
$ rpki-client -vvf rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/34392e3132382e3137382e302f32342d3234203d3e20313439373436.roa
File: 34392e3132382e3137382e302f32342d3234203d3e20313439373436.roa (raw, json)
Hash identifier: 2C2Pit223fgKnRI6ERFjjNxpcm112eB/BxZ0rix2ktw=
Subject key identifier: 53:D5:83:C4:BC:32:1E:9C:24:0A:51:39:E1:96:3A:8D:61:CC:13:09
Certificate issuer: /CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
Certificate serial: 777EBCBAE9B9628F45298879DC571BFABF3305F6
Authority key identifier: 8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/34392e3132382e3137382e302f32342d3234203d3e20313439373436.roa
Signing time: Sun 03 May 2026 02:59:34 +0000
ROA not before: Sun 03 May 2026 02:54:34 +0000
ROA not after: Sun 02 May 2027 02:59:34 +0000
asID: 149746
IP address blocks: 49.128.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl
rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:7e:bc:ba:e9:b9:62:8f:45:29:88:79:dc:57:1b:fa:bf:33:05:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
Validity
Not Before: May 3 02:54:34 2026 GMT
Not After : May 2 02:59:34 2027 GMT
Subject: CN=53D583C4BC321E9C240A5139E1963A8D61CC1309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8b:90:6c:a5:38:22:cd:b1:27:7a:eb:cb:04:
d7:17:1e:14:5b:93:8b:2d:0c:89:50:f0:36:92:22:
aa:2d:4e:ca:7b:6f:72:a3:49:70:af:ca:da:e4:37:
ad:41:0f:cf:4c:2a:ed:ff:26:da:c0:8f:68:c2:08:
21:59:c8:fa:cf:42:48:5b:5e:0a:6f:39:47:e5:3c:
86:e5:8d:8c:9f:d2:2d:bb:98:fc:2d:5d:ce:7e:12:
39:bc:87:8f:2f:49:14:90:17:24:03:2c:2c:4b:8b:
c7:7a:d3:4b:cd:0b:ee:a0:e1:34:9c:61:67:97:68:
bb:2d:16:9f:9b:54:f6:8a:3e:a3:f9:3d:03:a4:c1:
7f:86:71:f2:fb:30:a8:24:4c:e0:e8:e5:15:b5:c6:
2d:30:e2:4e:fe:06:67:03:00:48:85:2f:7c:e1:d3:
4b:1f:59:de:d4:d6:77:0d:c0:33:d3:5d:af:fd:c9:
50:36:b1:ad:9b:b3:1e:e3:89:f5:6c:0f:bd:f4:e2:
16:cc:b6:68:e9:9d:af:ac:c2:24:c7:5e:eb:ba:d6:
ed:a9:f4:8d:86:c0:e7:35:ce:08:a4:82:51:78:98:
4c:f8:e8:d5:d5:25:55:5a:78:bc:58:af:6a:4c:1e:
0e:05:50:53:13:6d:94:c2:a3:97:4e:4c:18:0a:d0:
41:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D5:83:C4:BC:32:1E:9C:24:0A:51:39:E1:96:3A:8D:61:CC:13:09
X509v3 Authority Key Identifier:
keyid:8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/34392e3132382e3137382e302f32342d3234203d3e20313439373436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
49.128.178.0/24
Signature Algorithm: sha256WithRSAEncryption
08:72:8f:b9:58:66:54:9c:ac:54:6b:6a:47:1f:0e:e3:30:ff:
8f:2c:5a:83:df:7a:2a:6b:a0:a5:1a:0e:28:29:bd:a8:d9:85:
