
$ rpki-client -vvf rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132342e302f32322d3232203d3e203538333639.roa
File: 34352e3131322e3132342e302f32322d3232203d3e203538333639.roa (raw, json)
Hash identifier: Z2AVjlQfZb8a0z4AcvjV6f3LFewHNzJLk7eTt2ZCo9E=
Subject key identifier: CD:30:4C:D1:A2:9B:E4:17:11:74:21:C9:5F:8C:A3:19:01:E5:5A:9D
Certificate issuer: /CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Certificate serial: 1F6F88F08EE0BA2D718BA8A09431F149D59702AA
Authority key identifier: 4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132342e302f32322d3232203d3e203538333639.roa
Signing time: Sun 03 May 2026 02:15:18 +0000
ROA not before: Sun 03 May 2026 02:10:18 +0000
ROA not after: Sun 02 May 2027 02:15:18 +0000
asID: 58369
IP address blocks: 45.112.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:6f:88:f0:8e:e0:ba:2d:71:8b:a8:a0:94:31:f1:49:d5:97:02:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Validity
Not Before: May 3 02:10:18 2026 GMT
Not After : May 2 02:15:18 2027 GMT
Subject: CN=CD304CD1A29BE417117421C95F8CA31901E55A9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fe:e6:48:06:73:c6:0b:6b:f7:6a:64:e2:cb:
19:b7:e3:75:37:fa:2a:fd:d0:60:7f:83:1c:26:41:
b8:60:1e:91:92:27:ea:5b:00:01:b8:9b:b7:64:57:
ed:af:39:08:31:84:96:bb:f4:8e:18:b6:8b:ac:78:
e4:ff:fa:63:62:03:12:99:ba:a0:d8:7d:b4:47:6f:
d0:09:e7:7e:48:b5:55:ab:79:dd:33:25:4d:71:42:
36:c1:6b:32:4b:3e:b5:11:d0:da:75:94:20:ad:4e:
e5:f8:1a:4b:90:c3:9a:0a:a1:4b:e3:ab:58:06:05:
04:e4:f8:08:0f:3a:26:66:be:04:ab:6e:90:73:0e:
9c:32:88:a3:dd:74:66:30:3a:36:6b:be:90:03:bf:
19:55:1a:2d:c2:7b:f7:e8:b1:ac:48:27:17:ca:3d:
a5:bb:66:9f:5f:30:33:01:8b:30:ae:dc:e1:1f:96:
1f:c0:e7:76:de:4d:ec:3f:11:5e:00:97:bb:98:84:
47:72:c1:9e:12:ee:d2:92:02:cd:c7:e9:98:20:02:
31:f2:cc:fb:d3:94:31:d6:de:3e:1d:8c:7a:b9:92:
d9:3c:30:f8:f2:0f:f9:9c:48:5d:2b:e1:ae:dc:4b:
73:15:bf:95:9f:c0:da:6c:4a:f7:08:83:fb:f9:3f:
52:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:30:4C:D1:A2:9B:E4:17:11:74:21:C9:5F:8C:A3:19:01:E5:5A:9D
X509v3 Authority Key Identifier:
keyid:4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132342e302f32322d3232203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.112.124.0/22
Signature Algorithm: sha256WithRSAEncryption
d8:9b:39:85:c0:57:8c:31:8c:bc:59:0d:29:a3:e0:c3:b1:2e:
92:be:65:98:6e:39:da:49:0b:64:ec:38:a0:f6:1a:34:94:f8:
5b:be:9d:74:8c:7c:7d:2c:1e:92:11:c4:40:a9:fe:00:d7:b5:
f5:c9:7e:0d:0f:4a:c5:d4:9a:d3:82:62:91:59:02:de:67:1e:
53:7c:1c:2c:b7:61:8f:db:e6:d8:87:0d:48:06:03:12:68:dd:
8c:68:62:9e:c6:35:c6:03:d2:af:0d:5c:8a:9f:bc:8e:09:14:
92:ab:a4:0d:7c:b8:71:93:0f:ef:59:e0:52:8b:82:47:eb:4a:
0c:ce:90:f1:8b:72:9a:99:61:a0:10:dd:49:0c:10:f9:4f:d7:
a1:03:a1:5d:76:fe:67:f1:d4:63:31:0a:a5:fa:f5:54:82:db:
df:00:f5:d1:17:71:2a:ba:c7:80:07:74:dd:4d:f6:d1:31:1e:
45:cc:f8:2a:94:b1:7f:73:c0:a7:19:47:d6:3e:02:8c:02:b8:
b4:a8:47:10:a0:52:5e:75:b1:74:ed:84:70:34:ea:39:a1:da:
87:5b:e7:26:7d:b6:70:31:ed:1d:66:bd:49:ee:aa:b0:8c:60:
b7:17:4a:7f:41:72:a3:66:e7:10:46:5f:45:b2:a3:79:93:68:
9d:f4:8a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:46 2026 by rpki-client