
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/32372e3132342e36372e302f32342d3234203d3e20313532303339.roa
File: 32372e3132342e36372e302f32342d3234203d3e20313532303339.roa (raw, json)
Hash identifier: wi/PpzHgdp4LrfkWH5oe3HkF9UcbXKL8Usvw1NcrplY=
Subject key identifier: AB:48:FA:50:12:A9:94:B5:FE:DD:78:D3:2C:37:5E:81:28:AC:A5:DA
Certificate issuer: /CN=34617F5B566204A91A2C21380B5E25F66A437892
Certificate serial: 111F506242ECEE1887AB5896532690FEE797BAE4
Authority key identifier: 34:61:7F:5B:56:62:04:A9:1A:2C:21:38:0B:5E:25:F6:6A:43:78:92
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34617F5B566204A91A2C21380B5E25F66A437892.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/32372e3132342e36372e302f32342d3234203d3e20313532303339.roa
Signing time: Sun 03 May 2026 02:17:13 +0000
ROA not before: Sun 03 May 2026 02:12:13 +0000
ROA not after: Sun 02 May 2027 02:17:13 +0000
asID: 152039
IP address blocks: 27.124.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.crl
rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34617F5B566204A91A2C21380B5E25F66A437892.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:1f:50:62:42:ec:ee:18:87:ab:58:96:53:26:90:fe:e7:97:ba:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34617F5B566204A91A2C21380B5E25F66A437892
Validity
Not Before: May 3 02:12:13 2026 GMT
Not After : May 2 02:17:13 2027 GMT
Subject: CN=AB48FA5012A994B5FEDD78D32C375E8128ACA5DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:43:68:3c:a5:81:ee:98:0b:fa:e0:74:bd:6e:
a1:6b:34:0b:ad:ef:4d:ab:9b:bd:48:85:2c:6d:76:
a7:0c:26:0e:16:03:65:c1:2c:e8:29:2c:fb:06:29:
0d:08:ba:23:af:3d:a7:e4:e8:a4:bc:7b:fb:bf:21:
e3:b2:57:2b:fa:bb:15:fa:bc:f1:31:68:a3:92:7f:
de:73:9c:60:17:fa:0e:76:d2:b7:aa:b5:16:e8:33:
a9:cf:98:56:3b:9e:e3:b0:7a:21:8c:59:f7:f8:ce:
cd:73:1a:3c:c7:bf:b8:5d:39:70:fc:04:07:83:ec:
70:b3:2c:cd:c9:4b:84:f0:fd:9a:d9:ae:e1:74:41:
4d:eb:12:b5:5b:6f:7d:c0:f1:3e:50:38:73:51:c6:
2f:6d:52:bb:0a:a9:c6:0a:71:27:cb:3c:72:a5:50:
66:96:98:4c:8f:4a:86:15:66:b6:ce:2f:34:ca:c7:
f7:d5:a1:70:bf:22:86:c4:44:97:55:c2:11:41:8c:
92:73:92:65:3f:62:e2:1a:fe:94:aa:0a:b7:ce:e6:
23:3f:81:d4:b8:d6:b5:05:97:8d:63:12:8a:73:13:
60:26:e2:46:ae:f2:0f:9f:68:ab:fa:b5:9c:dd:80:
8f:8c:5a:a4:fa:d7:9f:aa:35:fd:57:23:d4:ac:b4:
94:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:48:FA:50:12:A9:94:B5:FE:DD:78:D3:2C:37:5E:81:28:AC:A5:DA
X509v3 Authority Key Identifier:
keyid:34:61:7F:5B:56:62:04:A9:1A:2C:21:38:0B:5E:25:F6:6A:43:78:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/34617F5B566204A91A2C21380B5E25F66A437892.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/34617F5B566204A91A2C21380B5E25F66A437892.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/32372e3132342e36372e302f32342d3234203d3e20313532303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.124.67.0/24
Signature Algorithm: sha256WithRSAEncryption
87:a5:81:72:f6:a5:ed:b5:f7:3c:8d:af:9e:a5:ba:7a:8e:00:
86:b0:33:1c:aa:7f:35:77:9b:29:99:86:fa:70:cc:07:86:05:
58:56:50:b8:9a:2f:d0:3f:79:92:85:4c:5b:26:1e:af:37:c1:
d7:e9:25:f3:34:cb:d2:65:20:85:a4:c2:32:a0:e0:ff:4b:bf:
33:93:50:79:8f:ca:b5:df:92:ea:99:5b:06:96:a9:c8:d6:11:
c7:3e:ae:40:9e:53:f7:47:db:be:c8:93:94:c6:9e:fb:f1:5b:
e6:95:c4:91:90:c9:97:3c:14:4c:16:c4:b2:3a:2c:fc:c3:d2:
76:c2:df:04:c8:00:63:c7:f2:a2:a4:2c:b4:7d:a3:f5:94:92:
92:3d:74:e4:8b:ea:99:ee:0e:c6:5b:91:b4:43:a1:7c:ce:45:
9f:8c:12:e9:52:85:ba:1e:96:af:12:f1:66:f5:db:83:a2:88:
a0:e2:f4:e7:6b:96:43:45:2b:ba:ba:a4:a8:d8:7e:9c:52:c0:
43:18:c4:7a:fa:a5:60:68:78:53:c2:5e:71:82:37:1e:a6:a0:
9c:5d:dd:f1:40:b6:41:33:63:0c:b5:11:72:0d:55:83:c7:e7:
4a:ff:28:7b:16:72:18:65:89:77:f5:20:9f:b5:be:53:98:26:
09:d5:ef:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:26:02 2026 by rpki-client