
$ rpki-client -vvf rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/34332e3235342e3132342e302f32322d3232203d3e203538343832.roa
File: 34332e3235342e3132342e302f32322d3232203d3e203538343832.roa (raw, json)
Hash identifier: uAvyS9p76dmI7hlKCOH8+2FAYkKJ52QLfJ7+254DIqE=
Subject key identifier: 6E:97:71:52:1B:E0:37:D8:46:A1:D4:D4:BC:E3:F8:93:8F:16:36:32
Certificate issuer: /CN=797581F67816C4132050EC6348DBB15EBC5C0189
Certificate serial: 7F1B7DF351DD8F150ACAC0B69CB6AAA2990FC7E9
Authority key identifier: 79:75:81:F6:78:16:C4:13:20:50:EC:63:48:DB:B1:5E:BC:5C:01:89
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/797581F67816C4132050EC6348DBB15EBC5C0189.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/34332e3235342e3132342e302f32322d3232203d3e203538343832.roa
Signing time: Sun 03 May 2026 02:40:39 +0000
ROA not before: Sun 03 May 2026 02:35:39 +0000
ROA not after: Sun 02 May 2027 02:40:39 +0000
asID: 58482
IP address blocks: 43.254.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/797581F67816C4132050EC6348DBB15EBC5C0189.crl
rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/797581F67816C4132050EC6348DBB15EBC5C0189.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/797581F67816C4132050EC6348DBB15EBC5C0189.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:1b:7d:f3:51:dd:8f:15:0a:ca:c0:b6:9c:b6:aa:a2:99:0f:c7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797581F67816C4132050EC6348DBB15EBC5C0189
Validity
Not Before: May 3 02:35:39 2026 GMT
Not After : May 2 02:40:39 2027 GMT
Subject: CN=6E9771521BE037D846A1D4D4BCE3F8938F163632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:81:56:ff:f6:ce:0e:c1:6d:a1:54:db:8b:ad:
86:4b:51:48:5e:0e:93:3e:f7:ee:37:9b:03:1d:16:
e7:5e:6c:e9:ad:49:29:07:ee:1c:eb:1d:e8:55:e0:
f9:73:25:27:da:74:d4:9f:e8:3b:24:93:16:98:a6:
32:07:c8:a9:48:ff:d1:2a:2b:c5:84:4f:39:b1:4e:
bd:e2:d0:4d:1a:d1:30:19:93:e6:f9:24:48:10:a9:
6b:47:1e:47:61:92:b4:f0:a0:2f:16:62:61:5e:bd:
05:ba:7c:a0:9f:86:75:92:52:4f:d4:35:7d:d4:aa:
12:82:70:c7:00:fb:76:2e:ee:b3:0e:b9:b3:bf:43:
0f:ad:14:e4:7d:40:1c:df:29:9e:1b:2a:aa:d2:99:
83:fa:e5:46:f4:5a:47:ea:0a:dd:8f:5d:0b:e7:e5:
fa:fd:dc:6d:68:84:55:71:3d:b3:5b:c0:43:15:8c:
93:59:af:c6:9d:ee:b6:91:9d:f3:80:d0:27:ff:7e:
33:f9:3d:db:c8:5d:e9:e2:87:25:26:63:86:e8:71:
b0:46:6a:31:db:b2:b9:4a:03:c4:5e:e8:fe:52:a1:
e3:77:ee:1c:82:e0:5d:5b:c2:66:f2:b0:66:99:fa:
1b:dc:a6:13:04:fe:e0:06:6b:47:a1:97:ac:ce:a2:
d4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:97:71:52:1B:E0:37:D8:46:A1:D4:D4:BC:E3:F8:93:8F:16:36:32
X509v3 Authority Key Identifier:
keyid:79:75:81:F6:78:16:C4:13:20:50:EC:63:48:DB:B1:5E:BC:5C:01:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/797581F67816C4132050EC6348DBB15EBC5C0189.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/797581F67816C4132050EC6348DBB15EBC5C0189.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/34332e3235342e3132342e302f32322d3232203d3e203538343832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.254.124.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:77:38:ed:56:0c:20:e0:2d:d4:af:d1:21:f6:69:11:de:0d:
72:5a:0e:c0:4f:0d:93:87:3f:02:44:63:6f:24:b5:e2:14:19:
97:ee:e0:f3:d4:6e:15:2e:6f:83:ef:cf:f0:9b:ed:c2:e3:b0:
49:bc:b2:0b:c5:d7:fb:5e:68:92:a9:c5:d5:35:0b:b7:cd:fe:
5b:26:8f:49:69:f0:3c:c0:17:15:c3:83:2d:33:53:5c:71:8c:
c1:b4:1f:17:81:27:87:82:51:c0:09:1e:48:1f:e8:99:e4:1f:
01:1f:ce:86:37:55:27:4e:76:1e:ac:bc:e3:3e:41:63:ec:fc:
9f:ea:08:05:5b:33:09:2f:24:97:40:a4:c1:60:85:11:5f:03:
55:a6:50:6f:0c:e3:f9:51:e4:55:d7:64:0c:57:f4:e4:bb:36:
99:bb:79:96:e5:e4:d6:c7:e2:14:3c:38:ed:8d:e5:42:47:0e:
b0:49:b9:65:1e:31:f0:bb:17:ae:4d:1b:99:17:a7:8d:38:7b:
14:1f:66:bc:38:99:53:56:35:94:ee:a1:65:02:3a:9a:c4:5c:
9f:1c:39:95:f7:bd:5e:4b:f8:44:b4:6d:ba:6b:ba:3a:74:d1:
01:25:21:ed:16:1b:8e:36:1d:5e:6c:ad:95:76:0a:31:6b:3c:
97:0f:ab:ef
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUfxt981HdjxUKysC2nLaqopkPx+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk3NTgxRjY3ODE2QzQxMzIwNTBFQzYzNDhEQkIxNUVC
QzVDMDE4OTAeFw0yNjA1MDMwMjM1MzlaFw0yNzA1MDIwMjQwMzlaMDMxMTAvBgNV
BAMTKDZFOTc3MTUyMUJFMDM3RDg0NkExRDRENEJDRTNGODkzOEYxNjM2MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIgVb/9s4OwW2hVNuLrYZLUUhe
DpM+9+43mwMdFudebOmtSSkH7hzrHehV4PlzJSfadNSf6DskkxaYpjIHyKlI/9Eq
K8WETzmxTr3i0E0a0TAZk+b5JEgQqWtHHkdhkrTwoC8WYmFevQW6fKCfhnWSUk/U
NX3UqhKCcMcA+3Yu7rMOubO/Qw+tFOR9QBzfKZ4bKqrSmYP65Ub0WkfqCt2PXQvn
5fr93G1ohFVxPbNbwEMVjJNZr8ad7raRnfOA0Cf/fjP5PdvIXenihyUmY4bocbBG
ajHbsrlKA8Re6P5SoeN37hyC4F1bwmbysGaZ+hvcphME/uAGa0ehl6zOotQ/AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUbpdxUhvgN9hGodTUvOP4k48WNjIwHwYDVR0j
BBgwFoAUeXWB9ngWxBMgUOxjSNuxXrxcAYkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjllMmYzYmQtZDRlYy00MmNiLWFhY2YtYWRjMjgyNWMxODRiLzAvNzk3NTgxRjY3
ODE2QzQxMzIwNTBFQzYzNDhEQkIxNUVCQzVDMDE4OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83OTc1ODFGNjc4MTZDNDEzMjA1MEVDNjM0OERCQjE1RUJDNUMw
MTg5LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzY5ZTJmM2JkLWQ0ZWMtNDJjYi1h
YWNmLWFkYzI4MjVjMTg0Yi8wLzM0MzMyZTMyMzUzNDJlMzEzMjM0MmUzMDJmMzIz
MjJkMzIzMjIwM2QzZTIwMzUzODM0MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAiv+fDANBgkqhkiG
9w0BAQsFAAOCAQEAenc47VYMIOAt1K/RIfZpEd4NcloOwE8Nk4c/AkRjbyS14hQZ
l+7g89RuFS5vg+/P8JvtwuOwSbyyC8XX+15okqnF1TULt83+WyaPSWnwPMAXFcOD
LTNTXHGMwbQfF4Enh4JRwAkeSB/omeQfAR/OhjdVJ052Hqy84z5BY+z8n+oIBVsz
CS8kl0CkwWCFEV8DVaZQbwzj+VHkVddkDFf05Ls2mbt5luXk1sfiFDw47Y3lQkcO
sEm5ZR4x8LsXrk0bmRenjTh7FB9mvDiZU1Y1lO6hZQI6msRcnxw5lfe9Xkv4RLRt
umu6OnTRASUh7RYbjjYdXmytlXYKMWs8lw+r7w==
-----END CERTIFICATE-----
Generated at Wed May 13 00:13:59 2026 by rpki-client