c2:27:3f:cd:13:c2:18:e9:10:b1:42:89:f1:86:f9:ef:07:07:
82:a5:15:ef:07:c0:34:be:9e:b9:30:28:a2:26:28:45:70:4b:
f9:45:71:5c:85:17:7b:e2:cf:82:25:02:21:52:d0:9e:7b:dc:
25:9e:7f:3c:f2:6e:3b:03:43:e1:be:20:11:56:98:63:0f:14:
4f:0b:1f:31:65:97:01:be:88:d9:7e:c6:6c:46:d0:1a:da:81:
62:2f:1f:88:0a:78:66:f0:73:a4:64:9a:1e:f5:1a:df:82:ee:
ec:19:ce:a8:11:96:a2:98:25:78:3b:ce:f1:d7:de:10:95:60:
36:17:73:2a:7c:25:85:8c:0f:44:51:7c:d4:22:67:7d:21:a9:
c8:94:2c:0e:d7:27:11:93:64:c5:a7:ff:75:bf:a1:d7:d0:05:
ff:94:04:07:e5:5a:e1:81:86:95:be:70:ae:4d:b3:7c:47:ce:
be:db:ae:9e:45:a2:60:29:57:4a:9c:3c:ca:cd:d1:1f:17:0f:
75:16:9e:12:2a:ce:ff:6f:33:ff:63:9b:56:e5:c6:b0:ba:2a:
95:72:6d:51
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUd368uum5Yo9FKYh53Fcb+r8zBfYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEM4QzU2RUQxRUEwQzZGOTM5MUNEOTAwOEU3OENERjM4
MUMyNzIwQjAeFw0yNjA1MDMwMjU0MzRaFw0yNzA1MDIwMjU5MzRaMDMxMTAvBgNV
BAMTKDUzRDU4M0M0QkMzMjFFOUMyNDBBNTEzOUUxOTYzQThENjFDQzEzMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRi5BspTgizbEneuvLBNcXHhRb
k4stDIlQ8DaSIqotTsp7b3KjSXCvytrkN61BD89MKu3/JtrAj2jCCCFZyPrPQkhb
XgpvOUflPIbljYyf0i27mPwtXc5+Ejm8h48vSRSQFyQDLCxLi8d600vNC+6g4TSc
YWeXaLstFp+bVPaKPqP5PQOkwX+GcfL7MKgkTODo5RW1xi0w4k7+BmcDAEiFL3zh
00sfWd7U1ncNwDPTXa/9yVA2sa2bsx7jifVsD7304hbMtmjpna+swiTHXuu61u2p
9I2GwOc1zgikglF4mEz46NXVJVVaeLxYr2pMHg4FUFMTbZTCo5dOTBgK0EGJAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUU9WDxLwyHpwkClE54ZY6jWHMEwkwHwYDVR0j
BBgwFoAUjIxW7R6gxvk5HNkAjnjN84HCcgswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWVhN2ExMTUtYjhiOC00OTBiLTgzMjAtYzllNTlhMTAwM2RkLzAvOEM4QzU2RUQx
RUEwQzZGOTM5MUNEOTAwOEU3OENERjM4MUMyNzIwQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84QzhDNTZFRDFFQTBDNkY5MzkxQ0Q5MDA4RTc4Q0RGMzgxQzI3
MjBCLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FlYTdhMTE1LWI4YjgtNDkwYi04
MzIwLWM5ZTU5YTEwMDNkZC8wLzM0MzkyZTMxMzIzODJlMzEzNzM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzczNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMYCyMA0GCSqG
SIb3DQEBCwUAA4IBAQAIco+5WGZUnKxUa2pHHw7jMP+PLFqD33oqa6ClGg4oKb2o
2YXCJz/NE8IY6RCxQonxhvnvBweCpRXvB8A0vp65MCiiJihFcEv5RXFchRd74s+C
JQIhUtCee9wlnn888m47A0PhviARVphjDxRPCx8xZZcBvojZfsZsRtAa2oFiLx+I
Cnhm8HOkZJoe9Rrfgu7sGc6oEZaimCV4O87x194QlWA2F3MqfCWFjA9EUXzUImd9
IanIlCwO1ycRk2TFp/91v6HX0AX/lAQH5VrhgYaVvnCuTbN8R86+266eRaJgKVdK
nDzKzdEfFw91Fp4SKs7/bzP/Y5tW5cawuiqVcm1R
-----END CERTIFICATE-----
Generated at Wed May 13 10:16:37 2026 by rpki-client