
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137312e302f32342d3234203d3e203436303534.roa
File: 35382e3134352e3137312e302f32342d3234203d3e203436303534.roa (raw, json)
Hash identifier: d1NKSb9zCDz65Zahjy0PaWXg282C7xqtAafmjhthBLo=
Subject key identifier: 04:54:64:4C:37:37:FC:66:62:28:56:3A:6B:B4:12:2C:22:6A:25:88
Certificate issuer: /CN=7377350E3E3A151F4CC7127822802AD47B86A5CF
Certificate serial: 676715BAF951A21CF25D7C87E7615E7B97862220
Authority key identifier: 73:77:35:0E:3E:3A:15:1F:4C:C7:12:78:22:80:2A:D4:7B:86:A5:CF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7377350E3E3A151F4CC7127822802AD47B86A5CF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137312e302f32342d3234203d3e203436303534.roa
Signing time: Sun 03 May 2026 02:28:05 +0000
ROA not before: Sun 03 May 2026 02:23:05 +0000
ROA not after: Sun 02 May 2027 02:28:05 +0000
asID: 46054
IP address blocks: 58.145.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.crl
rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7377350E3E3A151F4CC7127822802AD47B86A5CF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:67:15:ba:f9:51:a2:1c:f2:5d:7c:87:e7:61:5e:7b:97:86:22:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7377350E3E3A151F4CC7127822802AD47B86A5CF
Validity
Not Before: May 3 02:23:05 2026 GMT
Not After : May 2 02:28:05 2027 GMT
Subject: CN=0454644C3737FC666228563A6BB4122C226A2588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8f:c2:10:58:5d:55:5d:46:ac:6e:37:a5:0d:
41:b3:b9:ac:c3:a8:24:23:c2:86:e8:33:0b:91:1d:
42:e9:e6:55:63:03:88:35:50:6c:9e:e6:cb:10:8f:
c0:a6:29:79:41:6a:76:f5:60:4e:10:14:d8:0c:a0:
70:d8:46:61:ff:2d:0c:d8:c9:c6:45:6c:64:03:1f:
c6:49:58:e5:06:da:a0:36:59:fd:9a:96:61:d1:a2:
a2:1a:8b:b6:06:a2:e9:65:90:ad:d9:39:d5:b3:29:
20:74:bf:dd:58:85:c9:6a:b6:58:7e:d2:0f:8e:9f:
5f:a9:f5:f4:21:b1:74:5d:96:56:7f:5a:75:a9:43:
2d:a6:55:d5:7f:0b:20:16:08:42:5c:21:dc:d6:cb:
10:1e:e0:c1:88:82:63:e9:86:b7:27:63:37:e5:20:
4f:2b:24:9c:b3:5c:dc:fa:77:9b:2f:61:77:13:6b:
c4:77:29:16:45:6a:e1:59:6f:18:75:de:aa:8b:ce:
ce:4a:77:26:ff:67:95:2d:c7:f9:ef:85:aa:e3:1f:
04:43:ed:04:71:e3:0f:c9:fa:1e:0c:ae:31:01:1a:
d7:ab:55:10:ef:2e:bc:74:76:62:61:94:81:1e:8e:
0b:2d:62:5e:d9:0a:96:c9:d2:90:dc:88:7c:6b:83:
f9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:54:64:4C:37:37:FC:66:62:28:56:3A:6B:B4:12:2C:22:6A:25:88
X509v3 Authority Key Identifier:
keyid:73:77:35:0E:3E:3A:15:1F:4C:C7:12:78:22:80:2A:D4:7B:86:A5:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7377350E3E3A151F4CC7127822802AD47B86A5CF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137312e302f32342d3234203d3e203436303534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.145.171.0/24
Signature Algorithm: sha256WithRSAEncryption
53:03:5e:cd:dc:95:79:b0:92:ca:d3:38:44:e8:4e:88:dc:de:
88:92:8a:25:66:30:88:34:14:7d:9b:87:3f:85:8e:ac:25:0a:
01:1a:b0:85:6b:d2:e8:10:8c:db:28:a0:d2:23:5b:6e:10:05:
9e:1a:bc:e0:7d:4f:7e:68:86:31:73:51:c0:b8:20:72:0b:87:
f7:f4:8e:c3:00:49:d6:b9:cc:9e:b6:e4:8a:4a:b8:99:4d:31:
5f:1d:9f:c9:c2:9d:a5:29:5a:f0:0f:b6:87:2a:48:25:3f:7b:
7a:73:87:93:7f:e1:b6:33:7b:7f:cc:52:bf:16:67:26:6f:68:
a1:13:7d:bb:61:a6:18:29:98:05:ac:b0:c8:f8:b5:40:c1:52:
a8:da:e9:e3:87:cb:0c:e0:98:ef:03:6c:db:f0:07:68:0f:10:
75:60:c3:65:ff:5a:2a:6e:11:06:9e:ce:4e:a5:7c:6a:c3:e3:
1f:77:7f:29:ff:1b:19:ab:a3:8f:0e:e1:f3:30:f0:11:72:38:
03:fc:02:b2:20:42:f8:6f:dd:12:6b:72:ca:82:c4:8e:30:e5:
5b:32:f6:99:45:1a:ee:4e:88:f7:77:7f:d9:2c:ac:b6:a9:64:
a7:6a:8e:45:9d:93:6f:e1:2b:51:08:b9:d8:36:80:39:90:54:
b7:4b:66:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:18 2026 by rpki-client