
$ rpki-client -vvf rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/34352e3131372e3133322e302f32332d3234203d3e20313532303038.roa
File: 34352e3131372e3133322e302f32332d3234203d3e20313532303038.roa (raw, json)
Hash identifier: GrepR63KDV2OCxgT4VnRGzl+c5tlY/pn9/rvF4ob5/0=
Subject key identifier: 1E:28:82:16:37:D2:91:C5:5A:F0:3A:45:CE:3D:99:D8:7D:41:B9:47
Certificate issuer: /CN=0689842E4B56026FA506540CDEFB7A076C36BFE8
Certificate serial: 7FB411E1C4A689CCDDCDC588EDE3E8BC5764C54F
Authority key identifier: 06:89:84:2E:4B:56:02:6F:A5:06:54:0C:DE:FB:7A:07:6C:36:BF:E8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0689842E4B56026FA506540CDEFB7A076C36BFE8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/34352e3131372e3133322e302f32332d3234203d3e20313532303038.roa
Signing time: Sun 03 May 2026 02:19:58 +0000
ROA not before: Sun 03 May 2026 02:14:58 +0000
ROA not after: Sun 02 May 2027 02:19:58 +0000
asID: 152008
IP address blocks: 45.117.132.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.crl
rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0689842E4B56026FA506540CDEFB7A076C36BFE8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:b4:11:e1:c4:a6:89:cc:dd:cd:c5:88:ed:e3:e8:bc:57:64:c5:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0689842E4B56026FA506540CDEFB7A076C36BFE8
Validity
Not Before: May 3 02:14:58 2026 GMT
Not After : May 2 02:19:58 2027 GMT
Subject: CN=1E28821637D291C55AF03A45CE3D99D87D41B947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:af:33:ce:0f:7e:fd:09:2a:11:70:c8:d7:87:
b7:e8:00:dd:29:5a:04:07:31:37:43:3f:0b:12:5a:
ae:24:12:f4:b3:08:47:e2:d9:c3:b8:a7:45:9d:2b:
8a:8d:78:55:90:42:cf:79:f0:86:da:0a:cb:d9:e7:
dd:1e:1a:de:29:f1:28:9c:c7:6f:cc:11:7a:34:e9:
1d:82:dd:d8:39:27:e1:8d:d3:1c:35:f7:b6:88:25:
ba:3c:76:dc:e9:cb:a7:a2:78:e5:90:78:2d:af:7e:
38:c4:1f:69:bf:71:e9:55:bf:43:ac:b4:6e:94:16:
a8:b1:9b:b8:ee:ab:f9:4e:d2:94:1d:77:39:1f:a5:
87:ac:e1:cb:f1:77:cd:14:5c:62:c2:02:86:cc:ec:
e0:83:ea:a5:9e:4a:95:b9:7b:7e:28:c9:bb:fd:24:
2a:1c:61:4a:91:b8:da:48:05:de:1e:91:7f:42:ad:
03:52:0a:c8:e4:f9:79:a0:df:33:cb:2c:f7:27:72:
29:16:c8:ba:4e:4e:a3:04:74:d0:0b:0c:33:4b:1d:
51:ee:a6:77:cf:a5:97:9e:17:d5:d1:dc:51:32:e8:
7a:35:b8:e3:af:9d:a4:5a:2a:ac:4f:59:1a:6d:c3:
51:38:fc:32:7c:0e:e4:09:5c:18:f9:3d:b1:bf:0e:
e7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:28:82:16:37:D2:91:C5:5A:F0:3A:45:CE:3D:99:D8:7D:41:B9:47
X509v3 Authority Key Identifier:
keyid:06:89:84:2E:4B:56:02:6F:A5:06:54:0C:DE:FB:7A:07:6C:36:BF:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/0689842E4B56026FA506540CDEFB7A076C36BFE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0689842E4B56026FA506540CDEFB7A076C36BFE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/34352e3131372e3133322e302f32332d3234203d3e20313532303038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.117.132.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:f6:82:ed:4d:a2:b2:5e:fa:da:04:09:07:fa:44:7a:ba:75:
6c:6d:e2:94:d4:e0:3d:a4:13:7f:35:ef:9f:6b:b9:5b:43:43:
65:b0:1e:74:90:46:4b:ce:8a:c4:25:75:51:59:24:90:ab:34:
30:b1:f2:46:1f:e6:8a:d3:85:e9:b5:62:ba:a4:bf:2a:bd:74:
d9:7e:11:97:f0:43:0f:3e:d8:56:ef:a7:3d:80:22:27:a3:77:
08:85:41:c6:a0:7b:d1:64:85:4a:41:81:61:8b:6b:04:56:b4:
71:7b:11:37:03:52:19:2b:42:2e:1d:75:ee:81:81:4e:fb:dd:
08:1a:a6:ec:68:6a:5c:db:7b:72:36:f5:39:90:67:55:9e:c0:
5b:65:8f:bd:02:57:d0:56:58:11:20:d6:68:f0:cd:7a:b6:04:
b2:50:9d:82:48:17:fc:78:00:92:d8:86:51:6d:8d:d0:b2:de:
63:6e:ab:24:ca:a1:05:22:cf:a4:74:96:41:aa:f6:0d:b9:a2:
cc:d3:0a:df:60:07:b0:d8:c7:9d:0c:f5:ba:85:ab:70:a2:ea:
8d:09:56:19:f3:5b:22:80:a3:57:68:0e:ae:1f:aa:99:f7:7f:
73:e7:c1:68:c1:cb:16:5f:4c:74:71:c4:d6:f4:f2:d1:18:93:
fd:15:43:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:19:00 2026 by rpki-client