
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39372e302f32342d3234203d3e20313335333630.roa
File: 34352e36342e39372e302f32342d3234203d3e20313335333630.roa (raw, json)
Hash identifier: eVL30F9FmWg9xfcbeGTmvP0LqqOdBiZkfgWJnF3c51k=
Subject key identifier: 35:86:7F:EB:78:19:B9:F5:A6:2A:AA:9A:44:01:99:85:8C:C6:2F:CA
Certificate issuer: /CN=A08BAF2D88514EC041A87F092E6B6A521F3349F3
Certificate serial: 10D3A64989565D5B7056252FD80185E738766B48
Authority key identifier: A0:8B:AF:2D:88:51:4E:C0:41:A8:7F:09:2E:6B:6A:52:1F:33:49:F3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39372e302f32342d3234203d3e20313335333630.roa
Signing time: Sun 03 May 2026 02:31:28 +0000
ROA not before: Sun 03 May 2026 02:26:28 +0000
ROA not after: Sun 02 May 2027 02:31:28 +0000
asID: 135360
IP address blocks: 45.64.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl
rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:d3:a6:49:89:56:5d:5b:70:56:25:2f:d8:01:85:e7:38:76:6b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A08BAF2D88514EC041A87F092E6B6A521F3349F3
Validity
Not Before: May 3 02:26:28 2026 GMT
Not After : May 2 02:31:28 2027 GMT
Subject: CN=35867FEB7819B9F5A62AAA9A440199858CC62FCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:49:89:52:23:12:7f:69:71:86:52:1d:62:0b:
d8:b0:2c:a0:f4:5d:b1:37:6c:61:7b:4f:e4:58:07:
e7:2f:02:cf:f0:12:99:fb:66:9e:03:f2:5f:a6:ed:
ce:9a:a4:e3:fe:c8:b6:4c:83:84:4a:5c:50:c9:14:
16:a6:7e:13:e1:9a:0b:e2:8f:99:a8:a0:d2:0b:d7:
e6:40:bd:9f:cd:ea:a9:8c:cf:08:b8:96:9f:74:54:
7e:bb:7c:71:72:c8:2f:9f:8e:3a:cd:91:ee:6b:20:
cd:4c:0d:77:6b:26:a2:1a:4d:d0:c4:3f:3e:8d:56:
12:34:9d:48:ad:86:dd:04:67:1f:a2:3b:f1:07:5e:
34:36:45:39:a9:27:9b:a3:99:a7:77:13:3f:5e:33:
d1:34:b4:64:13:77:a6:85:75:11:e4:93:bc:0a:d6:
ab:15:0d:43:a5:40:3e:99:1c:c2:23:7b:d8:ca:65:
53:47:a9:a8:93:e1:05:fb:22:fa:6f:be:0d:3e:71:
4b:e2:d9:3e:0a:fa:da:5c:ea:0c:81:c8:6c:17:b9:
83:1d:60:a7:3a:c4:3e:33:06:58:9b:1f:23:08:2d:
8a:ac:b1:c4:30:cf:2d:c9:38:de:9b:f3:e6:80:bc:
7b:47:5c:72:02:79:af:4b:2f:33:21:63:a7:23:bf:
9a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:86:7F:EB:78:19:B9:F5:A6:2A:AA:9A:44:01:99:85:8C:C6:2F:CA
X509v3 Authority Key Identifier:
keyid:A0:8B:AF:2D:88:51:4E:C0:41:A8:7F:09:2E:6B:6A:52:1F:33:49:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39372e302f32342d3234203d3e20313335333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.64.97.0/24
Signature Algorithm: sha256WithRSAEncryption
14:c1:f4:00:a9:46:b8:6f:c7:3d:15:2c:90:7c:ee:38:aa:f9:
8b:f9:bb:58:c3:65:59:67:19:d4:64:60:af:53:0c:85:c4:fa:
72:0f:fd:05:c9:40:32:7a:7f:10:c6:be:ac:c8:59:b9:6b:7c:
98:2e:2d:09:f7:82:e8:c6:41:a6:71:9a:89:5f:4b:20:7a:fe:
e5:36:c2:55:57:f1:29:3f:10:c8:bc:a9:08:e5:72:cc:d2:7d:
1b:c2:e8:8e:b0:55:da:37:b6:29:08:32:85:3a:bd:a6:b7:60:
64:69:c5:41:e5:24:8b:9a:07:65:aa:3b:35:12:9e:3e:97:b5:
53:08:85:88:1b:78:2e:40:b6:74:6b:b0:a2:b6:6c:d1:1c:95:
7d:3d:06:81:9d:9a:90:dc:ca:fa:2c:ac:83:55:6e:a9:67:7c:
fd:53:82:47:f3:7f:3c:44:90:6d:da:8f:1f:74:38:23:e2:cf:
01:23:e4:df:63:9d:7e:f4:4f:f9:28:41:a9:ef:09:db:1a:aa:
46:54:a5:23:16:94:45:f1:f8:48:7b:15:8f:47:f0:66:84:43:
8a:89:72:92:a9:47:66:9f:31:3c:48:3e:bd:88:e0:a9:53:7a:
fc:66:d4:73:fc:dc:c2:34:d0:a7:4e:80:2e:50:6a:46:1d:eb:
5e:53:03:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:31:45 2026 by rpki-client