
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/34332e3235322e3138342e302f32322d3232203d3e203538383136.roa
File: 34332e3235322e3138342e302f32322d3232203d3e203538383136.roa (raw, json)
Hash identifier: aMBAXs/RdXlfZWWFpQRxpPMcWLs6NNYuURPkur9u7RI=
Subject key identifier: 00:1F:89:68:F0:FA:E9:78:FE:5B:CB:35:2B:E7:44:96:A2:AC:39:BA
Certificate issuer: /CN=92D91C78CED320B90BF6562D1B556AE9218F74A1
Certificate serial: 6796E83978FDA90E21744CF68F217C85FD9DA793
Authority key identifier: 92:D9:1C:78:CE:D3:20:B9:0B:F6:56:2D:1B:55:6A:E9:21:8F:74:A1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92D91C78CED320B90BF6562D1B556AE9218F74A1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/34332e3235322e3138342e302f32322d3232203d3e203538383136.roa
Signing time: Sun 03 May 2026 02:42:11 +0000
ROA not before: Sun 03 May 2026 02:37:11 +0000
ROA not after: Sun 02 May 2027 02:42:11 +0000
asID: 58816
IP address blocks: 43.252.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/92D91C78CED320B90BF6562D1B556AE9218F74A1.crl
rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/92D91C78CED320B90BF6562D1B556AE9218F74A1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92D91C78CED320B90BF6562D1B556AE9218F74A1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:96:e8:39:78:fd:a9:0e:21:74:4c:f6:8f:21:7c:85:fd:9d:a7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92D91C78CED320B90BF6562D1B556AE9218F74A1
Validity
Not Before: May 3 02:37:11 2026 GMT
Not After : May 2 02:42:11 2027 GMT
Subject: CN=001F8968F0FAE978FE5BCB352BE74496A2AC39BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ff:c6:2c:ee:47:aa:44:60:39:47:3d:c2:96:
da:8f:24:4b:76:39:47:5f:1c:86:c6:44:8a:57:d0:
78:21:c7:e4:d3:fb:c6:ba:32:aa:26:d2:f4:61:db:
53:15:1c:41:21:b1:cc:88:b2:82:62:1f:a4:03:84:
c8:c4:23:dc:93:54:a8:14:66:d5:1c:d2:5b:35:da:
88:46:eb:2f:8b:28:9d:81:7c:c1:8d:1f:6f:ec:84:
6f:ca:1e:88:4a:95:cc:d9:b9:89:b5:6d:56:b6:96:
92:35:71:74:0e:8f:bb:f1:c7:49:7c:65:8d:28:58:
0f:97:f6:a1:02:aa:4d:71:48:65:5a:b6:ea:93:8f:
81:3e:b1:d5:28:fa:57:53:b3:38:ab:34:79:76:1d:
c3:14:ad:4e:0d:01:2c:15:38:5a:c3:f1:42:79:c1:
e0:a0:af:3b:6c:7a:5c:cd:ed:4c:f0:48:f6:d4:3c:
c3:b2:73:19:5f:7f:d7:19:ae:29:a4:17:41:d6:0e:
26:3d:68:bf:78:9b:41:26:d2:fc:8b:8b:03:c1:f3:
e8:62:f3:1b:6a:7a:7b:97:9d:d6:ae:15:5a:5d:c3:
1c:6c:9b:9b:af:f9:85:5c:80:f3:17:a8:cf:a3:99:
14:00:6e:53:fd:be:6f:f2:5b:05:45:36:f6:44:60:
d0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1F:89:68:F0:FA:E9:78:FE:5B:CB:35:2B:E7:44:96:A2:AC:39:BA
X509v3 Authority Key Identifier:
keyid:92:D9:1C:78:CE:D3:20:B9:0B:F6:56:2D:1B:55:6A:E9:21:8F:74:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/92D91C78CED320B90BF6562D1B556AE9218F74A1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92D91C78CED320B90BF6562D1B556AE9218F74A1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/34332e3235322e3138342e302f32322d3232203d3e203538383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.252.184.0/22
