
$ rpki-client -vvf rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3231382e3130302e37342e302f32342d3234203d3e203535363539.roa
File: 3231382e3130302e37342e302f32342d3234203d3e203535363539.roa (raw, json)
Hash identifier: 5nElrE2bFD3jeHzGP2EqItlqHxQy+rl4TSko98reQ+k=
Subject key identifier: 87:6B:06:38:3B:8C:92:48:D4:3E:1F:8D:2F:85:E0:4D:D4:79:60:B4
Certificate issuer: /CN=2535F6A9A65395B5881ADB0B432A16679C88CC60
Certificate serial: 35BD0E3D8ECBCA96817F2B24759CCDB81B1C00A6
Authority key identifier: 25:35:F6:A9:A6:53:95:B5:88:1A:DB:0B:43:2A:16:67:9C:88:CC:60
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3231382e3130302e37342e302f32342d3234203d3e203535363539.roa
Signing time: Sun 03 May 2026 02:29:07 +0000
ROA not before: Sun 03 May 2026 02:24:07 +0000
ROA not after: Sun 02 May 2027 02:29:07 +0000
asID: 55659
IP address blocks: 218.100.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.crl
rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:34:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:bd:0e:3d:8e:cb:ca:96:81:7f:2b:24:75:9c:cd:b8:1b:1c:00:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2535F6A9A65395B5881ADB0B432A16679C88CC60
Validity
Not Before: May 3 02:24:07 2026 GMT
Not After : May 2 02:29:07 2027 GMT
Subject: CN=876B06383B8C9248D43E1F8D2F85E04DD47960B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2a:b6:26:19:b7:32:87:50:6e:a5:4f:17:6a:
0d:bf:93:0e:18:66:27:ff:58:76:77:30:62:39:a1:
b1:49:34:d6:c6:80:a7:f4:b2:53:f8:e2:ba:b8:36:
f3:38:da:6d:1c:d7:6d:75:6b:d3:cb:c7:bb:9b:4d:
9d:64:e5:6b:b4:10:ad:22:83:d6:90:5b:f3:72:cd:
8a:ab:f6:4a:7d:ee:28:1d:50:e6:1f:28:fa:93:c1:
af:1e:68:d1:96:62:8e:e2:33:59:45:6f:18:5a:ed:
fc:9d:91:0c:50:1d:89:57:c5:76:12:20:c1:1a:9f:
bd:67:9c:3e:9e:71:9f:42:7c:9e:4f:dc:8d:9e:84:
ee:63:18:67:72:3b:a6:61:44:ff:e8:cc:57:9b:37:
5e:e2:e3:f9:59:1a:66:3a:c7:3c:c5:2e:d1:34:1a:
af:9b:3c:d2:19:60:40:e9:5d:a6:3c:dd:1d:dc:3b:
4c:8f:88:75:2a:9d:71:dd:2e:33:df:29:3f:9c:7d:
da:77:2e:d5:cd:7b:e5:87:f5:57:29:b2:34:c5:ca:
37:1e:66:68:ae:44:e3:bf:65:d6:4b:8c:82:db:90:
1d:be:5f:cc:36:94:74:ef:02:43:23:b4:34:0d:f6:
5a:3f:04:55:f2:97:8d:a9:f7:c2:a1:1e:ea:0b:72:
47:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6B:06:38:3B:8C:92:48:D4:3E:1F:8D:2F:85:E0:4D:D4:79:60:B4
X509v3 Authority Key Identifier:
keyid:25:35:F6:A9:A6:53:95:B5:88:1A:DB:0B:43:2A:16:67:9C:88:CC:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3231382e3130302e37342e302f32342d3234203d3e203535363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.100.74.0/24
Signature Algorithm: sha256WithRSAEncryption
77:bf:de:1c:9f:31:96:af:b8:70:41:89:13:d7:27:e8:6b:7b:
71:c5:dc:91:59:07:f0:61:90:eb:6a:18:5a:c0:ca:aa:0f:4c:
51:a9:82:bc:e4:21:cd:db:a5:48:51:17:77:23:60:5a:2a:7e:
4c:b1:65:9e:72:2b:e1:c1:b2:78:5f:7b:9e:ac:8b:5a:e7:1e:
4f:89:16:ad:2c:8f:4e:44:4e:6b:54:a0:46:5c:db:31:95:60:
70:73:09:ac:e2:d1:56:43:e4:d4:b1:6f:68:ab:c8:8f:68:40:
c3:a7:31:ff:4f:28:ec:eb:48:ad:7a:6d:44:93:af:97:11:94:
b8:f6:d3:38:df:9b:f4:5f:20:e2:d5:8c:85:95:16:ec:ad:e7:
02:a6:6d:ab:4d:0f:80:f5:1a:05:1e:80:a4:8d:fb:98:00:9e:
33:f0:cd:d9:2f:df:71:05:af:d2:5e:4e:9d:ad:53:ac:03:0b:
a1:9b:fb:42:97:a3:b4:a8:3b:21:06:11:1e:94:57:fd:66:3c:
e7:c1:75:87:c0:e7:49:07:7b:25:60:42:38:b0:0b:85:15:81:
66:cc:ed:d2:da:70:50:14:d9:fc:b7:73:5f:de:63:47:83:c2:
04:5a:09:68:20:ec:3b:ec:f7:89:9e:f8:14:ca:eb:de:af:46:
f7:c0:6b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:31:14 2026 by rpki-client