
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3132322e3134342e342e302f32322d3234203d3e203338333230.roa
File: 3132322e3134342e342e302f32322d3234203d3e203338333230.roa (raw, json)
Hash identifier: kPTHx+hWG+LDuE6CeeYUrKB6mmUM7VHlb/As0JV8R5Y=
Subject key identifier: C1:03:F6:D2:9B:BF:5E:5E:2D:EC:DC:4E:44:3A:80:D0:38:91:64:48
Certificate issuer: /CN=1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD
Certificate serial: 0149CC4BD27BC5C169E741E8CB1623399605A966
Authority key identifier: 1D:AC:DC:41:C2:8C:E5:C3:8F:42:51:C6:14:DE:10:0A:3F:1E:FC:AD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3132322e3134342e342e302f32322d3234203d3e203338333230.roa
Signing time: Sun 03 May 2026 02:58:01 +0000
ROA not before: Sun 03 May 2026 02:53:01 +0000
ROA not after: Sun 02 May 2027 02:58:01 +0000
asID: 38320
IP address blocks: 122.144.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.crl
rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:49:cc:4b:d2:7b:c5:c1:69:e7:41:e8:cb:16:23:39:96:05:a9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD
Validity
Not Before: May 3 02:53:01 2026 GMT
Not After : May 2 02:58:01 2027 GMT
Subject: CN=C103F6D29BBF5E5E2DECDC4E443A80D038916448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:58:96:6c:76:ed:b9:41:00:8d:cd:94:71:79:
08:ee:fe:60:95:13:7d:41:34:d6:24:99:a6:3a:ce:
fc:93:34:83:9b:a1:6a:62:f5:ab:c7:3a:e0:8d:ce:
05:5d:4a:e8:7a:04:d5:74:e6:c4:97:90:30:89:ec:
66:f1:46:d4:04:c5:eb:32:62:12:24:d4:57:23:f3:
ea:1b:26:a7:02:27:19:57:88:c8:cf:6b:5b:a4:35:
3a:3d:6b:b3:a2:24:f5:09:77:1b:53:3d:54:36:5b:
2a:c1:bc:63:dd:09:77:10:3e:c4:e4:9b:03:90:b6:
44:86:b2:1c:e7:19:2f:4b:8e:53:f4:d9:98:23:42:
57:11:fb:f6:13:6e:67:fe:fe:a5:e3:c8:2d:c1:5c:
65:f8:17:bc:9c:fc:47:6d:b1:55:3f:72:15:57:94:
c0:2b:2f:bf:c1:d7:70:f6:af:5f:00:cf:bf:34:0c:
90:84:f2:c6:f4:bf:75:cf:48:fb:22:5a:b9:3f:f6:
51:58:58:55:bb:59:99:25:3d:b1:f1:33:63:59:8d:
2e:78:c3:06:a1:ef:dc:2c:e2:80:00:c5:b5:d8:7e:
a3:36:b5:75:ef:1f:75:a0:0f:93:09:92:37:d4:a3:
fb:26:30:85:ad:8d:9f:86:9d:13:15:9c:5f:c7:ec:
28:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:03:F6:D2:9B:BF:5E:5E:2D:EC:DC:4E:44:3A:80:D0:38:91:64:48
X509v3 Authority Key Identifier:
keyid:1D:AC:DC:41:C2:8C:E5:C3:8F:42:51:C6:14:DE:10:0A:3F:1E:FC:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3132322e3134342e342e302f32322d3234203d3e203338333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.144.4.0/22
Signature Algorithm: sha256WithRSAEncryption
95:e1:07:25:de:cf:03:c3:bd:5a:f9:4c:e8:b9:91:68:10:0c:
c1:19:ef:d1:af:44:91:0f:30:09:b0:36:13:fd:2b:2c:da:f3:
11:a5:b8:b6:e7:84:2d:23:b5:2b:ee:6e:47:16:e0:9d:5e:9c:
78:55:33:af:d7:a5:92:91:fc:0d:a0:f2:8e:0f:c3:a4:56:42:
64:8a:ff:eb:a6:3d:05:e6:78:4a:75:9f:db:c9:61:97:cf:3e:
26:d7:20:2b:ef:6e:4e:17:79:c4:c7:d9:91:21:38:ee:3c:0e:
e6:00:01:18:0b:16:64:89:30:02:c0:9c:10:37:c3:15:fd:1e:
d3:ac:eb:c2:92:3d:2f:8e:30:85:d9:fd:c2:a7:04:c5:f9:0f:
d5:cf:6b:2d:92:c1:b9:e2:cc:52:12:82:63:35:b7:f2:a8:78:
b3:96:85:4c:d2:e8:c2:d1:cc:a2:81:e0:27:6b:f7:94:a6:6e:
85:3b:16:c3:9d:06:a9:99:d7:30:5c:a5:ed:59:97:70:d8:af:
e5:75:5b:86:66:68:5e:dd:dc:05:63:00:62:e7:98:20:fd:9b:
b6:4c:4e:0e:0a:d5:3f:62:f7:09:4a:a0:43:41:53:dd:c4:42:
9c:26:c0:47:35:ad:e4:a0:41:e4:1c:81:0d:75:4c:9d:b8:5d:
cd:f7:4a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:39:00 2026 by rpki-client