
$ rpki-client -vvf rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/34332e3235342e3132352e302f32342d3234203d3e203538343832.roa
File: 34332e3235342e3132352e302f32342d3234203d3e203538343832.roa (raw, json)
Hash identifier: +1b3BSKYWcZI6cyb6/9kAQMfio3H7vBUKEBSWW7Mapo=
Subject key identifier: 73:7D:CE:9C:AB:E0:C9:D2:54:F6:D4:02:3D:EA:87:0A:5E:4E:6D:09
Certificate issuer: /CN=797581F67816C4132050EC6348DBB15EBC5C0189
Certificate serial: 4219706729D88766A651EC97FCF9F5025F1C690A
Authority key identifier: 79:75:81:F6:78:16:C4:13:20:50:EC:63:48:DB:B1:5E:BC:5C:01:89
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/797581F67816C4132050EC6348DBB15EBC5C0189.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/34332e3235342e3132352e302f32342d3234203d3e203538343832.roa
Signing time: Sun 03 May 2026 02:40:40 +0000
ROA not before: Sun 03 May 2026 02:35:40 +0000
ROA not after: Sun 02 May 2027 02:40:40 +0000
asID: 58482
IP address blocks: 43.254.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/797581F67816C4132050EC6348DBB15EBC5C0189.crl
rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/797581F67816C4132050EC6348DBB15EBC5C0189.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/797581F67816C4132050EC6348DBB15EBC5C0189.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:19:70:67:29:d8:87:66:a6:51:ec:97:fc:f9:f5:02:5f:1c:69:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797581F67816C4132050EC6348DBB15EBC5C0189
Validity
Not Before: May 3 02:35:40 2026 GMT
Not After : May 2 02:40:40 2027 GMT
Subject: CN=737DCE9CABE0C9D254F6D4023DEA870A5E4E6D09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:67:6f:4a:57:83:4e:ef:27:e8:82:1e:19:89:
28:14:22:5a:2e:48:39:b0:38:2e:05:92:8c:d7:1e:
f5:c3:96:0a:f7:1e:f7:c0:70:47:5c:fb:4b:e3:81:
38:35:87:4e:30:b7:01:10:1b:83:9c:b4:f5:dd:50:
55:e4:f5:45:53:24:7d:b5:1e:0b:88:3b:9c:9e:dd:
ff:c9:79:e9:4b:84:be:e3:c1:28:93:b2:10:f3:72:
c8:b9:cc:02:47:aa:a8:12:dd:5e:7f:44:d7:47:e6:
f0:8f:ed:a9:ef:a7:9b:69:1e:7c:f5:ee:9a:12:56:
3c:33:1e:28:00:0b:b2:df:a6:b2:19:56:32:db:9e:
10:59:9b:23:5d:0a:64:f9:6a:1c:24:67:92:91:d5:
e3:6f:bf:99:ae:6a:f7:07:88:d8:80:09:d2:b7:f5:
1b:a0:89:5f:12:6d:59:2a:8d:b4:c7:26:f1:56:c7:
a8:f1:bb:c2:8c:d4:f3:4b:c0:06:4f:9b:36:50:a7:
bd:1b:00:10:39:c7:23:a1:8e:f0:f0:8a:89:e6:70:
07:6a:b3:af:b9:68:c0:51:c7:13:2b:e3:b3:e5:96:
33:ec:88:14:99:e6:bc:77:4f:64:26:80:77:3d:37:
33:51:b5:36:5f:94:76:93:b2:77:fb:19:0a:75:f8:
a8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7D:CE:9C:AB:E0:C9:D2:54:F6:D4:02:3D:EA:87:0A:5E:4E:6D:09
X509v3 Authority Key Identifier:
keyid:79:75:81:F6:78:16:C4:13:20:50:EC:63:48:DB:B1:5E:BC:5C:01:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/797581F67816C4132050EC6348DBB15EBC5C0189.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/797581F67816C4132050EC6348DBB15EBC5C0189.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/34332e3235342e3132352e302f32342d3234203d3e203538343832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.254.125.0/24
