
$ rpki-client -vvf rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3231302e37392e3230382e302f32302d3234203d3e203137393130.roa
File: 3231302e37392e3230382e302f32302d3234203d3e203137393130.roa (raw, json)
Hash identifier: 5vaZfShfqgbUD5UrW2OwsFkdXsmnoUQ2LgDSdBEsxKs=
Subject key identifier: 87:44:41:24:95:12:C9:C4:D9:43:5B:94:12:55:00:67:60:5C:E3:8E
Certificate issuer: /CN=EC59C36AB88A35CEA64B4ED019F2F05317672299
Certificate serial: 1EDCFF371494F7AB201A774BB4DE23510462F679
Authority key identifier: EC:59:C3:6A:B8:8A:35:CE:A6:4B:4E:D0:19:F2:F0:53:17:67:22:99
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3231302e37392e3230382e302f32302d3234203d3e203137393130.roa
Signing time: Sun 03 May 2026 02:48:17 +0000
ROA not before: Sun 03 May 2026 02:43:17 +0000
ROA not after: Sun 02 May 2027 02:48:17 +0000
asID: 17910
IP address blocks: 210.79.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.crl
rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:dc:ff:37:14:94:f7:ab:20:1a:77:4b:b4:de:23:51:04:62:f6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC59C36AB88A35CEA64B4ED019F2F05317672299
Validity
Not Before: May 3 02:43:17 2026 GMT
Not After : May 2 02:48:17 2027 GMT
Subject: CN=874441249512C9C4D9435B9412550067605CE38E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:05:d3:e3:be:87:4c:f9:e2:66:2e:a6:3e:31:
ad:57:db:f3:ac:12:43:e7:ce:e0:46:04:23:72:4e:
34:1c:7b:30:f6:1d:ec:49:75:91:71:4c:e9:86:53:
ff:36:36:4d:d9:61:6b:c0:83:b5:18:03:b6:03:b5:
93:b9:17:96:fc:41:bd:3d:1c:72:e9:2e:f5:0a:58:
5e:39:bd:11:02:d0:18:47:5d:6d:22:04:c9:c4:68:
3d:d4:42:49:48:7b:14:58:c0:bb:78:a9:45:7a:75:
3c:50:e7:91:11:07:56:5f:40:62:ed:3f:f4:d8:b4:
12:8c:71:3b:d4:0e:69:5e:bd:d7:9a:a8:09:d8:9c:
2a:65:93:86:bd:c3:34:5b:04:13:20:65:19:da:8b:
fe:af:61:bd:a3:d6:3e:15:17:9d:fc:07:6f:37:41:
f2:a6:a6:e3:d5:4c:64:4f:db:a6:37:55:b9:d6:42:
8b:10:c6:64:f9:a6:36:e1:5e:ff:8a:ed:3d:2f:bc:
f1:d6:17:12:46:b8:45:ca:95:14:82:2d:2b:55:1c:
52:ea:75:39:68:b7:fc:6f:04:2d:f8:4a:b1:65:b4:
41:48:18:95:d3:74:2c:c3:fe:37:57:d0:41:24:85:
0a:57:35:ec:f6:6b:f1:d1:a1:dd:b6:12:d1:ad:49:
7c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:44:41:24:95:12:C9:C4:D9:43:5B:94:12:55:00:67:60:5C:E3:8E
X509v3 Authority Key Identifier:
keyid:EC:59:C3:6A:B8:8A:35:CE:A6:4B:4E:D0:19:F2:F0:53:17:67:22:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3231302e37392e3230382e302f32302d3234203d3e203137393130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.79.208.0/20
Signature Algorithm: sha256WithRSAEncryption
48:aa:a3:7a:70:97:8e:31:70:8c:d8:34:1f:7d:4d:f2:36:2e:
d0:20:85:a6:5e:0f:50:5f:2f:2e:63:8c:99:66:f4:76:8e:06:
e4:b1:1b:fd:8f:d3:80:71:c1:06:0d:a5:a5:0a:20:9e:5a:62:
35:bb:20:0d:94:61:75:8d:95:d4:41:2c:e6:1c:a5:e8:01:88:
e0:71:e4:68:b4:92:7a:78:37:b7:a0:f2:cb:ab:67:c5:d6:16:
36:75:1c:a1:7c:22:7e:fe:4a:09:dc:59:7b:72:0f:ef:56:ce:
3c:f8:fe:f2:45:1b:60:b4:a9:ca:d8:a5:bf:e5:30:3d:bf:0d:
73:0c:64:e3:ac:0f:40:ee:0c:6f:2f:0b:ea:16:b3:90:53:ab:
75:ec:f2:04:53:fb:78:70:f2:e6:b2:0b:29:1e:26:14:2c:65:
59:13:85:aa:ed:54:c9:db:1b:79:37:05:9c:67:bd:2c:9e:1b:
17:59:7a:5f:78:66:3b:f5:78:94:3a:f3:90:76:22:5e:97:07:
db:7e:83:89:96:07:42:64:e0:9b:15:83:32:8b:da:39:5a:8b:
0d:cf:7d:58:0a:cc:0c:d7:73:eb:50:14:ac:86:2f:b7:a4:ab:
69:2e:60:a0:b7:0a:82:cf:ec:f5:9d:e4:80:ec:50:cf:fc:6e:
f9:92:5d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:48:51 2026 by rpki-client