
$ rpki-client -vvf rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34392e35302e352e302f32342d3234203d3e203436303234.roa
File: 34392e35302e352e302f32342d3234203d3e203436303234.roa (raw, json)
Hash identifier: nFS5QU5ou89IxZP8HncF3riJVrU1zaoieWQvhjr5m8c=
Subject key identifier: 82:ED:AB:85:93:DC:66:5A:1C:FF:0F:8E:AA:EA:3F:97:1D:78:97:FB
Certificate issuer: /CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0
Certificate serial: 595E5BB3DE8908F54A0081CBC20C3FB2E92E5C18
Authority key identifier: 4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34392e35302e352e302f32342d3234203d3e203436303234.roa
Signing time: Sun 03 May 2026 02:39:50 +0000
ROA not before: Sun 03 May 2026 02:34:50 +0000
ROA not after: Sun 02 May 2027 02:39:50 +0000
asID: 46024
IP address blocks: 49.50.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl
rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:29:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:5e:5b:b3:de:89:08:f5:4a:00:81:cb:c2:0c:3f:b2:e9:2e:5c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0
Validity
Not Before: May 3 02:34:50 2026 GMT
Not After : May 2 02:39:50 2027 GMT
Subject: CN=82EDAB8593DC665A1CFF0F8EAAEA3F971D7897FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8e:d6:0d:42:65:07:55:9a:9f:b0:dd:e3:48:
ad:58:04:0a:13:bb:a6:7d:7e:ce:35:59:c5:4d:b8:
eb:8c:7a:f5:f5:40:93:44:e1:a5:02:99:30:34:ff:
78:e2:b4:e8:53:f4:0d:46:c3:17:ae:ab:fe:d6:af:
2b:37:39:f6:23:f1:12:9a:e1:be:96:d4:57:0b:87:
da:26:22:fd:b0:2b:89:1c:a4:c6:ab:44:fd:22:32:
37:e6:49:01:0e:37:8a:7f:73:45:bf:f7:2b:4f:12:
d4:f0:86:5f:3a:33:e7:c2:10:94:f0:8b:a7:22:e9:
7c:3b:4d:52:84:96:c3:b0:a0:5c:18:ae:a7:95:a7:
b3:76:1d:34:bf:6a:c8:21:9d:fd:47:21:35:66:ce:
7c:b6:74:fc:26:1f:de:09:5e:b3:c9:2c:3c:00:b8:
4d:b9:a7:91:80:17:bc:a0:e2:c6:d1:cf:75:90:cb:
c9:b2:9a:5f:22:5d:57:dd:90:b0:bc:41:cf:7f:3d:
43:53:de:66:c5:91:21:ae:29:9d:3c:ec:ed:cb:20:
e3:a0:3c:e2:8d:62:8d:06:49:8d:7f:e9:e0:ed:2f:
23:90:c6:c5:fe:d6:e3:70:c8:85:5d:1c:1b:a5:8c:
cb:89:0c:1b:36:cc:91:b3:28:ea:49:27:98:82:92:
bf:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:ED:AB:85:93:DC:66:5A:1C:FF:0F:8E:AA:EA:3F:97:1D:78:97:FB
X509v3 Authority Key Identifier:
keyid:4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34392e35302e352e302f32342d3234203d3e203436303234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
49.50.5.0/24
Signature Algorithm: sha256WithRSAEncryption
27:e6:82:40:ac:df:83:33:f0:11:a8:dc:2c:6d:85:c3:b9:3a:
a5:08:75:6f:cb:20:d3:23:fd:00:fd:12:e6:ac:21:82:00:ac:
01:54:7e:a5:77:8c:fa:21:57:4e:f9:74:25:5e:39:c8:53:80:
c2:30:ba:aa:00:7d:ea:1d:1f:3a:9d:2e:72:19:e6:3a:77:1c:
0b:ea:13:0d:e7:6e:dc:dd:d4:b1:12:fd:3c:a0:ac:7c:b4:74:
13:2d:c0:15:62:cd:5b:17:e3:05:ec:d0:6f:08:11:61:79:1b:
9b:64:23:83:1f:e9:31:51:39:55:05:3b:24:3b:6d:a8:c8:c0:
5c:45:9d:17:4b:b1:0b:cc:06:5a:c5:f3:bc:43:ea:f0:4a:7f:
c0:5b:0e:db:a1:03:01:65:13:64:85:36:c5:b1:e8:13:6b:26:
cd:75:da:e2:ae:27:33:f5:9a:18:f1:2f:ce:82:11:72:b3:15:
f6:09:bd:12:9a:cc:02:9c:3a:b7:1b:db:64:4c:ce:77:46:f1:
9f:82:91:01:db:58:29:d7:21:5a:45:b3:12:2b:c4:0f:1b:bb:
2f:99:84:ba:c3:10:d7:14:6e:50:d3:ee:9a:52:00:be:ab:56:
17:ee:f9:27:77:1b:57:72:2a:f9:c4:21:67:65:3f:e9:ea:b7:
65:d2:17:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:22:48 2026 by rpki-client