
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137342e302f32342d3234203d3e203436303534.roa
File: 35382e3134352e3137342e302f32342d3234203d3e203436303534.roa (raw, json)
Hash identifier: B1+lVC5q4sIsDS/x8/d5eAraCNrj0NOZBU8+Bv2wtx0=
Subject key identifier: 8A:B2:9C:EA:91:1D:D0:CD:37:9B:A1:F5:DE:77:B7:0A:19:19:03:ED
Certificate issuer: /CN=7377350E3E3A151F4CC7127822802AD47B86A5CF
Certificate serial: 71ECBBDEF10C8E14DE1040B70882762B07CF02BF
Authority key identifier: 73:77:35:0E:3E:3A:15:1F:4C:C7:12:78:22:80:2A:D4:7B:86:A5:CF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7377350E3E3A151F4CC7127822802AD47B86A5CF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137342e302f32342d3234203d3e203436303534.roa
Signing time: Sun 03 May 2026 02:28:06 +0000
ROA not before: Sun 03 May 2026 02:23:06 +0000
ROA not after: Sun 02 May 2027 02:28:06 +0000
asID: 46054
IP address blocks: 58.145.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.crl
rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7377350E3E3A151F4CC7127822802AD47B86A5CF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:45:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:ec:bb:de:f1:0c:8e:14:de:10:40:b7:08:82:76:2b:07:cf:02:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7377350E3E3A151F4CC7127822802AD47B86A5CF
Validity
Not Before: May 3 02:23:06 2026 GMT
Not After : May 2 02:28:06 2027 GMT
Subject: CN=8AB29CEA911DD0CD379BA1F5DE77B70A191903ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f3:bb:79:f4:55:ea:d4:31:16:9a:ae:bc:59:
19:ee:dc:21:4c:bf:17:4f:2d:30:10:12:79:35:c0:
51:db:79:bc:c3:a9:1b:bf:37:cc:8b:e0:b2:58:94:
67:84:02:76:dd:d2:4b:33:90:7b:6d:9b:86:21:89:
6f:5f:89:81:77:7b:c7:a3:0a:b0:ad:5e:73:90:df:
ee:a8:ee:22:11:60:46:74:96:1d:31:10:91:e3:53:
79:ad:6d:e8:1b:0b:c3:8d:10:a9:7d:3b:8b:50:e6:
b7:53:02:90:08:f4:ab:73:73:50:0b:34:f9:fa:a2:
aa:45:16:66:66:81:8d:87:95:a2:0c:0e:87:23:8e:
7b:1a:b5:2a:ce:24:ec:63:51:80:0c:51:44:2f:3a:
e4:f1:cc:24:c1:ff:21:f3:04:8d:95:99:49:e7:fa:
f3:a5:58:8e:68:bc:c8:37:83:b6:c5:90:a6:17:b0:
58:ee:a3:ad:a7:32:12:a3:d8:20:28:c3:a5:31:ad:
4b:bb:81:fd:d5:34:ac:28:b6:63:5d:b0:5c:fa:4a:
79:9e:c2:7c:b4:b3:d1:b4:cc:7a:56:89:2b:98:65:
07:4d:89:00:a8:24:4e:e7:a9:85:f1:b7:38:64:7a:
d3:b4:00:1a:bd:5b:eb:b5:ba:a9:75:c3:33:75:d8:
35:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B2:9C:EA:91:1D:D0:CD:37:9B:A1:F5:DE:77:B7:0A:19:19:03:ED
X509v3 Authority Key Identifier:
keyid:73:77:35:0E:3E:3A:15:1F:4C:C7:12:78:22:80:2A:D4:7B:86:A5:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/7377350E3E3A151F4CC7127822802AD47B86A5CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7377350E3E3A151F4CC7127822802AD47B86A5CF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/35382e3134352e3137342e302f32342d3234203d3e203436303534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.145.174.0/24
