
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/34352e3132362e35372e302f32342d3234203d3e20313332363437.roa
File: 34352e3132362e35372e302f32342d3234203d3e20313332363437.roa (raw, json)
Hash identifier: fBsZSMatjucO+T7+pnQaQszpCsK34WTaNL1x8+auaVA=
Subject key identifier: ED:3F:04:F6:01:C1:B7:A3:78:66:11:91:6E:37:CF:A3:81:28:19:4A
Certificate issuer: /CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6
Certificate serial: 15BE495B7C023CA27E7ACA770C6407750BAD43D3
Authority key identifier: BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/34352e3132362e35372e302f32342d3234203d3e20313332363437.roa
Signing time: Sun 03 May 2026 02:57:02 +0000
ROA not before: Sun 03 May 2026 02:52:02 +0000
ROA not after: Sun 02 May 2027 02:57:02 +0000
asID: 132647
IP address blocks: 45.126.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl
rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:be:49:5b:7c:02:3c:a2:7e:7a:ca:77:0c:64:07:75:0b:ad:43:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6
Validity
Not Before: May 3 02:52:02 2026 GMT
Not After : May 2 02:57:02 2027 GMT
Subject: CN=ED3F04F601C1B7A3786611916E37CFA38128194A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:82:b5:77:c7:79:96:ec:c6:e4:09:2d:38:2b:
39:4f:7e:29:d9:4c:bc:66:ca:2d:70:46:03:9b:1f:
87:06:1a:6e:7e:15:67:eb:9a:b8:d0:22:3a:b0:ad:
e5:9d:0a:b8:c7:de:7e:1a:8b:80:bf:69:a3:a9:3b:
88:d8:ff:f5:45:66:cc:c0:9f:37:1a:95:0b:6c:2e:
5d:01:65:5e:58:1a:42:7b:f5:b9:7e:97:ba:37:0b:
95:db:bc:eb:0c:b0:d2:c5:24:f6:00:8f:ab:b2:7e:
f7:88:ec:86:b3:aa:95:07:8e:4a:63:f6:ec:9f:32:
57:71:e0:28:16:b7:54:e3:80:70:ba:c0:76:24:92:
c2:c9:6f:c5:b4:e4:53:40:97:01:eb:31:61:ec:08:
a6:4c:0e:eb:42:04:87:ed:e1:97:54:86:24:cb:ce:
6f:16:c3:f0:fe:d9:bf:fa:6e:f7:d8:84:56:0a:ce:
84:5b:97:60:37:54:0b:a8:ac:65:9f:fb:2a:48:7b:
1a:62:59:f9:86:89:6c:a4:56:ad:49:ff:ad:2b:20:
6a:4c:06:87:71:8e:fa:7d:82:92:e7:6b:89:e7:c7:
4a:c3:a1:47:1a:e7:fc:74:fa:d5:38:a3:4a:53:41:
fb:9f:33:9d:61:00:9c:6e:35:e8:11:c7:c4:2f:23:
e5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3F:04:F6:01:C1:B7:A3:78:66:11:91:6E:37:CF:A3:81:28:19:4A
X509v3 Authority Key Identifier:
keyid:BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/34352e3132362e35372e302f32342d3234203d3e20313332363437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.126.57.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:54:77:db:97:aa:1d:c1:6c:53:33:d4:e0:87:5a:7b:d1:71:
2d:c0:a0:2f:93:4f:57:46:b8:54:cc:ac:b3:d1:1f:85:5e:3e:
