a2:75:14:d9:19:b3:f8:4d:47:4d:83:12:0d:ed:d1:f1:00:
7c:39:65:01:75:60:b4:b9:8d:f2:35:20:4e:78:fd:ff:2a:52:
d7:91:c0:d8:15:f7:67:32:db:c9:78:02:5e:02:52:fc:61:9c:
8e:a9:02:ff:89:cc:59:cf:4a:a8:5b:99:2f:bb:39:d9:d6:52:
88:d5:aa:0a:73:d6:61:38:4b:64:b1:af:bc:5a:e0:6a:c8:66:
06:c6:35:9f:ba:50:f9:6e:9e:ec:95:98:18:6f:e7:0b:38:25:
eb:81:e5:0e:e1:06:24:d4:1a:95:0e:3a:77:88:8a:2b:a0:55:
4c:d4:47:f4
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUQlPJl9WQHaoLuUpHMNxUoBh8VJkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRBOUFBNENGMTRDN0NGMkVEMjg2NDg0MjE4ODU3QTE1
QUU5MUU5QTAeFw0yNjA1MDMwMjA2MzVaFw0yNzA1MDIwMjExMzVaMDMxMTAvBgNV
BAMTKEJDNjhFMTRGOEE1MzFDOEY4Q0VCMTdEQTY2QkJDM0YyNjk2NDM1N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSb7FNPpG2PK2t2hKF3T9Xn4he
10lBTwADF5I9WLvyXivxjoxOpmsNHrndHNyq39wnRcNhA3VT3bLiQIIvGRQUtTqa
UNO2TfNuX/y4K5E5eedHnx42GbNmYU2ta8thps/LEfcYIGTFWCFJD5qQqhTCZKhU
GbADZsbSzKNMew8PKDI0xEYlIG81V/p85DRx0KrYu+4tjpe2ttROEszFcPB6yhNw
HKZk7f14u9mJIZuhNuP3UpYYXSE3qROzffsbqQhKt7b81Bi69rr7YmNtAuT3nA4E
gqGNOOOfyQufek2x5dHLGeCvoS8Y0GMPcGeHRkysWPOPNeDuQTToH5zArqNZAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUvGjhT4pTHI+M6xfaZrvD8mlkNXswHwYDVR0j
BBgwFoAUVKmqTPFMfPLtKGSEIYhXoVrpHpowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDYyNDA1MmUtMjIwNS00OGYzLWEzY2ItY2U4YjMyNmI4ZjcxLzAvNTRBOUFBNENG
MTRDN0NGMkVEMjg2NDg0MjE4ODU3QTE1QUU5MUU5QS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81NEE5QUE0Q0YxNEM3Q0YyRUQyODY0ODQyMTg4NTdBMTVBRTkx
RTlBLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA2MjQwNTJlLTIyMDUtNDhmMy1h
M2NiLWNlOGIzMjZiOGY3MS8wLzM1MzgyZTMxMzQzNzJlMzEzODM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzNDM1MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADqTujANBgkqhkiG
9w0BAQsFAAOCAQEAdtWs+ChnEFcQBV2vD9QwZWEpiKLOPM388GKG4fWqQ/S/Vudc
aPHDGOSVcDM623zTKtXVG7PIeOKMAtRQZubJ9YfMBy5RDlVPrIupk9zTS1jj8khI
qYIzzY8jRvvBcSGezJw7yExLKkKpS4tfaMKsN5K4iwXoWDwozmp7gcJPlqJ1FNkZ
s/hNR02DEg3t0fEAfDllAXVgtLmN8jUgTnj9/ypS15HA2BX3ZzLbyXgCXgJS/GGc
jqkC/4nMWc9KqFuZL7s52dZSiNWqCnPWYThLZLGvvFrgashmBsY1n7pQ+W6e7JWY
GG/nCzgl64HlDuEGJNQalQ46d4iKK6BVTNRH9A==
-----END CERTIFICATE-----
Generated at Wed May 13 10:30:11 2026 by rpki-client