
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/32372e3132342e37342e302f32342d3234203d3e20313532303532.roa
File: 32372e3132342e37342e302f32342d3234203d3e20313532303532.roa (raw, json)
Hash identifier: dKm4h4htb+xuOuzBD2j/P3WbreIMIoqa9hQCTFJdoG0=
Subject key identifier: AF:A4:A7:11:8C:EE:CB:0C:54:49:89:E1:D0:9D:E8:03:4C:B9:86:66
Certificate issuer: /CN=0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA
Certificate serial: 35D25F92BBE0315EFB0DE5C22E39C12026FA7D81
Authority key identifier: 0D:F6:84:1A:45:E7:F4:C3:E8:CC:90:AF:36:BB:FB:D9:B7:55:E4:FA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/32372e3132342e37342e302f32342d3234203d3e20313532303532.roa
Signing time: Sun 03 May 2026 02:32:08 +0000
ROA not before: Sun 03 May 2026 02:27:08 +0000
ROA not after: Sun 02 May 2027 02:32:08 +0000
asID: 152052
IP address blocks: 27.124.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.crl
rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:d2:5f:92:bb:e0:31:5e:fb:0d:e5:c2:2e:39:c1:20:26:fa:7d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA
Validity
Not Before: May 3 02:27:08 2026 GMT
Not After : May 2 02:32:08 2027 GMT
Subject: CN=AFA4A7118CEECB0C544989E1D09DE8034CB98666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:86:1d:d2:6b:6b:a6:7f:ad:05:0f:a8:eb:41:
4f:cd:f2:66:40:32:1f:6f:b2:71:29:fa:a2:77:7f:
03:49:2d:d4:51:de:e1:02:10:a7:76:30:8b:2f:27:
0c:8e:f1:6a:0a:fb:75:c8:5a:ce:e0:7e:36:4e:8c:
e3:00:5f:71:b2:5e:c4:d2:33:b9:d9:b6:93:05:5b:
a1:cd:fa:0e:eb:fe:67:6d:b6:b7:56:91:dd:08:72:
de:cc:a5:77:ac:13:f5:e2:b1:bc:7a:f1:63:e7:4c:
db:7a:37:94:ce:8b:bc:3b:77:c8:85:d1:26:e6:ec:
d1:8e:9f:00:d8:f4:9b:6d:91:e3:7f:05:cb:8b:69:
25:92:42:e3:9a:eb:a1:f2:38:1c:d7:e5:6a:35:39:
66:42:07:9c:89:2e:1f:35:31:11:c8:21:ac:9a:5f:
0f:b2:25:10:10:ac:61:69:62:9e:54:f2:06:d0:75:
ac:4d:f0:8c:01:28:a9:55:2d:f8:45:7a:20:be:97:
a6:31:95:72:2d:d4:8a:77:64:cf:0e:ce:cb:06:c1:
19:fc:b1:13:78:32:2c:9f:b5:0d:eb:78:ec:c1:97:
13:71:c1:3a:d9:98:25:d6:6b:c0:9a:cb:d7:d6:de:
9c:35:d7:fb:75:3f:66:20:be:8f:2e:55:d1:1b:bb:
b3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A4:A7:11:8C:EE:CB:0C:54:49:89:E1:D0:9D:E8:03:4C:B9:86:66
X509v3 Authority Key Identifier:
keyid:0D:F6:84:1A:45:E7:F4:C3:E8:CC:90:AF:36:BB:FB:D9:B7:55:E4:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DF6841A45E7F4C3E8CC90AF36BBFBD9B755E4FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/32372e3132342e37342e302f32342d3234203d3e20313532303532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.124.74.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:eb:37:b4:97:92:b7:cc:87:10:4e:67:10:f4:2a:1d:7c:53:
24:3d:36:13:09:f1:cc:ad:95:ad:b3:b1:2c:04:0f:cd:ec:49:
28:17:77:c8:1e:d0:2d:14:6e:b8:fb:60:31:f6:d7:d0:08:be:
c1:98:c7:25:e8:71:89:8b:39:02:67:11:a3:6c:79:ff:5c:66:
fb:4c:9d:3a:84:86:4f:48:26:82:82:21:52:3d:76:17:9b:19:
ae:3c:66:e0:16:93:1f:79:90:7f:ac:13:8c:b9:67:b7:d6:69:
50:e7:4b:fd:47:a8:82:ce:be:55:20:27:06:fe:c1:14:48:1a:
0e:c4:16:70:ae:f4:04:37:46:6e:63:40:ae:eb:1c:cb:0c:b0:
77:62:1a:84:2d:a4:0e:0f:92:1d:17:99:3e:3d:f2:4c:d9:85:
6e:91:3d:4b:d5:a6:65:f3:02:e7:06:46:87:cd:69:09:3a:d2:
d9:2a:22:b3:01:36:6c:58:b2:b3:69:58:b7:de:7a:06:98:19:
11:5a:e6:e6:9a:93:67:0d:58:97:aa:8b:b6:8b:54:e3:a6:5a:
e3:57:11:77:8a:53:70:b1:61:06:61:da:e8:1f:db:77:e2:01:
27:69:38:d8:42:ba:0e:5a:02:5c:9c:4b:eb:7f:df:c8:1e:12:
4d:5d:e0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:00:03 2026 by rpki-client