cb:97:b6:56:49:63:8c:fd:62:65:22:ee:43:7a:6b:23:ae:d2:
16:98:06:9a:21:8b:01:96:17:17:9c:99:86:a6:0c:65:9a:9f:
cf:6f:76:25:25:b5:1c:85:64:aa:f8:28:81:9e:9b:df:11:b3:
c4:1f:e4:6b:e1:a4:73:8b:db:01:e0:f9:ac:b5:db:8d:d5:e6:
b1:e0:05:13:b8:22:a1:06:02:70:96:4c:a3:ef:0f:20:44:24:
11:61:ec:c5:4e:f5:40:e4:77:83:dd:97:c9:aa:bc:96:30:50:
e1:0b:3c:a6:1c:8c:d7:da:30:a9:e6:53:71:aa:f4:12:6b:83:
5f:1a:88:17:73:79:33:61:1b:71:e5:da:bf:f7:20:28:be:55:
b5:2f:e8:55:d5:b7:28:e4:ac:b1:f7:a2:14:d9:b6:63:10:99:
5f:76:78:d8:9e:bd:9b:2d:6f:7e:3c:ad:5d:0f:25:f0:af:38:
43:a5:4c:29:24:b8:cf:2a:cc:b7:65:4d:97:7b:a6:27:53:72:
2e:66:f6:4a:61:a6:4a:95:9d:3f:85:ff:fd:94:15:3a:dd:f2:
3d:ef:d3:b3
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUFb5JW3wCPKJ+esp3DGQHdQutQ9MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkI1NzY4MzVFRDhBNDZFMzBGQjhEREY1NjZBQkM0Nzc2
NTUzN0VCNjAeFw0yNjA1MDMwMjUyMDJaFw0yNzA1MDIwMjU3MDJaMDMxMTAvBgNV
BAMTKEVEM0YwNEY2MDFDMUI3QTM3ODY2MTE5MTZFMzdDRkEzODEyODE5NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdgrV3x3mW7MbkCS04KzlPfinZ
TLxmyi1wRgObH4cGGm5+FWfrmrjQIjqwreWdCrjH3n4ai4C/aaOpO4jY//VFZszA
nzcalQtsLl0BZV5YGkJ79bl+l7o3C5XbvOsMsNLFJPYAj6uyfveI7IazqpUHjkpj
9uyfMldx4CgWt1TjgHC6wHYkksLJb8W05FNAlwHrMWHsCKZMDutCBIft4ZdUhiTL
zm8Ww/D+2b/6bvfYhFYKzoRbl2A3VAuorGWf+ypIexpiWfmGiWykVq1J/60rIGpM
Bodxjvp9gpLna4nnx0rDoUca5/x0+tU4o0pTQfufM51hAJxuNegRx8QvI+WvAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU7T8E9gHBt6N4ZhGRbjfPo4EoGUowHwYDVR0j
BBgwFoAUu1doNe2KRuMPuN31ZqvEd2VTfrYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTY2MTdkOGMtZDE1NC00NjFlLWJjY2EtYjY2ZDI2N2NmZmM3LzAvQkI1NzY4MzVF
RDhBNDZFMzBGQjhEREY1NjZBQkM0Nzc2NTUzN0VCNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CQjU3NjgzNUVEOEE0NkUzMEZCOERERjU2NkFCQzQ3NzY1NTM3
RUI2LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E2NjE3ZDhjLWQxNTQtNDYxZS1i
Y2NhLWI2NmQyNjdjZmZjNy8wLzM0MzUyZTMxMzIzNjJlMzUzNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzMjM2MzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1+OTANBgkqhkiG
9w0BAQsFAAOCAQEAGlR325eqHcFsUzPU4Idae9FxLcCgL5NPV0a4VMyss9EfhV4+
y5e2VkljjP1iZSLuQ3prI67SFpgGmiGLAZYXF5yZhqYMZZqfz292JSW1HIVkqvgo
gZ6b3xGzxB/ka+Gkc4vbAeD5rLXbjdXmseAFE7gioQYCcJZMo+8PIEQkEWHsxU71
QOR3g92Xyaq8ljBQ4Qs8phyM19owqeZTcar0EmuDXxqIF3N5M2EbceXav/cgKL5V
tS/oVdW3KOSssfeiFNm2YxCZX3Z42J69my1vfjytXQ8l8K84Q6VMKSS4zyrMt2VN
l3umJ1NyLmb2SmGmSpWdP4X//ZQVOt3yPe/Tsw==
-----END CERTIFICATE-----
Generated at Wed May 13 02:36:51 2026 by rpki-client