
$ rpki-client -vvf rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/32372e3132332e302e302f32312d3234203d3e203435373036.roa
File: 32372e3132332e302e302f32312d3234203d3e203435373036.roa (raw, json)
Hash identifier: kKeNFgEWYpxJdEVxaw5r/j+gOBdLDAvajOzNPHKCcoc=
Subject key identifier: 0A:0C:E7:1D:ED:D7:E6:E1:49:86:26:16:A3:4A:51:70:B8:BC:45:B6
Certificate issuer: /CN=E00C0AD01CBF6EE9B4254305E7B340D64C5974D0
Certificate serial: 21715016C3FABE0FB616DD3742AEFA6A8D9D79F1
Authority key identifier: E0:0C:0A:D0:1C:BF:6E:E9:B4:25:43:05:E7:B3:40:D6:4C:59:74:D0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/32372e3132332e302e302f32312d3234203d3e203435373036.roa
Signing time: Sun 03 May 2026 02:44:04 +0000
ROA not before: Sun 03 May 2026 02:39:04 +0000
ROA not after: Sun 02 May 2027 02:44:04 +0000
asID: 45706
IP address blocks: 27.123.0.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.crl
rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 06:22:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:71:50:16:c3:fa:be:0f:b6:16:dd:37:42:ae:fa:6a:8d:9d:79:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E00C0AD01CBF6EE9B4254305E7B340D64C5974D0
Validity
Not Before: May 3 02:39:04 2026 GMT
Not After : May 2 02:44:04 2027 GMT
Subject: CN=0A0CE71DEDD7E6E149862616A34A5170B8BC45B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:09:a1:ab:b1:f7:1a:89:aa:d0:17:94:b5:06:
e5:26:96:0a:aa:58:82:fe:9d:ef:84:ab:87:9a:ee:
43:2c:4d:fb:c8:e3:bf:19:29:34:25:2e:91:6f:f9:
35:ad:3f:a5:72:57:35:5f:ab:8f:73:9e:ce:52:dc:
ee:5a:4b:f2:b6:6e:4a:05:4b:9e:c4:fd:85:fb:f5:
71:48:7b:69:96:b4:fc:0d:b3:74:d2:a9:51:1f:f6:
88:c5:af:ab:93:10:d4:9d:37:62:bd:a2:1d:3c:9e:
56:c7:4c:ab:29:e9:ee:c9:97:ec:d4:0e:f6:7d:04:
8c:fa:26:d2:bf:c0:a7:98:ac:e1:9c:28:dd:a8:c6:
9e:90:35:14:19:6f:6b:8a:62:ad:d6:3f:a8:a2:35:
e0:39:78:3f:1a:09:dd:85:81:25:56:11:ae:2a:a0:
99:e5:fe:b5:04:eb:46:85:01:2a:51:4e:2d:90:73:
86:96:8e:ea:7a:fb:ba:08:83:d1:5c:68:65:01:f8:
55:1a:23:1c:32:df:f6:ad:86:48:29:ed:f9:c0:01:
e8:62:e0:08:5d:95:d8:db:81:d5:9c:46:dd:c4:1e:
85:c4:7d:77:8e:b3:e9:ac:3f:19:a1:a9:f7:b1:e3:
4f:35:7d:c7:ba:5d:95:b8:47:93:6f:ab:2d:7f:28:
0b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0C:E7:1D:ED:D7:E6:E1:49:86:26:16:A3:4A:51:70:B8:BC:45:B6
X509v3 Authority Key Identifier:
keyid:E0:0C:0A:D0:1C:BF:6E:E9:B4:25:43:05:E7:B3:40:D6:4C:59:74:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/32372e3132332e302e302f32312d3234203d3e203435373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.123.0.0/21
Signature Algorithm: sha256WithRSAEncryption
75:19:81:38:f8:f2:65:e9:84:01:90:ab:3f:92:79:3c:6a:ef:
0e:35:30:27:6a:34:45:0b:c6:c5:1a:69:d5:f0:e9:94:d9:81:
f0:0b:bd:58:53:44:10:6a:bc:66:c8:2e:46:23:46:61:ee:f3:
26:c8:75:cc:33:e0:32:88:a2:d0:be:e7:a2:d1:6a:3e:47:5a:
99:58:1c:a8:74:9a:bd:8d:97:43:e6:20:d2:c6:a0:04:17:51:
b9:ce:7a:14:cc:bc:5e:aa:00:1b:4d:c6:07:6a:f0:ee:51:8c:
20:19:bf:48:98:28:06:04:85:e1:87:0f:22:f1:fc:b7:86:a7:
97:47:b3:43:2d:79:80:fd:58:52:71:4d:0f:62:dd:5d:d7:07:
bc:92:46:56:59:24:0b:30:75:a0:11:61:2d:e7:be:32:b2:4a:
84:7c:fd:96:07:8b:d8:5b:f9:b7:66:b3:7c:19:72:78:bc:ab:
c4:2b:6f:e1:e1:2e:44:06:76:47:b7:7d:20:30:58:c6:36:c8:
9c:61:12:1b:4b:8f:70:84:73:2e:9c:fa:5e:6c:e6:f8:d3:ba:
a9:42:b5:b3:16:21:14:36:21:af:c4:8c:c1:94:8a:4b:e9:3b:
89:d2:e1:f2:85:fe:15:29:38:c9:92:49:01:57:b1:ae:42:e6:
86:f9:b9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:33:05 2026 by rpki-client