Signature Algorithm: sha256WithRSAEncryption
72:e5:5c:4d:e1:c1:22:75:3c:ae:ea:19:d1:e0:09:23:93:78:
a3:79:c9:e2:b6:c0:e4:5f:07:77:7d:16:b0:d8:44:01:d4:22:
0e:5e:82:5e:26:d5:f5:b0:66:f1:b6:9b:38:91:de:56:de:dc:
ac:19:91:6d:21:7a:bc:68:7a:d1:09:88:53:d1:5f:91:8e:ef:
11:32:1e:dd:73:8e:17:32:03:b4:ce:ec:55:5a:46:45:e2:8c:
17:e1:97:ff:d4:13:c7:ec:62:99:9d:1e:e3:14:0e:02:8b:97:
ac:80:cb:15:9e:f1:f9:f8:bf:04:65:36:7e:06:88:d6:d6:0c:
3b:1d:de:5b:d0:b2:bf:99:48:d0:af:3c:82:00:92:00:5d:a3:
9d:55:39:fb:59:a0:e8:d3:3b:7a:c8:66:d4:ec:5d:2d:b1:d3:
52:92:33:f2:4f:f4:b6:c9:5c:17:34:4a:05:c5:fc:2f:a4:9f:
2d:26:2e:0c:63:0c:f9:2e:d7:2a:8d:79:e6:e5:6e:17:98:42:
90:be:b4:c6:34:cc:67:d5:db:8d:d0:08:e0:68:d9:bf:62:69:
9a:bc:84:bb:38:1a:5f:ac:dd:22:81:a6:25:20:ef:e0:34:47:
13:bc:86:14:e7:c7:1b:26:48:65:80:3b:51:0b:95:e9:8d:8d:
14:6c:48:cd
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUcey73vEMjhTeEEC3CIJ2KwfPAr8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM3NzM1MEUzRTNBMTUxRjRDQzcxMjc4MjI4MDJBRDQ3
Qjg2QTVDRjAeFw0yNjA1MDMwMjIzMDZaFw0yNzA1MDIwMjI4MDZaMDMxMTAvBgNV
BAMTKDhBQjI5Q0VBOTExREQwQ0QzNzlCQTFGNURFNzdCNzBBMTkxOTAzRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC087t59FXq1DEWmq68WRnu3CFM
vxdPLTAQEnk1wFHbebzDqRu/N8yL4LJYlGeEAnbd0kszkHttm4YhiW9fiYF3e8ej
CrCtXnOQ3+6o7iIRYEZ0lh0xEJHjU3mtbegbC8ONEKl9O4tQ5rdTApAI9Ktzc1AL
NPn6oqpFFmZmgY2HlaIMDocjjnsatSrOJOxjUYAMUUQvOuTxzCTB/yHzBI2VmUnn
+vOlWI5ovMg3g7bFkKYXsFjuo62nMhKj2CAow6UxrUu7gf3VNKwotmNdsFz6Snme
wny0s9G0zHpWiSuYZQdNiQCoJE7nqYXxtzhketO0ABq9W+u1uql1wzN12DUzAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUirKc6pEd0M03m6H13ne3ChkZA+0wHwYDVR0j
BBgwFoAUc3c1Dj46FR9MxxJ4IoAq1HuGpc8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2NmMzA5MzYtYzc1MC00MzNiLTljMmEtOGZmNWYzOGU2M2Q0LzAvNzM3NzM1MEUz
RTNBMTUxRjRDQzcxMjc4MjI4MDJBRDQ3Qjg2QTVDRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83Mzc3MzUwRTNFM0ExNTFGNENDNzEyNzgyMjgwMkFENDdCODZB
NUNGLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNjZjMwOTM2LWM3NTAtNDMzYi05
YzJhLThmZjVmMzhlNjNkNC8wLzM1MzgyZTMxMzQzNTJlMzEzNzM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADqRrjANBgkqhkiG
9w0BAQsFAAOCAQEAcuVcTeHBInU8ruoZ0eAJI5N4o3nJ4rbA5F8Hd30WsNhEAdQi
Dl6CXibV9bBm8babOJHeVt7crBmRbSF6vGh60QmIU9FfkY7vETIe3XOOFzIDtM7s
VVpGReKMF+GX/9QTx+ximZ0e4xQOAouXrIDLFZ7x+fi/BGU2fgaI1tYMOx3eW9Cy
v5lI0K88ggCSAF2jnVU5+1mg6NM7eshm1OxdLbHTUpIz8k/0tslcFzRKBcX8L6Sf
LSYuDGMM+S7XKo155uVuF5hCkL60xjTMZ9XbjdAI4GjZv2JpmryEuzgaX6zdIoGm
JSDv4DRHE7yGFOfHGyZIZYA7UQuV6Y2NFGxIzQ==
-----END CERTIFICATE-----
Generated at Wed May 13 04:19:29 2026 by rpki-client