Signature Algorithm: sha256WithRSAEncryption
72:4d:63:5d:23:01:55:3b:53:46:f2:22:b0:da:88:0b:53:a5:
df:90:d2:a0:9a:16:7d:b6:f1:7c:20:69:8b:eb:b1:9a:2e:73:
3c:fd:ce:99:7c:ac:85:73:ef:05:a6:89:cb:d6:b8:3c:66:c4:
b7:87:5c:25:34:f5:be:5f:79:d8:9f:09:8f:23:07:6a:0e:11:
ba:52:13:f0:7c:57:ba:2b:af:d5:96:c0:21:8f:d8:30:12:d9:
e3:27:31:79:13:ea:66:c6:38:08:ff:1f:ad:2f:6f:1c:64:07:
df:34:39:8e:2a:88:3d:ad:9e:4f:eb:d4:80:a7:a4:d0:d8:ec:
0b:43:bc:5f:b8:a5:2e:35:e5:4c:94:d3:20:94:65:23:85:18:
04:ae:f7:e6:27:75:7b:43:19:fa:af:6b:60:17:24:08:8c:c6:
06:71:44:8a:7c:9f:92:27:ee:ac:13:17:5e:0b:e8:65:b6:3c:
99:48:d9:8d:99:de:bb:b8:8f:74:5f:c8:78:ce:bd:a5:00:84:
ed:9c:c8:43:da:5e:de:8d:c2:7f:20:8a:5c:49:5e:81:1a:6f:
59:e9:b1:9c:f0:13:a0:aa:78:a0:d5:18:db:bf:d8:63:54:82:
83:9f:d1:56:bf:fc:f1:5a:7b:45:16:c3:f9:70:b9:0c:ee:6f:
35:77:ec:04
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUZ5boOXj9qQ4hdEz2jyF8hf2dp5MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJEOTFDNzhDRUQzMjBCOTBCRjY1NjJEMUI1NTZBRTky
MThGNzRBMTAeFw0yNjA1MDMwMjM3MTFaFw0yNzA1MDIwMjQyMTFaMDMxMTAvBgNV
BAMTKDAwMUY4OTY4RjBGQUU5NzhGRTVCQ0IzNTJCRTc0NDk2QTJBQzM5QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM/8Ys7keqRGA5Rz3CltqPJEt2
OUdfHIbGRIpX0Hghx+TT+8a6Mqom0vRh21MVHEEhscyIsoJiH6QDhMjEI9yTVKgU
ZtUc0ls12ohG6y+LKJ2BfMGNH2/shG/KHohKlczZuYm1bVa2lpI1cXQOj7vxx0l8
ZY0oWA+X9qECqk1xSGVatuqTj4E+sdUo+ldTszirNHl2HcMUrU4NASwVOFrD8UJ5
weCgrztselzN7UzwSPbUPMOycxlff9cZrimkF0HWDiY9aL94m0Em0vyLiwPB8+hi
8xtqenuXndauFVpdwxxsm5uv+YVcgPMXqM+jmRQAblP9vm/yWwVFNvZEYNC3AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUAB+JaPD66Xj+W8s1K+dElqKsObowHwYDVR0j
BBgwFoAUktkceM7TILkL9lYtG1Vq6SGPdKEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmZjM2NiYzQtODg4My00MTFjLTg3NmUtZTllMjNhOGQ4YWQ5LzAvOTJEOTFDNzhD
RUQzMjBCOTBCRjY1NjJEMUI1NTZBRTkyMThGNzRBMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MkQ5MUM3OENFRDMyMEI5MEJGNjU2MkQxQjU1NkFFOTIxOEY3
NEExLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZmYzNjYmM0LTg4ODMtNDExYy04
NzZlLWU5ZTIzYThkOGFkOS8wLzM0MzMyZTMyMzUzMjJlMzEzODM0MmUzMDJmMzIz
MjJkMzIzMjIwM2QzZTIwMzUzODM4MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAiv8uDANBgkqhkiG
9w0BAQsFAAOCAQEAck1jXSMBVTtTRvIisNqIC1Ol35DSoJoWfbbxfCBpi+uxmi5z
PP3OmXyshXPvBaaJy9a4PGbEt4dcJTT1vl952J8JjyMHag4RulIT8HxXuiuv1ZbA
IY/YMBLZ4ycxeRPqZsY4CP8frS9vHGQH3zQ5jiqIPa2eT+vUgKek0NjsC0O8X7il
LjXlTJTTIJRlI4UYBK735id1e0MZ+q9rYBckCIzGBnFEinyfkifurBMXXgvoZbY8
mUjZjZneu7iPdF/IeM69pQCE7ZzIQ9pe3o3CfyCKXElegRpvWemxnPAToKp4oNUY
27/YY1SCg5/RVr/88Vp7RRbD+XC5DO5vNXfsBA==
-----END CERTIFICATE-----
Generated at Wed May 13 00:27:40 2026 by rpki-client