
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3232392e302f32342d3234203d3e203338353232.roa
File: 3132322e34392e3232392e302f32342d3234203d3e203338353232.roa (raw, json)
Hash identifier: LLLZ+Uple1yDAhrgh87zmF9HRC1nu1L4DywSxKkqt4g=
Subject key identifier: 49:3A:B5:A6:64:AA:7A:34:61:3B:5C:C7:90:8F:EE:FC:39:C0:B5:B0
Certificate issuer: /CN=87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C
Certificate serial: 1B236EFEFC99C52221183DDF3BE4C7D62C549B33
Authority key identifier: 87:BE:31:8D:9A:B9:E7:83:D2:D6:A8:E6:47:3B:14:BE:72:0F:4F:5C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3232392e302f32342d3234203d3e203338353232.roa
Signing time: Sun 03 May 2026 02:23:12 +0000
ROA not before: Sun 03 May 2026 02:18:12 +0000
ROA not after: Sun 02 May 2027 02:23:12 +0000
asID: 38522
IP address blocks: 122.49.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl
rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:22:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:23:6e:fe:fc:99:c5:22:21:18:3d:df:3b:e4:c7:d6:2c:54:9b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C
Validity
Not Before: May 3 02:18:12 2026 GMT
Not After : May 2 02:23:12 2027 GMT
Subject: CN=493AB5A664AA7A34613B5CC7908FEEFC39C0B5B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:56:bf:5f:e0:9c:3e:5a:77:35:e9:32:e2:9c:
36:7e:3f:5e:30:c3:04:7d:72:c5:c1:49:32:34:9c:
83:94:25:2a:8d:4f:6d:1e:1f:22:e5:73:c5:fe:92:
0e:34:8e:7f:2a:69:51:8c:7d:50:f8:a5:1a:70:03:
a6:29:6d:a7:2e:14:90:b4:b3:fc:e9:ec:b2:9c:f6:
fc:22:e2:1a:14:ed:84:eb:9f:79:a2:f3:e5:c4:d1:
ae:4a:8e:1a:7b:de:a4:37:2f:16:1b:a0:2f:d2:cc:
fe:d0:12:df:3b:ef:53:c4:21:10:ea:d6:9c:00:7f:
32:36:a5:92:c7:4f:2e:78:da:c0:50:87:2c:eb:7a:
63:99:af:2f:a3:07:ae:56:96:f1:38:45:13:ca:5a:
97:35:e4:99:8b:37:b2:57:2d:3b:80:42:c3:be:e5:
5f:05:30:74:be:45:d8:e9:13:b8:50:4d:a1:32:34:
77:ce:16:ae:59:7e:66:29:ee:bf:92:b4:f3:e4:1f:
c7:12:5e:f3:6b:46:d4:b1:30:1c:ac:4a:d4:63:c4:
55:76:88:9e:8a:8d:46:a3:9e:3b:c2:1f:e4:8d:b8:
b9:6a:02:bc:11:cb:77:d0:03:c1:05:cd:fd:ed:7f:
08:ee:bb:1a:ec:5b:dc:3d:80:64:a0:42:f5:7a:b8:
14:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3A:B5:A6:64:AA:7A:34:61:3B:5C:C7:90:8F:EE:FC:39:C0:B5:B0
X509v3 Authority Key Identifier:
keyid:87:BE:31:8D:9A:B9:E7:83:D2:D6:A8:E6:47:3B:14:BE:72:0F:4F:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3232392e302f32342d3234203d3e203338353232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.49.229.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:63:00:9b:45:51:69:58:2b:f5:9b:b1:df:90:60:ea:f3:c1:
f6:53:fd:48:b6:56:17:01:6e:cb:75:76:2f:7b:93:5d:cd:98:
47:af:1a:ab:3d:de:a9:c0:83:62:07:c4:b6:70:a6:00:f6:06:
7e:05:e4:8d:ae:a4:a3:16:7b:55:b4:5a:e5:38:f8:e5:c3:18:
34:51:b0:60:1c:b6:a0:f8:a6:71:70:ef:7c:73:2a:a0:c2:01:
e6:12:1c:37:4b:16:7e:71:30:d4:ee:e4:30:cc:a4:c6:61:ab:
8a:b9:69:4b:6c:23:5d:1d:51:79:84:04:3e:d8:40:cf:2a:ab:
de:02:c5:c1:c7:6c:2f:3f:7c:f2:6e:29:ad:33:d9:2a:b1:03:
c8:ed:8f:70:f4:de:78:ab:5b:a9:7d:65:a7:19:c6:6d:aa:c4:
48:ea:c4:4b:39:7d:a6:2e:a2:84:3f:9a:70:6d:4f:f0:36:3a:
96:60:b9:a1:9e:ff:d1:24:25:2d:ec:9e:28:22:14:fe:75:3b:
80:65:29:3f:74:7e:55:5a:c3:8e:7e:d5:7f:f5:8e:b3:db:c9:
8e:42:69:5b:52:56:38:85:7c:03:34:69:ff:76:df:c0:53:30:
02:80:ef:43:bc:86:50:bb:ff:83:8b:ed:40:81:f6:4d:c7:9d:
16:e1:4a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:08:33 2026 by rpki-client