
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39392e302f32342d3234203d3e203538343737.roa
File: 34352e36342e39392e302f32342d3234203d3e203538343737.roa (raw, json)
Hash identifier: dyN12mfoRjXFlNHqIFEChK7+mIsDEFYombQgQudcekM=
Subject key identifier: F6:2B:2A:CC:96:30:61:8C:D3:F8:6F:5C:20:0E:32:F8:6D:5D:DC:DF
Certificate issuer: /CN=A08BAF2D88514EC041A87F092E6B6A521F3349F3
Certificate serial: 3C16AC17C77D3B90F4476FEF6CC944223E69DAE7
Authority key identifier: A0:8B:AF:2D:88:51:4E:C0:41:A8:7F:09:2E:6B:6A:52:1F:33:49:F3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39392e302f32342d3234203d3e203538343737.roa
Signing time: Sun 03 May 2026 02:31:31 +0000
ROA not before: Sun 03 May 2026 02:26:31 +0000
ROA not after: Sun 02 May 2027 02:31:31 +0000
asID: 58477
IP address blocks: 45.64.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl
rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:16:ac:17:c7:7d:3b:90:f4:47:6f:ef:6c:c9:44:22:3e:69:da:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A08BAF2D88514EC041A87F092E6B6A521F3349F3
Validity
Not Before: May 3 02:26:31 2026 GMT
Not After : May 2 02:31:31 2027 GMT
Subject: CN=F62B2ACC9630618CD3F86F5C200E32F86D5DDCDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ca:4d:ae:10:13:c3:53:91:49:4b:23:e3:2c:
27:68:2b:97:e8:52:01:da:ea:c3:c2:5d:56:22:34:
31:2d:6c:06:c9:0c:98:0b:99:a2:5d:da:a5:9f:87:
43:a8:32:a3:3f:48:d0:92:80:90:b1:41:8f:17:99:
bc:3a:64:64:44:6f:ae:97:9b:58:ca:c2:2e:00:ee:
f3:ee:37:88:55:63:0f:36:ba:2b:43:3f:ec:ff:c7:
77:fe:f4:09:52:a4:06:57:21:32:1f:82:12:46:0a:
08:13:e2:86:74:14:39:ff:42:86:df:da:3f:57:cd:
60:10:e2:e1:02:6e:18:68:e2:e8:14:79:d2:4b:6e:
d8:5b:9b:a3:f0:fd:03:8b:00:a9:29:d7:0d:3b:a5:
b5:f4:c7:db:16:98:9f:49:d9:b0:ee:2f:73:34:0e:
b5:82:e3:0c:b6:26:06:9b:6c:21:82:51:4e:68:49:
ff:4c:a5:4f:4a:7e:70:83:f3:15:70:c4:d2:a4:71:
30:61:c2:5e:36:d7:c9:b6:b3:35:26:9f:df:15:b1:
9c:47:c4:0d:e2:56:a4:76:66:30:01:f1:ff:84:d1:
30:a6:26:cc:ca:35:6b:56:4a:36:ec:81:f7:4b:6c:
96:07:02:a2:82:94:d6:21:8c:a5:7c:09:5d:3f:a0:
c6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2B:2A:CC:96:30:61:8C:D3:F8:6F:5C:20:0E:32:F8:6D:5D:DC:DF
X509v3 Authority Key Identifier:
keyid:A0:8B:AF:2D:88:51:4E:C0:41:A8:7F:09:2E:6B:6A:52:1F:33:49:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/A08BAF2D88514EC041A87F092E6B6A521F3349F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A08BAF2D88514EC041A87F092E6B6A521F3349F3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/34352e36342e39392e302f32342d3234203d3e203538343737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.64.99.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:1c:17:7c:d0:c8:81:ed:6a:ee:13:09:94:ec:aa:f6:90:41:
87:3d:ab:36:bd:86:ef:84:fd:11:f6:3d:5e:ae:e8:c6:6e:b9:
33:9f:29:eb:6d:4d:b1:b1:75:df:df:29:bb:29:e9:5b:ce:ef:
f6:f8:ee:61:8c:ec:a7:05:7a:b3:3e:40:45:9b:b7:bd:61:c4:
3b:bd:d8:53:98:67:45:d3:0e:e3:a0:ef:ec:73:ce:69:de:b5:
18:3c:26:40:58:7a:dc:e9:e4:b0:36:79:42:09:67:d0:07:57:
f1:ef:e4:06:64:63:78:7f:07:a1:96:c0:7d:76:2a:7c:d2:58:
87:b3:55:aa:29:b0:a6:10:1d:28:07:92:8b:9c:61:83:9e:8d:
bc:2b:5e:2c:90:2f:a0:ed:c5:39:dc:23:1b:18:81:d3:b6:2b:
4a:b4:fb:a8:ae:85:78:33:15:41:4d:b5:a1:5e:ed:13:94:2b:
c0:0e:79:5c:d3:57:b4:26:7c:3c:61:09:5b:d9:64:a1:a5:35:
07:ab:ba:4e:79:a3:27:9d:65:08:01:a0:f1:6b:c5:03:68:18:
71:18:1e:cd:03:7e:8f:a3:07:25:33:b4:32:36:53:cf:80:b5:
06:12:7c:51:9f:ea:e2:a6:b1:4b:82:d4:b2:97:64:07:12:d2:
a3:e5:33:f2
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUPBasF8d9O5D0R2/vbMlEIj5p2ucwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA4QkFGMkQ4ODUxNEVDMDQxQTg3RjA5MkU2QjZBNTIx
RjMzNDlGMzAeFw0yNjA1MDMwMjI2MzFaFw0yNzA1MDIwMjMxMzFaMDMxMTAvBgNV
BAMTKEY2MkIyQUNDOTYzMDYxOENEM0Y4NkY1QzIwMEUzMkY4NkQ1RERDREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9yk2uEBPDU5FJSyPjLCdoK5fo
UgHa6sPCXVYiNDEtbAbJDJgLmaJd2qWfh0OoMqM/SNCSgJCxQY8Xmbw6ZGREb66X
m1jKwi4A7vPuN4hVYw82uitDP+z/x3f+9AlSpAZXITIfghJGCggT4oZ0FDn/Qobf
2j9XzWAQ4uECbhho4ugUedJLbthbm6Pw/QOLAKkp1w07pbX0x9sWmJ9J2bDuL3M0
DrWC4wy2JgabbCGCUU5oSf9MpU9KfnCD8xVwxNKkcTBhwl4218m2szUmn98VsZxH
xA3iVqR2ZjAB8f+E0TCmJszKNWtWSjbsgfdLbJYHAqKClNYhjKV8CV0/oMY3AgMB
AAGjggItMIICKTAdBgNVHQ4EFgQU9isqzJYwYYzT+G9cIA4y+G1d3N8wHwYDVR0j
BBgwFoAUoIuvLYhRTsBBqH8JLmtqUh8zSfMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NGJjNmFhMDMtMWI0ZC00MzhlLWE5ZjMtZWZlYWFlNmIwOTIxLzAvQTA4QkFGMkQ4
ODUxNEVDMDQxQTg3RjA5MkU2QjZBNTIxRjMzNDlGMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BMDhCQUYyRDg4NTE0RUMwNDFBODdGMDkyRTZCNkE1MjFGMzM0
OUYzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGJjNmFhMDMtMWI0ZC00MzhlLWE5
ZjMtZWZlYWFlNmIwOTIxLzAvMzQzNTJlMzYzNDJlMzkzOTJlMzAyZjMyMzQyZDMy
MzQyMDNkM2UyMDM1MzgzNDM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtQGMwDQYJKoZIhvcNAQEL
BQADggEBAH8cF3zQyIHtau4TCZTsqvaQQYc9qza9hu+E/RH2PV6u6MZuuTOfKett
TbGxdd/fKbsp6VvO7/b47mGM7KcFerM+QEWbt71hxDu92FOYZ0XTDuOg7+xzzmne
tRg8JkBYetzp5LA2eUIJZ9AHV/Hv5AZkY3h/B6GWwH12KnzSWIezVaopsKYQHSgH
koucYYOejbwrXiyQL6DtxTncIxsYgdO2K0q0+6iuhXgzFUFNtaFe7ROUK8AOeVzT
V7QmfDxhCVvZZKGlNQeruk55oyedZQgBoPFrxQNoGHEYHs0Dfo+jByUztDI2U8+A
tQYSfFGf6uKmsUuC1LKXZAcS0qPlM/I=
-----END CERTIFICATE-----
Generated at Wed May 13 00:31:48 2026 by rpki-client