
$ rpki-client -vvf rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132362e302f32342d3234203d3e203538333639.roa
File: 34352e3131322e3132362e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier: Q29Vs2W2+Sl0h5TR1s8FaCHRaf2aVq5UzkNhizjpPUI=
Subject key identifier: 72:03:6D:3B:12:E2:92:2A:F8:3F:E1:B1:D4:86:AE:E5:00:71:AE:7E
Certificate issuer: /CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Certificate serial: 33DF977452D61E469C86DBFC760B5CA96C411E78
Authority key identifier: 4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132362e302f32342d3234203d3e203538333639.roa
Signing time: Sun 03 May 2026 02:15:25 +0000
ROA not before: Sun 03 May 2026 02:10:25 +0000
ROA not after: Sun 02 May 2027 02:15:25 +0000
asID: 58369
IP address blocks: 45.112.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:df:97:74:52:d6:1e:46:9c:86:db:fc:76:0b:5c:a9:6c:41:1e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Validity
Not Before: May 3 02:10:25 2026 GMT
Not After : May 2 02:15:25 2027 GMT
Subject: CN=72036D3B12E2922AF83FE1B1D486AEE50071AE7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:64:53:bf:93:d2:c3:ac:ce:f1:5e:6e:ec:7e:
7f:80:75:32:11:6c:c9:21:72:5a:03:7a:67:3f:a2:
e0:5a:c0:2c:39:87:a9:12:89:74:66:aa:d0:8c:25:
d2:85:42:23:57:7a:59:f3:a1:34:86:17:1c:c2:c2:
98:9f:09:76:48:76:be:45:e5:35:7d:6b:30:8e:4f:
5b:ff:3c:23:fa:38:62:1e:6f:bb:fb:d3:2c:9b:6b:
45:07:3f:f2:7c:36:f4:7f:c2:cf:0f:f0:50:a8:5c:
95:6d:92:c1:45:19:17:d6:3f:44:b8:ee:12:84:26:
3f:90:48:2c:19:57:26:b5:0e:c6:f0:6d:f1:08:7a:
f1:72:6e:8d:71:bb:cb:24:18:cd:98:05:28:98:28:
21:f3:f0:da:d4:b0:21:30:78:3b:93:33:b6:e8:50:
7d:59:78:a1:0d:6a:84:37:f3:45:63:69:7c:9e:66:
48:dc:05:d4:e0:87:2c:94:b5:9c:af:98:41:47:f5:
35:37:cd:f2:21:b6:92:74:8f:20:8c:13:9a:57:08:
cd:07:00:34:8b:fc:e7:8c:b1:3b:e2:dc:a0:50:2c:
87:a1:aa:55:82:40:20:1f:ab:50:ed:ac:28:95:72:
fd:58:a8:1c:57:ad:69:6a:6d:58:93:36:76:85:81:
37:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:03:6D:3B:12:E2:92:2A:F8:3F:E1:B1:D4:86:AE:E5:00:71:AE:7E
X509v3 Authority Key Identifier:
keyid:4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132362e302f32342d3234203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.112.126.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:45:7e:29:f2:79:58:38:6d:7a:8e:a1:71:63:3d:47:28:12:
b5:f8:07:88:d7:4a:31:d9:b5:a8:09:01:97:57:0b:c9:3e:b2:
86:1d:cf:af:fe:5b:e4:08:4a:d8:95:81:76:bd:40:a5:34:0b:
28:f0:2a:c8:58:f0:38:ee:22:89:03:73:a5:6e:38:bc:53:c0:
69:e7:91:10:97:7f:46:d0:d7:4b:ca:8c:d1:5e:dd:7c:99:a9:
8c:10:ed:5f:d7:69:bb:cb:af:83:0f:a5:04:32:b1:43:cb:ee:
18:7e:5f:74:33:06:60:16:79:ae:42:d7:bd:82:ca:a2:15:e3:
97:f8:a0:0a:af:ff:d9:80:eb:d6:c4:d6:bc:f1:b3:0a:5d:e3:
2a:aa:d6:53:99:aa:cc:78:c7:b8:0c:af:00:3b:bb:0e:4c:49:
9f:b1:5b:76:30:52:e8:23:4d:0b:71:95:3d:11:d7:6b:45:b6:
73:f5:6c:0b:e5:01:30:52:34:da:62:b1:97:23:10:84:85:71:
69:ab:b8:0b:8b:6f:09:f8:f6:66:36:e8:6e:52:87:2a:79:72:
da:7a:d3:63:b1:02:46:c3:a8:67:09:82:26:bb:3b:c2:f3:c8:
6d:80:0c:24:d5:25:df:bd:cf:14:25:2a:b8:99:0b:9c:7f:9a:
a4:b0:a5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:55:42 2026 by rpki-client