
$ rpki-client -vvf rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/32372e3132332e3232322e302f32342d3234203d3e203538333639.roa
File: 32372e3132332e3232322e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier: oxTeF433wOuRnqmrra1dcuGoQgJ0L9DNAOPUuOkuQMk=
Subject key identifier: 9B:63:5D:60:BF:ED:D7:60:F1:2C:56:43:3E:4E:F9:EA:76:9A:C3:25
Certificate issuer: /CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Certificate serial: 02F1AC4446820E7B27FD58636CCB13AD1A274B0F
Authority key identifier: 4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/32372e3132332e3232322e302f32342d3234203d3e203538333639.roa
Signing time: Sun 03 May 2026 02:15:27 +0000
ROA not before: Sun 03 May 2026 02:10:27 +0000
ROA not after: Sun 02 May 2027 02:15:27 +0000
asID: 58369
IP address blocks: 27.123.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:f1:ac:44:46:82:0e:7b:27:fd:58:63:6c:cb:13:ad:1a:27:4b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Validity
Not Before: May 3 02:10:27 2026 GMT
Not After : May 2 02:15:27 2027 GMT
Subject: CN=9B635D60BFEDD760F12C56433E4EF9EA769AC325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:84:47:7a:e7:ac:e4:d6:59:bc:42:d5:f5:09:
8d:8f:11:53:0b:62:61:6b:8c:63:17:c5:b7:3c:0f:
53:f5:bf:60:af:ce:0b:81:67:41:00:93:98:47:ce:
dc:1f:2b:cf:b2:fd:a2:fd:e0:a7:4c:af:a6:a4:f8:
42:d4:3d:e6:ae:28:da:78:51:4d:ba:4e:18:5c:e0:
b3:44:bb:08:4c:67:cc:73:7e:d7:66:5f:d8:44:7c:
a9:86:57:da:55:99:36:8e:01:80:dd:2e:2e:17:01:
e3:36:4a:e1:67:ad:28:db:20:a3:db:1c:3b:38:3d:
ac:4a:71:a7:c0:bc:d1:41:3a:61:61:0e:79:32:ed:
bf:63:86:14:39:15:a7:1d:32:9c:b2:80:74:30:d5:
eb:78:61:e3:80:6b:93:40:02:76:14:2b:f6:b9:0c:
86:dc:f9:da:f0:5b:fb:d8:c1:48:aa:bb:77:86:c4:
6c:49:db:94:7b:57:67:9e:51:d2:7f:d3:8a:0b:02:
d0:47:42:36:82:87:05:61:00:ce:5f:36:29:b3:7a:
b2:34:fd:88:00:1e:ed:18:53:96:ce:81:09:f7:2f:
de:e1:cf:8a:f9:78:b2:7e:06:84:e2:83:c5:79:20:
f8:58:97:bf:c7:30:89:4c:2b:16:8c:a6:18:5d:cd:
c8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:63:5D:60:BF:ED:D7:60:F1:2C:56:43:3E:4E:F9:EA:76:9A:C3:25
X509v3 Authority Key Identifier:
keyid:4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/32372e3132332e3232322e302f32342d3234203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.123.222.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:83:c8:4c:77:b6:cc:2b:5e:64:31:0d:25:7e:18:05:b4:4a:
04:53:84:83:16:44:40:89:48:79:ac:b3:86:56:da:97:f2:46:
35:ba:36:ae:c0:d5:cc:24:aa:2e:9d:02:93:a1:42:11:69:c5:
2e:d5:37:29:68:cb:75:16:5c:7b:bd:dc:ce:2d:4e:01:5e:a1:
5d:0f:d6:74:69:14:bd:f1:57:c4:f0:b9:e2:15:c6:15:82:f0:
ee:af:eb:ce:56:00:57:23:aa:e0:19:c0:64:e2:f2:bd:8f:36:
96:77:28:0e:9a:2c:03:c4:63:a9:b6:cb:1a:0b:14:d0:9c:e6:
67:7d:19:c8:42:8f:91:b1:da:77:c7:0a:dc:f1:70:45:3b:80:
ea:b8:16:d3:45:e9:96:bd:71:0f:52:a1:0d:1a:42:56:20:45:
75:06:17:7e:0a:ff:d0:e3:df:7a:8e:8d:d3:d5:d1:da:4e:06:
1e:5a:d9:cc:19:7c:24:57:1f:e4:d4:3d:29:a2:82:90:d0:09:
c3:c7:51:4e:5c:48:4d:24:24:5e:05:88:b5:2d:6b:22:9c:cb:
ef:c2:90:81:dc:00:a8:51:3c:6b:6f:16:09:7e:c9:d7:27:e6:
73:e2:9e:32:31:79:13:b7:6c:82:8a:7b:5a:8a:38:df:7f:de:
e4:a1:64:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:56:06 2026 by rpki-client