
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3136382e302f32312d3231203d3e203436303534.roa
File: 35382e3134352e3136382e302f32312d3231203d3e203436303534.roa (raw, json)
Hash identifier: Hao2KVKZ/SYX9wVFj9FYi2+tYJ4CgtxYRSmxcGvPEds=
Subject key identifier: FF:D3:BC:86:7C:1D:BF:99:44:A6:B6:60:D9:F0:F1:E8:7D:FE:23:B7
Certificate issuer: /CN=7377350E3E3A151F4CC7127822802AD47B86A5CF
Certificate serial: 7EE80DCE412BB965EA25669DBE7A1F0EEC2CD5A0
Authority key identifier: 73:77:35:0E:3E:3A:15:1F:4C:C7:12:78:22:80:2A:D4:7B:86:A5:CF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7377350E3E3A151F4CC7127822802AD47B86A5CF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3136382e302f32312d3231203d3e203436303534.roa
Signing time: Sun 03 May 2026 02:28:07 +0000
ROA not before: Sun 03 May 2026 02:23:07 +0000
ROA not after: Sun 02 May 2027 02:28:07 +0000
asID: 46054
IP address blocks: 58.145.168.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.crl
rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7377350E3E3A151F4CC7127822802AD47B86A5CF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:45:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:e8:0d:ce:41:2b:b9:65:ea:25:66:9d:be:7a:1f:0e:ec:2c:d5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7377350E3E3A151F4CC7127822802AD47B86A5CF
Validity
Not Before: May 3 02:23:07 2026 GMT
Not After : May 2 02:28:07 2027 GMT
Subject: CN=FFD3BC867C1DBF9944A6B660D9F0F1E87DFE23B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:76:0e:21:44:f6:50:e9:32:85:97:72:31:7b:
a2:d8:72:60:55:c5:51:ca:8f:38:12:47:c1:ee:12:
ed:a3:1d:81:88:e4:57:7c:1e:7e:ce:8a:53:70:40:
44:93:d5:aa:27:10:65:4d:ac:86:f3:75:82:e3:f6:
3d:c7:4c:bd:1c:c8:c2:c2:eb:cf:88:9c:90:89:60:
36:0f:91:f1:8c:a2:f6:bb:16:03:b6:aa:54:a2:01:
e2:9c:75:68:d5:87:c5:b7:40:11:df:78:b3:fc:ae:
24:55:ce:cc:80:70:56:a3:6c:97:29:fc:3c:52:60:
2a:f1:76:ac:43:b0:c5:fc:69:f0:34:35:b3:54:7b:
40:64:13:32:7b:b9:f6:0a:7f:22:be:7a:25:8b:4e:
57:29:02:39:40:6e:ba:bb:43:05:a3:60:e7:2f:7a:
6d:1d:ac:0a:9d:30:74:8c:99:4c:5c:26:f4:22:21:
4b:59:01:0b:44:0a:42:bf:24:ed:3d:33:5b:02:08:
9f:01:c3:f9:cc:aa:4b:3a:47:b2:6c:69:27:4d:c1:
24:7e:ad:18:d3:cd:34:d4:b2:9e:9b:f9:5b:e4:d7:
12:d8:dd:a8:6c:ce:91:63:11:9e:05:4a:e9:2d:53:
5a:ad:ee:43:d7:f8:65:bd:05:53:86:35:29:4a:2d:
e5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D3:BC:86:7C:1D:BF:99:44:A6:B6:60:D9:F0:F1:E8:7D:FE:23:B7
X509v3 Authority Key Identifier:
keyid:73:77:35:0E:3E:3A:15:1F:4C:C7:12:78:22:80:2A:D4:7B:86:A5:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7377350E3E3A151F4CC7127822802AD47B86A5CF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3136382e302f32312d3231203d3e203436303534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.145.168.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:14:f2:bb:80:0b:8d:4f:6d:bb:c3:85:88:1a:10:3d:62:4b:
ad:20:8c:73:f0:8e:1f:93:85:28:54:aa:ce:c8:6d:84:eb:0d:
be:dd:96:d1:93:6f:62:ee:ba:d2:e0:ad:63:fe:32:2e:37:82:
5d:1d:cf:7d:90:3d:00:40:65:e3:79:2e:e4:30:e8:e5:1c:41:
0d:f8:e9:a6:e0:e2:28:bc:81:3c:1a:0e:5c:6e:69:41:4a:f2:
ef:40:ea:0b:04:cd:d7:20:29:5e:1c:d1:e8:3e:17:1b:2c:02:
b2:77:3d:49:68:1d:f1:4d:78:d6:40:cc:08:e6:d5:90:b5:2f:
2b:c8:69:6a:fa:c6:c7:76:e7:9e:b3:5a:f5:8f:b0:d0:7b:b3:
cf:5e:7a:f6:70:43:50:6e:34:53:99:39:f4:5a:76:a8:62:ca:
61:2f:0e:89:39:5b:12:2d:79:02:37:73:73:23:f3:00:60:3b:
17:c8:07:f8:36:e7:76:c3:07:e3:a0:e6:0d:5e:0a:f1:8c:ed:
db:1e:59:01:73:58:de:9f:e6:fd:9b:49:ab:3f:13:94:07:62:
29:90:09:b4:a4:3d:bc:49:57:2e:0e:8e:9c:63:a3:69:c6:8f:
9a:96:54:07:4f:76:60:ec:3a:ea:93:37:d6:64:36:1c:3b:07:
69:a1:06:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:59:06 2026 by rpki-client