
$ rpki-client -vvf rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/32372e3132332e302e302f32312d3234203d3e20313339393338.roa
File: 32372e3132332e302e302f32312d3234203d3e20313339393338.roa (raw, json)
Hash identifier: CrDosYMbaMymGSuAwPQv1AxOjr/T7uHU3jsk81GEu9s=
Subject key identifier: 86:9B:9C:3B:3D:B5:9A:B6:A6:F4:5A:93:ED:27:F6:C0:92:33:91:A8
Certificate issuer: /CN=E00C0AD01CBF6EE9B4254305E7B340D64C5974D0
Certificate serial: 196B8B2E71B14E9F591CB12246993258F7B9ADD1
Authority key identifier: E0:0C:0A:D0:1C:BF:6E:E9:B4:25:43:05:E7:B3:40:D6:4C:59:74:D0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/32372e3132332e302e302f32312d3234203d3e20313339393338.roa
Signing time: Sun 03 May 2026 02:44:06 +0000
ROA not before: Sun 03 May 2026 02:39:06 +0000
ROA not after: Sun 02 May 2027 02:44:06 +0000
asID: 139938
IP address blocks: 27.123.0.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.crl
rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 06:22:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:6b:8b:2e:71:b1:4e:9f:59:1c:b1:22:46:99:32:58:f7:b9:ad:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E00C0AD01CBF6EE9B4254305E7B340D64C5974D0
Validity
Not Before: May 3 02:39:06 2026 GMT
Not After : May 2 02:44:06 2027 GMT
Subject: CN=869B9C3B3DB59AB6A6F45A93ED27F6C0923391A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8f:8d:41:e5:9f:d0:12:c9:73:69:bf:03:b5:
17:8a:ef:6a:28:2b:fd:a8:2d:e3:46:04:05:7e:74:
4c:3e:83:19:2b:bc:31:48:06:28:8a:de:75:5e:46:
ce:f9:6a:c6:8a:92:49:f4:57:5a:61:73:fc:e7:e0:
b9:a8:f7:3d:79:28:5e:43:d4:f4:5e:6c:b7:0b:a0:
12:22:54:94:a1:36:eb:99:6a:21:f3:9f:ee:0e:2d:
02:a8:8f:c8:72:ac:7c:bf:ed:67:5f:a4:fa:89:8e:
c7:1a:18:88:78:54:d0:56:38:19:a5:be:c1:9d:c9:
48:2c:50:b3:da:a1:1f:c4:98:c4:fb:56:e0:cc:81:
a6:7c:2c:d9:88:55:96:25:b3:bf:71:29:17:5b:91:
02:1f:48:54:41:45:51:79:bc:af:1b:cc:da:f8:89:
64:0f:19:08:06:cd:13:91:73:84:25:2f:15:9b:58:
d6:69:9a:ba:7b:f0:1e:b2:d9:3b:a8:bb:85:5e:3d:
20:5d:75:9f:41:26:2c:ad:e0:97:b4:4b:ef:90:ff:
db:12:46:4d:1f:74:04:21:25:af:4f:af:a4:b7:83:
d0:ce:39:d1:19:f6:be:34:8b:46:2b:d5:97:a7:60:
34:11:68:b5:cd:15:87:9e:8d:b9:1c:04:49:b1:7d:
87:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9B:9C:3B:3D:B5:9A:B6:A6:F4:5A:93:ED:27:F6:C0:92:33:91:A8
X509v3 Authority Key Identifier:
keyid:E0:0C:0A:D0:1C:BF:6E:E9:B4:25:43:05:E7:B3:40:D6:4C:59:74:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/32372e3132332e302e302f32312d3234203d3e20313339393338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.123.0.0/21
Signature Algorithm: sha256WithRSAEncryption
7c:52:8b:5b:74:46:87:c4:2a:11:56:b7:9e:6a:ab:10:aa:98:
0d:3c:be:42:34:f4:34:41:8d:29:6c:18:fe:22:17:51:80:ae:
f2:06:dc:86:d0:21:82:4e:ea:6f:b9:52:e5:cb:21:78:64:12:
50:47:49:5b:1e:bc:80:c6:09:ee:89:66:51:a0:18:8e:f9:1e:
78:28:a0:e2:e8:f8:ef:eb:de:55:3f:7b:00:f1:c2:9f:4c:73:
e3:1a:38:2f:3a:65:f7:d7:e9:34:87:fc:c4:67:22:54:bc:5e:
f6:81:19:9e:77:b9:99:eb:0d:54:69:90:75:69:8d:54:73:47:
53:e5:17:6b:17:26:50:6c:66:ad:d1:ce:04:2d:2f:70:b8:15:
0e:c0:e4:ea:06:8b:63:47:5e:25:81:a0:b0:ea:08:1e:32:5e:
47:ab:4f:3a:b7:6a:72:9c:f3:54:be:94:61:db:d0:31:3e:12:
6d:1d:91:db:ad:f1:e3:89:58:7d:ac:85:7e:21:d8:97:f3:54:
f2:d0:0b:5e:34:74:84:3a:d2:69:a8:8d:80:13:20:ea:72:d6:
4f:a1:db:68:01:65:79:15:4c:81:c3:9d:09:04:d1:ef:a7:eb:
a0:7d:32:f4:bd:a1:b0:40:1e:7e:3e:ad:a7:94:87:bb:ff:1e:
c4:3a:ec:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:31:57 2026 by rpki-client