
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138392e302f32342d3234203d3e203234353334.roa
File: 35382e3134372e3138392e302f32342d3234203d3e203234353334.roa (raw, json)
Hash identifier: Vyn59WWzDbVDpHfa8qPn7Ythwg95mXNAyeJWWdZJ1nA=
Subject key identifier: 53:6C:D1:7D:5B:B8:98:81:DB:9E:2D:3D:1E:A0:E0:AB:0B:1B:A7:AD
Certificate issuer: /CN=54A9AA4CF14C7CF2ED286484218857A15AE91E9A
Certificate serial: 42252E916765E90977AA92457BC0970F5D95D490
Authority key identifier: 54:A9:AA:4C:F1:4C:7C:F2:ED:28:64:84:21:88:57:A1:5A:E9:1E:9A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138392e302f32342d3234203d3e203234353334.roa
Signing time: Sun 03 May 2026 02:11:37 +0000
ROA not before: Sun 03 May 2026 02:06:37 +0000
ROA not after: Sun 02 May 2027 02:11:37 +0000
asID: 24534
IP address blocks: 58.147.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.crl
rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:25:2e:91:67:65:e9:09:77:aa:92:45:7b:c0:97:0f:5d:95:d4:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54A9AA4CF14C7CF2ED286484218857A15AE91E9A
Validity
Not Before: May 3 02:06:37 2026 GMT
Not After : May 2 02:11:37 2027 GMT
Subject: CN=536CD17D5BB89881DB9E2D3D1EA0E0AB0B1BA7AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3b:d2:32:d2:2b:3a:38:d7:c7:ee:26:7e:d5:
76:2e:ef:dd:95:e7:b9:62:37:7f:bc:38:dc:27:ff:
1d:5d:e7:5a:a1:55:23:c0:ab:f1:80:5d:0f:15:4f:
71:b0:45:1c:3e:31:1a:8b:30:2f:d4:a7:cb:71:ed:
77:d3:6c:96:65:3a:44:d1:b3:a8:72:ec:1b:89:10:
4e:cc:52:46:e5:14:a9:9a:ec:6c:65:4d:7d:79:54:
eb:0d:eb:5d:a5:bf:d3:bc:3e:dc:a8:c5:da:85:d7:
fc:8e:99:f4:bb:6e:68:58:ec:2d:8a:63:95:e5:2f:
ba:0b:0c:f6:56:58:53:04:c9:10:bf:a8:37:25:87:
8c:81:c2:e2:cf:fd:22:4c:bc:83:bd:4e:07:15:42:
22:c8:64:95:96:7f:47:5e:61:0d:1d:ae:a3:6a:05:
57:d0:85:2c:5d:8a:1e:63:b9:f1:80:56:98:2d:e8:
90:b4:4a:ec:90:97:43:ec:e4:55:96:5e:af:b9:78:
24:50:80:5f:09:8e:47:a7:24:a0:8d:64:f0:f1:4f:
0c:8f:46:3a:be:c7:5c:9f:ac:2c:3f:53:e3:c4:76:
8b:61:d5:29:bd:91:d7:7e:b2:5f:7f:da:a3:00:07:
21:e1:bb:e4:f6:03:01:ab:7d:de:12:9a:32:fb:54:
e7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6C:D1:7D:5B:B8:98:81:DB:9E:2D:3D:1E:A0:E0:AB:0B:1B:A7:AD
X509v3 Authority Key Identifier:
keyid:54:A9:AA:4C:F1:4C:7C:F2:ED:28:64:84:21:88:57:A1:5A:E9:1E:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54A9AA4CF14C7CF2ED286484218857A15AE91E9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138392e302f32342d3234203d3e203234353334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.147.189.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:2b:1f:ec:c8:98:65:c5:15:8f:d5:6d:d7:69:78:9b:78:bd:
3d:f5:00:eb:2e:ab:8a:e9:f9:2c:21:6c:ad:aa:40:c0:0d:ff:
f2:da:7d:b6:39:b5:ad:8e:f5:09:0d:4c:72:ef:21:ec:43:00:
58:3a:32:2e:09:05:e1:db:15:85:7c:20:65:14:d6:1e:84:a9:
60:94:ad:ea:d2:ed:dd:30:77:a1:3f:43:10:9b:4a:31:27:02:
9e:92:1b:7c:52:32:3c:07:f8:0a:8b:af:fe:a6:c0:e4:a4:04:
3c:0e:cc:af:29:00:f4:1b:1f:1c:9f:64:4f:c8:50:1f:8b:42:
f9:9d:37:b9:6b:de:4c:d9:e4:69:f3:7a:da:cf:08:2a:a0:1d:
f5:ba:63:98:c4:0b:a8:05:50:e9:f5:ec:14:29:f8:dc:49:ab:
88:28:4b:65:18:e2:98:fe:53:d7:20:0e:40:b5:c5:ef:95:0c:
c9:ad:be:a0:91:65:a8:7c:70:67:3b:0e:76:b8:29:4d:4f:cf:
0e:55:8a:8d:71:58:f8:50:45:fc:e9:6c:2c:d7:be:2e:90:e3:
3c:96:8f:8e:c3:16:a8:e5:64:3d:84:8a:05:bf:35:00:71:7a:
53:7a:58:b3:13:f9:94:54:1b:a9:90:a9:ea:a9:91:a3:fc:d6:
56:6b:ad:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:10:31 2026 by rpki-client