
$ rpki-client -vvf rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/34352e3131362e3135372e302f32342d3234203d3e20313333383233.roa
File: 34352e3131362e3135372e302f32342d3234203d3e20313333383233.roa (raw, json)
Hash identifier: BUcB/wlQeYt875aEAFYXrzIUGveCpyEGOJqyrP1PQAg=
Subject key identifier: 0B:FE:35:66:FA:A5:20:0D:E2:B5:FE:17:1B:7E:EB:6F:E6:F5:FB:54
Certificate issuer: /CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454
Certificate serial: 72BFF03E053927C1252B021E1DE3B93EF8809BB4
Authority key identifier: DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/34352e3131362e3135372e302f32342d3234203d3e20313333383233.roa
Signing time: Sun 03 May 2026 02:29:49 +0000
ROA not before: Sun 03 May 2026 02:24:49 +0000
ROA not after: Sun 02 May 2027 02:29:49 +0000
asID: 133823
IP address blocks: 45.116.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl
rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:bf:f0:3e:05:39:27:c1:25:2b:02:1e:1d:e3:b9:3e:f8:80:9b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454
Validity
Not Before: May 3 02:24:49 2026 GMT
Not After : May 2 02:29:49 2027 GMT
Subject: CN=0BFE3566FAA5200DE2B5FE171B7EEB6FE6F5FB54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b9:7f:3b:42:13:b9:f8:e1:b1:22:10:db:d0:
36:33:cd:c7:8e:2e:19:c4:49:7a:e1:dc:7d:06:84:
b9:7e:64:f2:2a:06:07:a7:1d:d2:4c:13:65:4d:b6:
d2:b0:e0:74:f3:f0:13:51:28:e3:49:95:a7:e9:52:
bb:d0:63:28:c9:37:af:47:30:86:4b:22:7e:52:35:
91:d3:12:bf:ad:9f:d2:39:5d:3c:bd:e6:da:a1:0c:
b8:a0:54:8a:0f:aa:2e:07:5e:41:99:0b:67:1e:32:
85:ff:d6:f5:69:f6:af:99:23:f6:99:91:eb:6f:f3:
60:42:43:d1:52:c2:c8:b0:04:1b:07:24:68:be:0d:
d3:45:bf:c5:2f:f6:6f:1c:01:12:8b:a0:c3:4e:dd:
b9:cc:d6:32:a1:7f:17:2e:80:f9:7d:76:93:f9:8b:
f2:df:82:16:bb:a9:5d:b6:24:8d:16:34:63:f1:d1:
dd:b6:a4:bb:85:7c:00:4c:16:14:c7:5a:0e:cd:62:
78:25:b0:1c:db:08:40:9a:2e:8b:d2:47:40:83:cf:
ed:ea:23:8d:76:fa:b9:f8:8c:21:3a:99:4e:91:9e:
7e:8f:3a:f9:5c:ce:55:87:20:0b:37:8c:0e:ed:53:
c2:49:e3:f8:62:66:dd:14:ce:8f:89:62:70:e8:58:
1d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FE:35:66:FA:A5:20:0D:E2:B5:FE:17:1B:7E:EB:6F:E6:F5:FB:54
X509v3 Authority Key Identifier:
keyid:DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/34352e3131362e3135372e302f32342d3234203d3e20313333383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.116.157.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:e3:a7:3f:d1:9b:ee:b3:4c:a2:70:c2:1c:4c:05:38:75:14:
4d:e1:04:86:ea:71:c0:b3:92:9d:19:8d:7f:4b:86:27:67:35:
2f:1c:26:fa:87:f1:57:8e:8c:6e:d0:bc:c7:66:94:0a:e7:65:
32:13:8e:7d:5c:6c:87:11:92:0d:bc:e5:2c:31:15:b9:ad:1c:
53:13:67:3a:74:07:91:ad:67:bc:b0:05:eb:2c:1b:e8:19:ff:
39:34:4c:eb:58:c8:8f:7f:11:ee:e6:12:b9:3e:bb:b0:e8:a3:
b5:4c:bf:5f:66:f3:f5:1c:26:86:32:9a:b9:be:2f:c9:b8:d4:
74:8c:26:82:72:dc:77:b8:c6:f0:86:98:ce:28:82:3b:05:6f:
27:e2:54:0f:74:23:a8:70:80:29:e4:1d:b3:75:17:1f:82:99:
c4:41:ab:1c:28:0c:09:d0:80:bf:91:6d:4c:43:ec:dd:5d:7b:
db:cc:86:93:31:8b:ce:66:72:96:a3:d8:71:3c:bc:80:2f:69:
c4:03:ab:25:6e:b4:25:bf:48:a0:6e:7f:df:86:51:a1:69:ae:
c4:b8:05:b2:48:6b:e6:4d:4f:cb:91:19:7e:5c:9c:ac:44:9b:
c1:d3:d7:1a:b9:82:55:c9:03:a9:f3:d8:e9:33:62:f4:c5:16:
06:34:3c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:17:20 2026 by rpki-client