
$ rpki-client -vvf rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/32372e3132332e3232302e302f32322d3234203d3e203538333639.roa
File: 32372e3132332e3232302e302f32322d3234203d3e203538333639.roa (raw, json)
Hash identifier: mVRfuOqgCimUzaSG+pUbjrjmS74tFzKdy/OjDXJx6bo=
Subject key identifier: 67:E3:E1:C1:76:72:B7:35:41:6F:4F:BE:69:04:33:58:91:DB:7D:5B
Certificate issuer: /CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Certificate serial: 0CC926A6A29E817992761E15EA95DAA09347D039
Authority key identifier: 4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/32372e3132332e3232302e302f32322d3234203d3e203538333639.roa
Signing time: Sun 03 May 2026 02:15:26 +0000
ROA not before: Sun 03 May 2026 02:10:26 +0000
ROA not after: Sun 02 May 2027 02:15:26 +0000
asID: 58369
IP address blocks: 27.123.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:c9:26:a6:a2:9e:81:79:92:76:1e:15:ea:95:da:a0:93:47:d0:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Validity
Not Before: May 3 02:10:26 2026 GMT
Not After : May 2 02:15:26 2027 GMT
Subject: CN=67E3E1C17672B735416F4FBE6904335891DB7D5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a4:d8:3c:1e:1c:04:f8:b4:a0:44:ed:b4:dd:
51:36:4a:6d:e6:2c:2b:05:8b:5b:29:0b:29:1a:cc:
72:5b:29:e0:b6:7a:5f:a1:56:9c:52:8e:74:2a:12:
fa:d1:da:52:1f:6a:09:8d:7f:20:49:e3:3c:e4:27:
61:01:7e:40:41:d7:d7:74:bb:cf:3f:bf:99:f3:f8:
2d:e0:0c:ba:d6:7b:b6:98:21:80:92:12:a1:e9:b5:
70:38:c6:4a:14:9a:f0:e6:c6:23:a8:a9:22:ad:5d:
bf:a6:5c:cf:5a:3c:fe:67:fb:c8:fb:52:39:07:12:
bc:91:92:c9:1e:da:29:cf:9b:8f:d7:a9:ee:43:41:
04:d7:11:65:e4:0c:ee:93:21:e6:ce:8e:bc:00:16:
92:89:5b:ff:bb:22:53:b5:68:22:62:b4:05:5e:7c:
ef:2d:cc:d7:92:ac:e7:b0:dc:9f:6d:a2:bf:90:99:
ea:dc:48:a7:78:77:a5:cd:be:8e:b7:ca:b8:f9:62:
19:f6:25:b4:0b:a2:56:f3:70:18:0f:c6:a1:cf:e6:
be:3b:36:0c:40:38:9c:a2:c7:dc:d6:12:be:ec:f2:
43:a7:da:3e:f6:bb:60:7d:be:99:03:3e:44:04:be:
6b:ca:64:ff:f3:3a:59:78:81:29:b5:13:f2:00:ba:
b3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E3:E1:C1:76:72:B7:35:41:6F:4F:BE:69:04:33:58:91:DB:7D:5B
X509v3 Authority Key Identifier:
keyid:4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/32372e3132332e3232302e302f32322d3234203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.123.220.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:0b:fb:d6:e4:a0:a3:9d:8a:49:df:51:ae:95:87:ba:29:45:
81:7f:68:a0:ba:99:34:61:2c:e1:d2:96:49:e1:f2:6b:f6:0a:
e2:d0:43:35:ab:2f:2f:5a:75:52:f0:91:5b:e9:23:51:2d:d2:
6b:39:4a:dd:47:99:03:61:8f:b0:5a:0a:4d:8b:e5:32:97:f7:
03:aa:b0:69:08:d0:9e:d7:64:c7:31:46:f3:09:b8:94:5e:3a:
39:00:41:42:ce:99:3b:77:46:15:e5:8b:d2:34:c3:d4:06:dc:
1f:54:a4:4e:51:d0:4e:72:1a:c0:3e:c2:8a:3c:62:f6:e8:26:
8e:7f:24:57:ab:9a:23:c9:69:b4:47:68:1b:dd:fa:f7:9d:03:
65:31:79:1b:31:c9:09:47:1d:02:dd:ff:17:6e:c0:dd:ca:54:
54:35:b3:55:e6:05:ea:bd:ba:d8:10:03:b7:a9:82:dd:a4:d2:
8d:8d:f3:6a:36:4a:9b:a1:9f:76:7e:11:c2:5a:0d:f2:84:ce:
8c:67:51:79:d4:83:3c:81:26:f9:19:7e:cc:14:9e:82:aa:f4:
de:c6:16:73:f4:8e:fd:fb:df:fd:12:f8:d6:e5:0a:a0:e8:5a:
00:94:d8:24:5d:4c:d4:82:61:9e:26:59:a4:68:22:a9:2a:05:
72:ec:bd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:35:55 2026 by rpki-client