
$ rpki-client -vvf rpki-rsync.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa
File: 34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa (raw, json)
Hash identifier: CSJEjkJY7azsSk9cH25LlICAA+0A0Fu3z6HyWvVTi50=
Subject key identifier: 81:AD:D4:E2:C7:1F:4E:7B:78:B5:AE:F9:43:55:B4:11:BC:93:E2:03
Certificate issuer: /CN=73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4
Certificate serial: 5F11C227DE3E68CC9980B6B11E1F087DDF1EC1F1
Authority key identifier: 73:DB:C9:21:D8:D2:EE:0A:4A:CC:EA:19:DC:93:57:F5:DE:4B:E3:E4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa
Signing time: Sun 03 May 2026 02:14:03 +0000
ROA not before: Sun 03 May 2026 02:09:03 +0000
ROA not after: Sun 02 May 2027 02:14:03 +0000
asID: 452023
IP address blocks: 45.123.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.crl
rsync://rpki-rsync.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:11:c2:27:de:3e:68:cc:99:80:b6:b1:1e:1f:08:7d:df:1e:c1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4
Validity
Not Before: May 3 02:09:03 2026 GMT
Not After : May 2 02:14:03 2027 GMT
Subject: CN=81ADD4E2C71F4E7B78B5AEF94355B411BC93E203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:51:4b:aa:02:34:e3:42:d8:84:db:d4:fe:43:
01:7b:e5:70:a7:04:96:5d:ab:0b:1c:7d:31:e0:32:
32:a7:d8:fb:a3:19:19:40:0b:08:a4:0f:6a:1a:63:
8c:fa:fc:9a:99:5c:b6:11:a2:88:31:4a:bc:8f:0b:
4a:e6:8f:ae:33:58:1a:46:e3:fa:b0:f9:37:cb:9b:
4e:93:64:12:90:9f:25:a2:06:77:6f:94:eb:79:5a:
26:bf:88:34:af:45:bd:54:20:94:a8:d6:6f:ce:39:
7e:39:5d:7f:7d:b3:7d:e1:f2:02:60:75:60:5a:06:
46:70:1f:0e:81:7a:e7:c6:64:5d:75:42:15:a7:7b:
dc:9a:60:d9:b0:c6:e4:1e:6a:77:5f:e7:9f:50:66:
af:17:7a:04:e7:e5:a0:d6:ed:61:fe:12:1f:9d:84:
9b:0f:8b:44:5a:a1:a4:26:14:ea:ca:f1:ea:66:14:
dd:50:94:27:e0:02:a6:69:03:48:46:8b:1c:f1:a2:
67:74:30:66:86:18:c8:d3:ba:ff:c6:b0:49:f8:10:
76:7e:31:8b:78:41:c2:17:eb:4d:e9:92:13:f0:d6:
19:57:40:7f:a6:f4:fc:ac:97:00:37:1e:0c:e3:51:
47:c9:02:1a:70:b1:39:c2:82:be:df:20:97:54:ff:
72:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AD:D4:E2:C7:1F:4E:7B:78:B5:AE:F9:43:55:B4:11:BC:93:E2:03
X509v3 Authority Key Identifier:
keyid:73:DB:C9:21:D8:D2:EE:0A:4A:CC:EA:19:DC:93:57:F5:DE:4B:E3:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/73DBC921D8D2EE0A4ACCEA19DC9357F5DE4BE3E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.123.143.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ed:7e:1a:06:e1:06:80:d2:2f:8f:60:79:a3:12:36:2c:2d:
c9:a6:b1:88:3a:1d:5f:55:e0:c4:46:26:c7:ff:3a:25:89:9e:
19:88:8a:f4:fc:46:2a:cc:07:e4:20:48:02:60:c5:c5:30:0d:
ca:4c:21:ff:d4:2c:a2:27:70:af:be:3e:cb:a8:49:9c:51:86:
ea:cf:ac:a0:2b:5f:08:8b:3a:8a:ce:3c:2e:6a:56:b9:a1:cb:
f2:03:02:30:b9:8d:32:fd:70:63:ff:9f:ac:ed:87:3c:62:8d:
88:d2:89:79:9c:35:45:99:86:c2:a8:84:96:24:54:bf:b9:49:
5d:a8:32:b3:ec:83:0b:c6:d2:e5:e8:f0:b7:88:54:89:15:b8:
17:02:20:bf:6d:e6:ed:2f:90:ca:e8:17:59:6c:0e:e7:1b:57:
80:c0:4a:6a:37:a1:f0:de:88:b3:c6:22:51:44:5b:31:23:e5:
57:be:bf:44:41:55:6f:79:76:d1:6e:4a:4c:12:f3:d9:69:1f:
98:72:65:05:ca:ab:97:ce:88:31:bb:79:32:e5:f9:b8:68:b8:
6a:c2:a9:c9:35:b2:91:5a:07:97:d4:ee:a7:61:be:96:af:dd:
ba:06:61:9a:25:b8:0c:20:eb:6f:af:75:3f:19:77:38:21:ef:
35:d1:8d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:29:01 2026 by rpki-client