
$ rpki-client -vvf rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/34352e36342e3235322e302f32322d3234203d3e203435323934.roa
File: 34352e36342e3235322e302f32322d3234203d3e203435323934.roa (raw, json)
Hash identifier: ziG1A6Oi8LeUJ0pFcFc03n/VrStN2lfnk92bw36q/aI=
Subject key identifier: CE:27:CC:6F:C3:E8:35:0B:FF:DA:93:9A:59:2B:02:02:3D:90:C6:23
Certificate issuer: /CN=06083035B4010CEC337EE26F5EA15A04DD209219
Certificate serial: 6CDBA974556BD2D9058A721E9F489FC4B9B61D15
Authority key identifier: 06:08:30:35:B4:01:0C:EC:33:7E:E2:6F:5E:A1:5A:04:DD:20:92:19
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06083035B4010CEC337EE26F5EA15A04DD209219.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/34352e36342e3235322e302f32322d3234203d3e203435323934.roa
Signing time: Sun 03 May 2026 02:39:19 +0000
ROA not before: Sun 03 May 2026 02:34:19 +0000
ROA not after: Sun 02 May 2027 02:39:19 +0000
asID: 45294
IP address blocks: 45.64.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.crl
rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06083035B4010CEC337EE26F5EA15A04DD209219.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:20:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:db:a9:74:55:6b:d2:d9:05:8a:72:1e:9f:48:9f:c4:b9:b6:1d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06083035B4010CEC337EE26F5EA15A04DD209219
Validity
Not Before: May 3 02:34:19 2026 GMT
Not After : May 2 02:39:19 2027 GMT
Subject: CN=CE27CC6FC3E8350BFFDA939A592B02023D90C623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:70:59:e6:8e:40:88:c0:cd:24:c1:4e:41:4e:
d3:2f:0a:74:b0:6a:eb:2e:c2:dc:3f:1a:cb:b0:7c:
94:32:9b:52:1a:94:0d:81:53:e3:7a:67:be:69:28:
bd:25:89:34:77:87:b3:60:65:e0:8c:11:f5:8d:05:
34:3f:7d:8f:ab:b1:35:1d:2c:3e:32:ba:96:04:b8:
6a:f3:aa:e7:3a:1a:69:d9:1c:2b:6e:5f:c1:ee:4e:
18:f1:11:a1:c5:d8:2e:af:97:12:ae:e4:f3:0c:37:
c6:92:06:f2:6d:ed:d3:6d:a8:16:db:08:5d:06:9a:
53:83:d0:d2:e9:8f:fe:e8:f6:f0:61:b6:20:fc:35:
d7:1e:ed:a0:21:de:d2:41:e2:eb:ed:ff:7b:cc:ce:
c5:38:9d:7c:fc:a5:8c:72:b6:64:41:87:ae:9c:5c:
18:d2:bb:a6:78:66:b5:09:26:b2:aa:d5:89:42:46:
45:15:eb:87:1a:0e:24:1d:d4:dd:3b:27:a3:4a:28:
30:50:9e:9b:ea:e0:eb:06:0e:0e:cf:16:0a:79:00:
eb:37:27:97:63:31:72:ce:6e:ce:70:75:8f:7b:c6:
26:a9:9d:f8:4d:f7:ed:6f:35:25:69:3b:b8:5c:13:
15:a6:52:f8:36:b0:ff:22:6c:c5:02:8d:4a:c0:9b:
20:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:27:CC:6F:C3:E8:35:0B:FF:DA:93:9A:59:2B:02:02:3D:90:C6:23
X509v3 Authority Key Identifier:
keyid:06:08:30:35:B4:01:0C:EC:33:7E:E2:6F:5E:A1:5A:04:DD:20:92:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/06083035B4010CEC337EE26F5EA15A04DD209219.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06083035B4010CEC337EE26F5EA15A04DD209219.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/34352e36342e3235322e302f32322d3234203d3e203435323934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.64.252.0/22
Signature Algorithm: sha256WithRSAEncryption
84:06:60:0c:22:26:c0:a1:0f:80:85:50:df:63:79:af:db:78:
d9:f4:0e:6a:aa:a9:7b:76:5a:e0:a7:d9:67:cf:2d:98:fb:63:
35:33:b0:74:f0:29:7c:73:cd:f2:b8:14:16:35:c1:e4:0d:e8:
4f:99:e0:f2:62:a8:7d:a6:79:09:84:69:b5:3b:f6:19:f7:10:
d5:28:1c:dd:ea:39:6c:5f:90:09:92:3f:e2:eb:40:a3:46:5f:
54:3b:82:44:b2:e0:04:2d:ba:c2:9c:76:b2:32:b9:c7:4e:17:
ba:69:47:9e:e1:fd:83:76:79:ee:8b:ed:a4:59:a9:80:70:aa:
ec:cd:08:c7:fb:0c:99:1e:e4:cf:d2:43:66:a9:d3:75:3a:44:
72:f7:53:83:ff:c2:50:6c:08:b3:d0:ba:55:ca:64:2d:6f:ef:
cb:8f:3b:bc:61:ea:eb:ad:13:0b:48:6b:3b:72:c4:34:eb:b3:
be:bc:09:b7:c8:4f:cc:5c:29:3d:c8:10:71:23:e5:3c:d4:2c:
9b:37:e7:d3:b6:13:b1:4e:a4:1c:c3:ca:ad:5b:f4:b1:6b:2c:
c7:62:ea:99:4b:4a:77:46:96:87:6e:15:eb:a5:cd:35:35:45:
69:e5:f0:6a:05:21:84:b7:ee:db:32:80:3a:c1:68:f5:e5:48:
99:e8:12:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:45:14 2026 by rpki-client