
$ rpki-client -vvf rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/32372e3131312e33322e302f31392d3234203d3e203234353332.roa
File: 32372e3131312e33322e302f31392d3234203d3e203234353332.roa (raw, json)
Hash identifier: Fx9bLePWZd911ErojerGEpVTnf/DxfdXCAQiFRWGMk8=
Subject key identifier: B7:11:6F:95:8D:70:D5:CE:2E:ED:B4:38:7D:3D:EB:7F:DF:EE:B4:5A
Certificate issuer: /CN=EFA0A80DF71CA377A289711EA4310F3117358BDA
Certificate serial: 54D712E0B11D027E0FDE68B3F37834007615A6C1
Authority key identifier: EF:A0:A8:0D:F7:1C:A3:77:A2:89:71:1E:A4:31:0F:31:17:35:8B:DA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/32372e3131312e33322e302f31392d3234203d3e203234353332.roa
Signing time: Sun 03 May 2026 02:52:41 +0000
ROA not before: Sun 03 May 2026 02:47:41 +0000
ROA not after: Sun 02 May 2027 02:52:41 +0000
asID: 24532
IP address blocks: 27.111.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.crl
rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:51:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:d7:12:e0:b1:1d:02:7e:0f:de:68:b3:f3:78:34:00:76:15:a6:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFA0A80DF71CA377A289711EA4310F3117358BDA
Validity
Not Before: May 3 02:47:41 2026 GMT
Not After : May 2 02:52:41 2027 GMT
Subject: CN=B7116F958D70D5CE2EEDB4387D3DEB7FDFEEB45A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2f:1a:2c:c4:c8:cb:2b:c0:89:89:56:28:c1:
65:fd:f7:55:50:f9:ac:c1:24:c9:48:95:45:a7:f0:
2b:71:f2:21:e5:24:54:d5:76:ad:5a:98:e6:ca:38:
02:5d:ba:6c:84:13:84:fa:4e:ba:71:df:fb:a4:ea:
61:8e:e2:ae:db:5e:e6:ff:45:73:36:e5:d4:f3:29:
be:e4:20:af:ae:5a:08:7f:99:06:ed:bd:dc:0d:fe:
2b:24:31:de:f4:2a:51:41:57:25:28:98:9a:2f:2e:
38:98:34:13:35:06:7a:4a:57:4a:ff:e9:8d:96:e2:
d7:b9:8f:f5:d1:30:2d:d3:14:a6:67:a3:6e:b3:80:
ed:1a:ac:06:07:f5:4d:75:c5:f4:67:54:a5:f0:7f:
19:ee:aa:a2:b5:da:9b:a2:ca:4b:39:a6:e9:9f:d6:
00:c5:d4:b3:0c:80:da:fb:0f:39:03:fc:a3:63:12:
fb:2d:cf:e0:a3:47:91:b8:cd:36:fe:f3:66:32:83:
93:a4:d6:1f:58:91:91:88:b9:3c:91:a2:cd:5a:dd:
c0:d9:25:ed:f1:29:28:f1:86:b6:6f:3b:eb:51:09:
32:84:9a:b0:29:81:35:29:42:c8:2f:05:95:63:e2:
6d:3b:3d:44:f0:82:cd:d0:fe:3b:b5:21:3f:dc:74:
dc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:11:6F:95:8D:70:D5:CE:2E:ED:B4:38:7D:3D:EB:7F:DF:EE:B4:5A
X509v3 Authority Key Identifier:
keyid:EF:A0:A8:0D:F7:1C:A3:77:A2:89:71:1E:A4:31:0F:31:17:35:8B:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/EFA0A80DF71CA377A289711EA4310F3117358BDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFA0A80DF71CA377A289711EA4310F3117358BDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/32372e3131312e33322e302f31392d3234203d3e203234353332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.111.32.0/19
Signature Algorithm: sha256WithRSAEncryption
af:06:47:55:7e:ff:dd:af:f7:eb:b2:af:76:64:0e:c3:93:6a:
e8:a3:0c:aa:5b:50:6f:8a:3e:75:8d:0c:99:6c:81:e8:39:20:
98:9a:b8:6d:d3:2a:68:47:ea:cc:1f:31:3c:fa:39:1a:92:38:
a7:3e:32:10:16:e2:4d:de:8d:28:88:77:6a:78:41:b9:d8:1d:
2c:a9:aa:73:8b:f4:04:30:30:9b:0a:d4:58:c5:72:a2:e4:b4:
31:80:4c:8d:39:13:e2:68:8e:fe:bf:5e:d1:b9:43:65:6e:e9:
2d:48:4b:73:76:34:78:b7:b7:ee:d0:e1:57:eb:3d:5f:db:bf:
8b:95:8f:14:20:06:99:8d:32:5f:6d:f6:bf:09:c1:9e:7f:3d:
e3:20:71:81:95:3a:d0:cb:c5:ab:31:f6:fe:a3:f2:41:61:71:
c4:36:ad:79:51:50:70:09:ca:ef:78:b9:8f:fb:8b:c7:a6:01:
b9:38:c0:83:df:f3:96:ee:c1:d1:65:9f:5a:05:82:d2:1e:51:
03:33:67:25:66:51:48:5e:e1:f5:72:b2:cd:0b:cc:65:fd:6f:
8e:c7:15:53:3e:61:0b:35:ca:4a:64:03:fa:b4:1d:77:31:82:
88:66:d3:de:56:f8:76:dc:39:60:80:cd:e8:26:03:1c:b5:fe:
ab:0a:93:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:38:07 2026 by rpki-client