
$ rpki-client -vvf rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/34332e3235342e3132372e302f32342d3234203d3e203538343832.roa
File: 34332e3235342e3132372e302f32342d3234203d3e203538343832.roa (raw, json)
Hash identifier: BWm0RTaDot1Lm/DM4lOXSTWqpdZwtnjSYHIp18t5S+0=
Subject key identifier: 95:D4:3D:07:5B:5E:04:FE:8E:67:7E:80:EE:DF:80:EE:84:F8:F9:3F
Certificate issuer: /CN=797581F67816C4132050EC6348DBB15EBC5C0189
Certificate serial: 6594A324B2A0738E4B6A367E6CBDEF3CD12CBD31
Authority key identifier: 79:75:81:F6:78:16:C4:13:20:50:EC:63:48:DB:B1:5E:BC:5C:01:89
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/797581F67816C4132050EC6348DBB15EBC5C0189.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/34332e3235342e3132372e302f32342d3234203d3e203538343832.roa
Signing time: Sun 03 May 2026 02:40:39 +0000
ROA not before: Sun 03 May 2026 02:35:39 +0000
ROA not after: Sun 02 May 2027 02:40:39 +0000
asID: 58482
IP address blocks: 43.254.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/797581F67816C4132050EC6348DBB15EBC5C0189.crl
rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/797581F67816C4132050EC6348DBB15EBC5C0189.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/797581F67816C4132050EC6348DBB15EBC5C0189.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:09:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:94:a3:24:b2:a0:73:8e:4b:6a:36:7e:6c:bd:ef:3c:d1:2c:bd:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797581F67816C4132050EC6348DBB15EBC5C0189
Validity
Not Before: May 3 02:35:39 2026 GMT
Not After : May 2 02:40:39 2027 GMT
Subject: CN=95D43D075B5E04FE8E677E80EEDF80EE84F8F93F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0d:9a:50:6c:34:63:f7:c8:11:36:27:ad:f1:
38:19:29:9d:21:37:f0:94:20:8f:6b:89:9d:57:38:
3f:d0:e7:eb:fd:9c:08:b6:4e:fc:eb:c4:bb:e0:42:
1e:e5:dc:e9:e2:87:db:14:c0:a0:09:39:5f:fc:2d:
20:64:f8:dd:84:98:13:25:05:e9:d0:5b:43:1a:f0:
2d:95:02:1b:4f:73:ee:a5:be:59:d6:c3:6e:ac:04:
84:45:bc:e4:f3:8b:4a:d3:9e:37:b9:b4:66:15:bd:
89:74:da:d2:d8:cc:8c:67:67:6e:66:81:9e:90:df:
c0:ef:25:4f:92:2d:42:61:c1:68:c8:6f:fd:d8:3f:
ec:0c:8f:97:9e:02:85:f9:8a:26:10:41:a1:51:b6:
b9:fe:e9:6c:38:e9:bd:3f:c5:3e:ff:71:fd:ce:7e:
7e:67:19:d4:33:34:45:9e:b8:31:60:f7:b3:ca:ae:
c3:53:de:b6:47:a1:68:ac:df:eb:b3:08:a2:ba:d6:
da:d6:07:7f:5e:93:4a:5a:c5:d2:0f:c3:09:69:82:
ae:13:da:ff:d3:20:ce:e5:f3:34:f8:03:42:bb:f4:
69:49:8f:3b:c4:08:b0:2a:5f:0e:88:37:99:b2:b8:
99:ea:64:6a:41:36:60:f8:ca:45:e6:0c:56:30:42:
be:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D4:3D:07:5B:5E:04:FE:8E:67:7E:80:EE:DF:80:EE:84:F8:F9:3F
X509v3 Authority Key Identifier:
keyid:79:75:81:F6:78:16:C4:13:20:50:EC:63:48:DB:B1:5E:BC:5C:01:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/797581F67816C4132050EC6348DBB15EBC5C0189.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/797581F67816C4132050EC6348DBB15EBC5C0189.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/34332e3235342e3132372e302f32342d3234203d3e203538343832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.254.127.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:0a:03:f1:7a:d1:b2:85:9b:be:6a:1f:41:f8:e8:28:98:f0:
09:45:2c:42:31:6d:c1:79:28:4c:2a:d6:67:46:cc:1d:dc:cd:
f3:4f:8c:3a:cf:0f:a0:65:0c:5f:a3:ed:e2:6d:ba:81:90:69:
bb:04:22:9c:a0:30:a8:79:f8:8b:13:c6:6e:6c:29:bc:57:ae:
55:c9:fd:8e:a6:c4:27:7f:0a:59:e2:9d:d0:af:a7:a6:03:10:
b8:05:10:48:d0:95:2d:07:8b:fd:50:e7:3b:32:1c:a4:df:6c:
03:09:84:da:41:cd:63:a0:b5:bb:06:8c:8b:6e:a7:37:f2:01:
b9:88:50:65:cf:70:54:32:9e:99:3a:46:66:3e:77:21:be:72:
2b:2b:e9:23:45:6b:e4:0c:e6:22:18:e1:2b:35:72:71:84:f4:
eb:aa:bd:0d:fd:21:5a:1f:77:ae:2e:93:70:63:ad:f2:43:1f:
90:3a:92:a0:ac:f9:88:ac:d0:a2:94:da:d6:50:78:52:d1:67:
7b:08:74:50:59:e4:c6:06:f6:2a:36:b6:6f:70:43:0d:3b:4b:
3c:85:5a:3e:0e:6c:81:31:36:aa:e9:7f:3a:eb:3d:f6:ca:ee:
4f:61:9e:80:cb:8d:16:35:5d:14:b4:f1:9b:f4:64:66:7b:5b:
10:82:10:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:59:46 2026 by rpki-client