
$ rpki-client -vvf rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/34332e3233302e3135322e302f32322d3232203d3e203435373235.roa
File: 34332e3233302e3135322e302f32322d3232203d3e203435373235.roa (raw, json)
Hash identifier: j6STimVEecBpDBJLSOCDmtgZIXCy0EsMhzUkhsKIUp8=
Subject key identifier: 1F:FF:48:83:B7:43:DB:A9:FB:0F:92:A9:80:AA:8B:35:F5:90:6A:68
Certificate issuer: /CN=62258C46C7EEF9427331E24A2D1EB9B699C68A9E
Certificate serial: 332E0500623F1DEE09F8D9A42379B5B27BC92E3F
Authority key identifier: 62:25:8C:46:C7:EE:F9:42:73:31:E2:4A:2D:1E:B9:B6:99:C6:8A:9E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/34332e3233302e3135322e302f32322d3232203d3e203435373235.roa
Signing time: Sun 03 May 2026 02:39:12 +0000
ROA not before: Sun 03 May 2026 02:34:12 +0000
ROA not after: Sun 02 May 2027 02:39:12 +0000
asID: 45725
IP address blocks: 43.230.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.crl
rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:2e:05:00:62:3f:1d:ee:09:f8:d9:a4:23:79:b5:b2:7b:c9:2e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62258C46C7EEF9427331E24A2D1EB9B699C68A9E
Validity
Not Before: May 3 02:34:12 2026 GMT
Not After : May 2 02:39:12 2027 GMT
Subject: CN=1FFF4883B743DBA9FB0F92A980AA8B35F5906A68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:77:bb:c8:12:d5:dd:22:a1:e5:9f:aa:ce:6a:
a4:a1:79:5d:49:30:96:14:b9:f4:c9:e2:2b:19:83:
99:29:25:11:a6:f4:48:bf:db:7b:5e:dd:00:4b:15:
1d:05:f1:e8:e4:14:8d:3c:3b:09:a2:0e:14:5e:88:
1a:fd:19:f9:24:ad:f6:b3:d1:01:c4:86:da:54:d1:
a6:14:45:5a:b5:10:12:32:2b:14:7c:26:94:83:c5:
6e:8a:96:3c:98:10:20:d2:83:4b:c4:06:26:d2:20:
87:34:b8:9d:40:1b:1d:a8:0d:92:cc:bc:3d:8f:8b:
3f:ed:15:6f:65:8c:d4:ae:ee:c8:b8:8c:9f:5a:03:
7a:cd:d2:a5:47:14:4e:65:25:1c:23:a2:54:bf:fd:
8c:0e:bc:e1:db:4b:c7:e7:37:09:6e:7b:c5:ad:6d:
98:e2:fd:4c:aa:b5:dd:c4:a5:3f:38:d9:34:0e:f2:
39:92:56:7d:26:3c:60:ed:ff:de:a3:72:23:69:a0:
72:e8:3e:ea:0f:af:c0:f0:28:9c:2e:2c:45:38:31:
09:81:23:ec:bf:8b:28:86:54:61:8b:f9:48:3d:ed:
e0:03:b5:e0:9d:7d:bd:e7:ec:44:71:3c:bb:e3:10:
bb:fe:78:23:03:e2:b4:34:eb:6a:cd:d8:f5:f2:4a:
31:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FF:48:83:B7:43:DB:A9:FB:0F:92:A9:80:AA:8B:35:F5:90:6A:68
X509v3 Authority Key Identifier:
keyid:62:25:8C:46:C7:EE:F9:42:73:31:E2:4A:2D:1E:B9:B6:99:C6:8A:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/34332e3233302e3135322e302f32322d3232203d3e203435373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.152.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:8e:24:bf:ee:f7:ef:cb:db:1d:ec:f5:d7:61:fd:96:fb:57:
ad:4c:3d:98:ae:ec:42:90:90:fe:ba:30:e6:1b:8d:50:16:16:
75:7f:77:ae:72:f0:d8:6e:3d:c3:23:d4:fc:6e:9f:1c:16:9a:
94:ad:40:7a:f7:7b:6d:79:80:6e:62:b0:77:5a:52:e2:6b:b3:
ae:a6:a9:e8:e1:aa:47:3b:8a:f1:9e:fd:d9:87:a5:4b:51:30:
e6:6b:d0:50:f0:25:7c:79:2b:23:ec:33:83:c4:21:1b:81:aa:
c4:b9:cd:f3:71:bf:0b:d5:af:bb:73:d3:5a:f0:06:27:46:fb:
78:c2:75:63:bc:66:55:23:8c:43:d3:75:22:23:05:33:51:e8:
0f:32:34:73:5e:ba:4e:36:2e:7c:b7:0f:8a:71:0f:95:d7:d6:
8d:a3:25:e9:84:e0:05:09:36:e8:66:c2:f1:a0:3b:57:81:a8:
d9:e3:63:86:0c:d4:a2:99:11:5a:69:47:7a:ed:3c:a5:bb:7f:
41:e4:98:01:8c:e8:09:fd:a9:67:9c:59:03:8b:96:a1:39:50:
f0:2e:3c:4a:34:67:94:51:63:18:b7:ea:04:fc:e8:25:f0:fc:
fa:1b:fd:63:d2:81:2c:ee:49:85:d7:0b:09:6b:56:12:a6:be:
58:18:d4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:50:52 2026 by rpki-client