
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/34392e3135362e35372e302f32342d3234203d3e203535363637.roa
File: 34392e3135362e35372e302f32342d3234203d3e203535363637.roa (raw, json)
Hash identifier: t5M4q+wjV6k977kCQYS5NWkmORi7rVl+URL29ZG5i/Y=
Subject key identifier: B9:C2:A3:C5:3C:30:6F:AC:7E:1B:7B:88:29:0E:3A:B1:EC:91:F1:5A
Certificate issuer: /CN=9588905DE5DA3CEB7B575E4C7B475E22276450F0
Certificate serial: 4F415A015EB8B64A12BF3BE6696374864BE60521
Authority key identifier: 95:88:90:5D:E5:DA:3C:EB:7B:57:5E:4C:7B:47:5E:22:27:64:50:F0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9588905DE5DA3CEB7B575E4C7B475E22276450F0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/34392e3135362e35372e302f32342d3234203d3e203535363637.roa
Signing time: Sun 03 May 2026 02:38:04 +0000
ROA not before: Sun 03 May 2026 02:33:04 +0000
ROA not after: Sun 02 May 2027 02:38:04 +0000
asID: 55667
IP address blocks: 49.156.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.crl
rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9588905DE5DA3CEB7B575E4C7B475E22276450F0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:32:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:41:5a:01:5e:b8:b6:4a:12:bf:3b:e6:69:63:74:86:4b:e6:05:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9588905DE5DA3CEB7B575E4C7B475E22276450F0
Validity
Not Before: May 3 02:33:04 2026 GMT
Not After : May 2 02:38:04 2027 GMT
Subject: CN=B9C2A3C53C306FAC7E1B7B88290E3AB1EC91F15A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:56:bb:42:d0:ed:18:67:cc:d3:e3:74:df:ad:
8f:c4:3c:08:d7:4d:18:fb:22:f9:29:90:98:75:b6:
1f:c0:08:fa:32:9f:69:53:af:e1:b6:38:d6:e7:a9:
12:04:e7:17:4a:27:f7:0b:5c:bd:b1:6d:d2:f4:25:
c1:61:23:9e:b7:25:2e:be:a8:c8:fc:84:cb:75:5c:
ea:e0:9a:11:ef:f3:f9:59:10:b2:32:50:3a:fd:bf:
8b:a8:c5:e4:a9:0b:39:fa:81:7c:1a:06:18:ce:ae:
30:6a:46:a3:ff:7e:bf:1d:62:b8:74:ac:79:e0:a3:
4b:db:6c:6c:e0:5b:90:a5:ab:3c:59:91:18:7f:2c:
3f:e9:c2:26:3b:bf:1a:8a:29:ba:0c:7a:6b:00:84:
4b:f3:28:e9:5d:e1:36:73:0d:cc:fc:27:64:ef:ed:
ea:a6:00:fe:2b:38:80:d1:1d:17:06:0b:51:bf:fb:
b3:4c:e9:05:dd:58:f5:ac:13:87:87:b2:64:48:db:
31:7f:64:44:8f:ba:44:13:66:a8:6b:71:8b:ca:7a:
4b:44:9a:0b:95:be:dc:f6:a3:83:d2:c1:4b:a3:86:
4b:6d:ad:de:03:6a:32:d7:73:3b:78:7f:5c:44:9f:
a6:96:89:ce:41:fa:d0:91:6d:b9:91:de:ca:9c:1f:
de:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C2:A3:C5:3C:30:6F:AC:7E:1B:7B:88:29:0E:3A:B1:EC:91:F1:5A
X509v3 Authority Key Identifier:
keyid:95:88:90:5D:E5:DA:3C:EB:7B:57:5E:4C:7B:47:5E:22:27:64:50:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/9588905DE5DA3CEB7B575E4C7B475E22276450F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9588905DE5DA3CEB7B575E4C7B475E22276450F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/34392e3135362e35372e302f32342d3234203d3e203535363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
49.156.57.0/24
Signature Algorithm: sha256WithRSAEncryption
03:11:86:5c:ac:48:ed:f2:47:63:a4:46:95:31:f4:82:49:37:
11:cb:f8:ae:ef:fb:52:86:83:94:64:02:d4:63:5b:cd:36:26:
d0:3c:19:a9:f1:6e:82:7a:98:43:78:16:45:d2:2e:7c:81:8b:
98:ce:fb:0a:2c:c7:5e:88:8b:ab:36:b5:cf:52:d9:2d:59:1a:
2e:dd:b9:9c:32:8b:b0:d8:2e:ec:4b:9c:68:b3:2c:57:e4:15:
8f:d9:fd:59:97:72:a8:34:44:33:7a:9e:ae:0a:18:dc:f7:6b:
8a:fa:44:a2:5c:44:47:37:52:3b:69:f6:b7:41:18:25:7b:5a:
e6:5a:a3:91:b1:38:3f:87:70:a9:7c:00:67:7a:41:5f:b3:fa:
9a:87:12:ac:f6:48:ef:96:ac:07:2c:a8:af:ac:c9:1a:66:7e:
9a:ab:1b:fe:dc:c0:a0:57:50:cf:b2:c0:24:9d:c4:12:d8:e1:
d5:9e:90:57:d7:06:45:35:f9:26:e1:ad:b4:ad:24:85:d7:0a:
4a:a7:b9:ad:65:ee:5e:1d:12:fb:9d:23:47:62:f6:5b:21:c1:
32:e9:d5:6d:b4:44:0e:e7:16:fe:dc:c8:f5:60:83:7d:64:54:
de:70:fc:b0:82:bf:47:f8:f9:25:27:2f:5a:06:d2:97:f2:e0:
2a:54:66:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:51:10 2026 by rpki-client