Signature Algorithm: sha256WithRSAEncryption
25:2d:44:07:98:59:a4:46:9b:81:a0:e9:bd:76:77:2b:c9:a1:
39:1a:9f:61:16:2d:24:15:81:f1:c9:16:0b:9b:3e:9f:66:89:
36:00:e9:80:a4:bf:21:0a:38:d8:e4:fb:37:b8:09:48:c1:f0:
1c:5d:d8:f9:4e:9c:ad:9a:53:0a:b8:c6:ce:27:34:a7:10:7a:
67:8f:2b:0a:1e:cf:75:f4:6f:d9:58:f0:84:1e:cf:59:26:52:
e2:f2:3f:a7:a2:16:12:c3:9e:7c:75:d2:59:4f:df:46:ea:f3:
b5:df:83:20:55:88:74:60:a9:5e:44:bd:9c:ca:2b:00:ab:09:
18:1c:73:e3:c0:60:da:46:91:0b:a3:77:6a:7b:5b:9d:af:9a:
eb:25:d6:2d:d3:0f:c9:10:6c:e1:ba:01:a3:3c:fb:72:20:fb:
34:96:41:4c:5b:4d:de:9a:26:86:e0:96:ec:d0:68:b0:15:15:
f2:49:72:c7:ec:08:55:27:c8:6f:00:06:62:2c:d9:65:11:50:
fe:32:20:13:57:e3:60:01:61:2e:a0:f1:a2:67:0d:92:10:c9:
ff:41:5e:83:c3:2d:bb:db:b3:c6:0e:63:a8:e5:7b:03:7a:9a:
57:7b:b6:5c:1e:73:02:d6:bd:13:a4:aa:ec:74:64:d9:8a:f7:
20:0e:32:c4
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUQhlwZynYh2amUeyX/Pn1Al8caQowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk3NTgxRjY3ODE2QzQxMzIwNTBFQzYzNDhEQkIxNUVC
QzVDMDE4OTAeFw0yNjA1MDMwMjM1NDBaFw0yNzA1MDIwMjQwNDBaMDMxMTAvBgNV
BAMTKDczN0RDRTlDQUJFMEM5RDI1NEY2RDQwMjNERUE4NzBBNUU0RTZEMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiZ29KV4NO7yfogh4ZiSgUIlou
SDmwOC4FkozXHvXDlgr3HvfAcEdc+0vjgTg1h04wtwEQG4OctPXdUFXk9UVTJH21
HguIO5ye3f/JeelLhL7jwSiTshDzcsi5zAJHqqgS3V5/RNdH5vCP7anvp5tpHnz1
7poSVjwzHigAC7LfprIZVjLbnhBZmyNdCmT5ahwkZ5KR1eNvv5muavcHiNiACdK3
9RugiV8SbVkqjbTHJvFWx6jxu8KM1PNLwAZPmzZQp70bABA5xyOhjvDwionmcAdq
s6+5aMBRxxMr47PlljPsiBSZ5rx3T2QmgHc9NzNRtTZflHaTsnf7GQp1+KgPAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUc33OnKvgydJU9tQCPeqHCl5ObQkwHwYDVR0j
BBgwFoAUeXWB9ngWxBMgUOxjSNuxXrxcAYkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjllMmYzYmQtZDRlYy00MmNiLWFhY2YtYWRjMjgyNWMxODRiLzAvNzk3NTgxRjY3
ODE2QzQxMzIwNTBFQzYzNDhEQkIxNUVCQzVDMDE4OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83OTc1ODFGNjc4MTZDNDEzMjA1MEVDNjM0OERCQjE1RUJDNUMw
MTg5LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzY5ZTJmM2JkLWQ0ZWMtNDJjYi1h
YWNmLWFkYzI4MjVjMTg0Yi8wLzM0MzMyZTMyMzUzNDJlMzEzMjM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODM0MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACv+fTANBgkqhkiG
9w0BAQsFAAOCAQEAJS1EB5hZpEabgaDpvXZ3K8mhORqfYRYtJBWB8ckWC5s+n2aJ
NgDpgKS/IQo42OT7N7gJSMHwHF3Y+U6crZpTCrjGzic0pxB6Z48rCh7PdfRv2Vjw
hB7PWSZS4vI/p6IWEsOefHXSWU/fRurztd+DIFWIdGCpXkS9nMorAKsJGBxz48Bg
2kaRC6N3antbna+a6yXWLdMPyRBs4boBozz7ciD7NJZBTFtN3pomhuCW7NBosBUV
8klyx+wIVSfIbwAGYizZZRFQ/jIgE1fjYAFhLqDxomcNkhDJ/0Feg8Mtu9uzxg5j
qOV7A3qaV3u2XB5zAta9E6Sq7HRk2Yr3IA4yxA==
-----END CERTIFICATE-----
Generated at Wed May 13 02:58:37 2026 by rpki-client