
$ rpki-client -vvf rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234312e302f32342d3234203d3e203435323938.roa
File: 3138322e31362e3234312e302f32342d3234203d3e203435323938.roa (raw, json)
Hash identifier: idljZ16M3swfkw4ovP9vpomtzJGJyjtN2z7RpR/To2E=
Subject key identifier: 64:E5:5B:E0:61:B5:82:DE:3B:26:7B:DE:2F:5C:D8:C0:06:04:80:8E
Certificate issuer: /CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0
Certificate serial: 628EF6E89D812D25814C87A938C488BB8F16429E
Authority key identifier: 4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234312e302f32342d3234203d3e203435323938.roa
Signing time: Sun 03 May 2026 02:39:54 +0000
ROA not before: Sun 03 May 2026 02:34:54 +0000
ROA not after: Sun 02 May 2027 02:39:54 +0000
asID: 45298
IP address blocks: 182.16.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl
rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:8e:f6:e8:9d:81:2d:25:81:4c:87:a9:38:c4:88:bb:8f:16:42:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0
Validity
Not Before: May 3 02:34:54 2026 GMT
Not After : May 2 02:39:54 2027 GMT
Subject: CN=64E55BE061B582DE3B267BDE2F5CD8C00604808E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a0:fa:d6:b9:3f:c7:54:1d:26:fd:73:f7:22:
23:0b:1c:48:b8:d2:c1:2a:91:3d:86:59:9f:53:ce:
95:15:42:0d:9b:8b:c3:ed:25:31:68:42:cc:86:c5:
df:1d:de:70:94:15:7e:df:56:30:10:cb:05:0e:78:
81:27:96:90:23:5a:3d:e8:2f:a4:24:36:0b:c6:97:
ed:d8:a7:89:dd:1f:94:0e:3a:f1:bb:39:5c:16:f8:
07:70:b1:37:51:ed:db:45:dc:f1:c0:66:95:15:a4:
7e:68:c2:6a:23:3b:d0:20:34:02:8f:d6:2c:c4:20:
4f:dd:8d:e3:fd:c0:8c:86:ab:5f:74:79:13:49:90:
41:31:9b:e9:83:85:76:ab:73:f3:e2:33:fc:91:48:
49:39:0c:ae:6d:c9:9a:c1:5a:be:4d:24:db:75:3f:
e6:37:e3:24:03:6b:45:46:21:cc:d3:34:c2:51:0c:
74:04:81:25:d7:f6:19:a2:5c:51:c7:0f:f1:80:d4:
5a:c8:71:8b:9b:39:a6:3d:9f:60:eb:04:11:8a:bd:
b9:a5:b7:61:65:f1:31:b4:df:cd:d4:f9:50:a8:8d:
e9:0c:b0:8e:56:fb:5b:da:d0:ee:dc:db:03:32:fa:
c5:9c:99:33:69:03:5a:fc:72:a8:f9:25:b3:90:d5:
3d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E5:5B:E0:61:B5:82:DE:3B:26:7B:DE:2F:5C:D8:C0:06:04:80:8E
X509v3 Authority Key Identifier:
keyid:4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234312e302f32342d3234203d3e203435323938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.16.241.0/24
Signature Algorithm: sha256WithRSAEncryption
90:71:d8:ec:e6:ad:22:c5:75:df:81:a5:14:b1:a7:49:38:b9:
0f:9a:5a:8b:31:e9:a1:02:2c:2c:19:54:47:b4:a3:8c:22:eb:
dd:cc:be:a1:56:75:35:e3:65:e4:30:7d:bb:d3:a2:7d:54:fa:
66:ab:77:a1:ed:b7:7e:17:73:5b:4a:42:c8:46:d7:06:06:3e:
26:6b:f6:2a:2a:bf:09:30:97:33:64:77:63:12:66:33:1c:3d:
45:2b:b2:5d:0b:95:74:cc:97:e0:33:9d:97:94:dd:72:fe:1c:
38:7a:95:e5:08:81:b2:86:13:58:d0:0a:81:1a:85:87:fd:33:
1e:97:c5:05:e7:6a:61:01:1f:77:01:7b:c0:06:85:bd:e0:fb:
35:24:f2:db:56:2a:9f:2b:54:4f:00:d7:7a:e9:82:a6:21:77:
77:eb:82:e7:ba:22:7c:6f:e4:3d:03:f2:4d:23:de:4d:4a:4c:
0b:54:c5:90:4b:7c:6d:bc:a2:39:5c:ca:2a:b7:4b:34:39:af:
ae:9b:fb:3f:b4:9c:e5:98:e9:a9:ff:86:03:10:e4:ae:88:6e:
35:02:14:9e:75:fd:e2:34:31:41:f0:97:eb:f7:05:2c:e5:6e:
c3:04:90:df:c1:16:57:0a:61:35:ce:3d:7a:fc:54:92:95:17:
a4:2d:bb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:01:14 2026 by rpki-client