
$ rpki-client -vvf rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/34332e3233302e3135342e302f32332d3233203d3e203435373235.roa
File: 34332e3233302e3135342e302f32332d3233203d3e203435373235.roa (raw, json)
Hash identifier: 2Ev6HDikBh2Venhn8tcVx/c4kvr6/yn4RJxoentdMdc=
Subject key identifier: 51:B7:CB:C3:A3:59:7E:A0:A7:F7:1C:B6:FE:35:9C:F9:9E:C2:EE:3F
Certificate issuer: /CN=62258C46C7EEF9427331E24A2D1EB9B699C68A9E
Certificate serial: 4AA392D2CBC1CA9A018CD639EC509EAB7B4605D5
Authority key identifier: 62:25:8C:46:C7:EE:F9:42:73:31:E2:4A:2D:1E:B9:B6:99:C6:8A:9E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/34332e3233302e3135342e302f32332d3233203d3e203435373235.roa
Signing time: Sun 03 May 2026 02:39:05 +0000
ROA not before: Sun 03 May 2026 02:34:05 +0000
ROA not after: Sun 02 May 2027 02:39:05 +0000
asID: 45725
IP address blocks: 43.230.154.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.crl
rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:a3:92:d2:cb:c1:ca:9a:01:8c:d6:39:ec:50:9e:ab:7b:46:05:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62258C46C7EEF9427331E24A2D1EB9B699C68A9E
Validity
Not Before: May 3 02:34:05 2026 GMT
Not After : May 2 02:39:05 2027 GMT
Subject: CN=51B7CBC3A3597EA0A7F71CB6FE359CF99EC2EE3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:71:64:8e:c2:32:7c:e1:0c:b6:84:a4:35:21:
17:63:21:4e:87:67:60:a1:83:d9:fa:90:e4:80:c8:
a3:d6:b8:47:52:de:94:5c:e1:ec:09:ea:ae:e7:02:
f2:3b:ea:02:21:86:1a:53:6c:e1:c5:a9:83:5c:e3:
b1:b5:28:36:d4:40:c1:01:06:4b:b1:4d:88:8a:cb:
e8:4a:fe:93:e6:79:93:45:ae:0a:ae:a5:15:97:63:
37:84:f3:96:2d:7e:a9:0b:25:ef:38:62:a4:31:91:
06:eb:5b:43:7f:a8:cc:8a:d7:dc:b2:da:a3:69:5b:
25:a6:9e:43:ad:85:90:fe:ad:a1:a3:d7:16:b3:e1:
1c:7b:0b:fa:fc:42:5d:d9:90:cb:b0:1a:b8:50:45:
c4:2c:29:b2:29:a2:82:e2:51:db:3c:6a:6b:c6:b3:
ee:35:08:2d:5e:3f:0f:1d:c0:06:d5:ed:24:66:fe:
51:56:0e:00:23:99:da:b3:af:7d:e2:d4:c5:af:77:
d7:f9:82:33:a0:d0:22:82:9e:f3:76:6f:25:48:86:
f0:b8:d3:84:5d:c4:58:a4:12:c8:8b:6b:15:f7:db:
04:55:7e:03:a8:56:76:6d:da:43:8a:6f:a2:5a:38:
5e:07:9b:0c:54:62:68:30:c1:08:d1:20:7f:35:07:
c8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B7:CB:C3:A3:59:7E:A0:A7:F7:1C:B6:FE:35:9C:F9:9E:C2:EE:3F
X509v3 Authority Key Identifier:
keyid:62:25:8C:46:C7:EE:F9:42:73:31:E2:4A:2D:1E:B9:B6:99:C6:8A:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/34332e3233302e3135342e302f32332d3233203d3e203435373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.154.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:44:e5:d8:e8:0b:b6:aa:37:a0:d5:45:e5:7b:41:69:3e:6e:
94:f0:fd:53:1c:90:4e:d5:41:3c:47:ee:b1:14:04:91:1a:15:
46:53:50:b1:56:1a:b7:a5:6f:e9:48:e2:81:91:9c:37:87:60:
06:34:05:39:0f:56:8b:86:e1:5e:1e:33:b0:20:a9:18:0b:62:
35:b6:c9:63:ce:72:3e:9a:55:9e:99:67:39:a2:73:e6:36:f1:
e5:81:2e:6a:b7:14:3f:6d:9c:50:06:7a:be:fb:5d:44:f0:e0:
50:1b:2d:b8:c2:6d:38:ca:4b:7d:42:41:5e:33:aa:af:54:f7:
64:a8:2f:40:f0:1c:e9:55:e5:a8:50:bf:f3:fa:5f:a3:55:a7:
91:b5:b3:00:77:59:a2:08:14:24:ba:26:ab:3f:cc:19:0b:ff:
c0:d0:09:12:2e:85:ac:c3:09:c9:a7:38:37:32:b8:42:fd:de:
f2:06:3a:69:11:8d:03:b1:ae:9f:17:20:fc:1b:95:0b:0d:f2:
cb:d5:5f:3c:a9:18:60:da:ae:19:88:dc:2e:7d:b4:65:73:1f:
82:3c:b6:b3:fd:d0:96:a9:aa:72:9c:8f:93:b7:5d:a4:05:ad:
12:20:e0:43:ef:8c:ec:ba:ae:0d:2d:17:37:7d:cc:4b:75:06:
5a:ac:31:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:04 2026 by rpki-client