
$ rpki-client -vvf rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137362e302f32342d3234203d3e203535363930.roa
File: 34322e36322e3137362e302f32342d3234203d3e203535363930.roa (raw, json)
Hash identifier: AYoGa7j37L8hrtr5+H0Rn8sSOm5spOm3kBm4+aOmlpA=
Subject key identifier: 9F:1A:1B:4B:98:2D:43:64:D9:BE:66:32:46:0D:A3:FF:26:8A:60:C3
Certificate issuer: /CN=F236C7A77A6371D17FE87C85E2C5B6966B9B2883
Certificate serial: 27DD89CF4371A7ABCE02DADBD7F045580812AB07
Authority key identifier: F2:36:C7:A7:7A:63:71:D1:7F:E8:7C:85:E2:C5:B6:96:6B:9B:28:83
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137362e302f32342d3234203d3e203535363930.roa
Signing time: Sun 03 May 2026 02:12:16 +0000
ROA not before: Sun 03 May 2026 02:07:16 +0000
ROA not after: Sun 02 May 2027 02:12:16 +0000
asID: 55690
IP address blocks: 42.62.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.crl
rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:dd:89:cf:43:71:a7:ab:ce:02:da:db:d7:f0:45:58:08:12:ab:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F236C7A77A6371D17FE87C85E2C5B6966B9B2883
Validity
Not Before: May 3 02:07:16 2026 GMT
Not After : May 2 02:12:16 2027 GMT
Subject: CN=9F1A1B4B982D4364D9BE6632460DA3FF268A60C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ad:9d:87:eb:2a:8b:67:1b:d6:66:29:4a:b5:
a7:fd:15:37:a6:10:5c:92:ee:a3:11:84:31:d2:f3:
f3:c4:2f:de:31:86:13:61:5c:ce:79:24:80:cc:31:
7b:7d:e2:16:b1:94:f9:3e:d7:16:0f:6d:d4:86:b8:
c2:13:d3:21:b4:c2:ea:11:46:00:24:61:d3:eb:04:
5b:af:cb:56:90:c7:70:60:4c:73:d1:9c:9e:28:ff:
b0:51:5d:58:5c:ff:34:fc:d2:02:9a:b1:af:47:a9:
14:07:83:35:df:b4:40:42:73:03:93:71:d8:5f:3d:
9a:34:15:2d:20:1e:38:a1:f2:63:e6:ee:c7:46:b6:
02:f4:28:5e:57:c6:00:1a:fb:13:36:05:fd:e2:8c:
af:c8:6d:c4:1d:ee:96:e6:c7:03:85:3c:15:5c:0e:
17:05:a0:e5:df:58:e6:b7:d2:95:29:0f:44:f2:87:
27:0c:86:cd:81:29:80:f6:4e:b6:d8:d4:73:7c:c4:
71:7e:57:c7:85:4f:bf:25:ed:18:25:7d:9b:87:bc:
3b:26:a1:8d:3c:70:67:e8:9f:44:1a:40:34:0e:ca:
14:d5:4b:4f:74:df:b5:59:02:b7:35:0c:2c:06:22:
a4:a9:e5:39:19:40:cb:08:02:43:7b:ad:b8:e0:55:
4f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1A:1B:4B:98:2D:43:64:D9:BE:66:32:46:0D:A3:FF:26:8A:60:C3
X509v3 Authority Key Identifier:
keyid:F2:36:C7:A7:7A:63:71:D1:7F:E8:7C:85:E2:C5:B6:96:6B:9B:28:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F236C7A77A6371D17FE87C85E2C5B6966B9B2883.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/34322e36322e3137362e302f32342d3234203d3e203535363930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.62.176.0/24
Signature Algorithm: sha256WithRSAEncryption
15:fc:c3:5a:70:0b:a2:39:62:46:64:0b:f1:9d:d8:d7:ad:c7:
b2:48:be:2a:16:fa:71:ec:f3:08:c7:05:19:ee:df:98:79:d1:
f5:d9:9f:04:fe:de:b3:c0:a2:73:0c:6f:b3:87:a5:2b:70:0b:
df:36:e1:a5:f0:7b:74:15:83:79:f4:d2:36:f3:d2:c1:b0:5c:
58:90:dd:82:4a:57:60:05:10:44:41:b2:c2:7a:1b:9a:d7:75:
2e:9d:c1:2d:ef:5c:9f:56:2b:50:73:03:8b:28:0a:a8:08:d8:
0d:40:00:e0:f0:b9:47:0a:66:00:20:31:10:cd:b7:3d:e9:5f:
a8:de:8f:7e:ce:dd:d6:0a:28:ec:2b:67:b3:81:67:fa:d1:a5:
6a:58:dc:d3:39:06:fd:91:da:c4:1f:c1:3a:aa:e3:57:bd:95:
19:2a:e4:22:63:8b:2e:1a:d4:d5:ac:09:22:23:39:f0:8f:b8:
3b:d2:b4:d1:1c:ff:83:3e:05:98:06:54:ae:98:e1:f0:e2:f0:
2c:4d:09:9c:f1:e9:51:d6:ea:75:42:7a:81:50:8d:b9:c2:46:
5a:17:91:b9:3c:a4:7d:2a:25:77:89:ed:54:65:a0:4b:e6:0a:
3a:f3:eb:64:a1:98:7c:80:94:4b:b3:fa:b2:2c:6a:f8:59:c2:
b9:42:65:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:39 2026 by rpki-client