
$ rpki-client -vvf rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38372e302f32342d3234203d3e203535363532.roa
File: 32372e3132312e38372e302f32342d3234203d3e203535363532.roa (raw, json)
Hash identifier: clpAyiJg+CNdKPltuUkUa0iDMohvDb510aZlE3T5fdM=
Subject key identifier: 5E:4D:E0:2F:C4:AD:F9:27:8D:23:EB:02:C8:32:1A:BE:8E:45:E6:BC
Certificate issuer: /CN=51F511E456B4CA99CA7BD1C91B651FDDC5C0268F
Certificate serial: 28A4F34B8D7B4A329B5E9E9BBA2981709B0627B8
Authority key identifier: 51:F5:11:E4:56:B4:CA:99:CA:7B:D1:C9:1B:65:1F:DD:C5:C0:26:8F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38372e302f32342d3234203d3e203535363532.roa
Signing time: Sun 03 May 2026 02:59:47 +0000
ROA not before: Sun 03 May 2026 02:54:47 +0000
ROA not after: Sun 02 May 2027 02:59:47 +0000
asID: 55652
IP address blocks: 27.121.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.crl
rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:a4:f3:4b:8d:7b:4a:32:9b:5e:9e:9b:ba:29:81:70:9b:06:27:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51F511E456B4CA99CA7BD1C91B651FDDC5C0268F
Validity
Not Before: May 3 02:54:47 2026 GMT
Not After : May 2 02:59:47 2027 GMT
Subject: CN=5E4DE02FC4ADF9278D23EB02C8321ABE8E45E6BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1d:04:fa:32:a1:fd:3d:4c:fa:eb:fa:62:37:
30:18:e2:55:8d:c2:da:ec:21:b0:c5:98:84:77:9b:
8a:a1:82:13:7f:66:a9:f9:55:31:0c:37:4e:73:33:
59:ab:23:6b:a1:cf:3b:a5:0f:7d:c7:4b:0d:60:b7:
68:21:62:37:f2:c3:0b:69:1d:4f:61:a4:54:08:80:
b4:84:2c:63:d8:59:3c:58:33:52:32:c1:6b:82:93:
2b:79:4d:bf:f1:26:42:e6:9a:92:24:b7:de:cb:9b:
93:1f:69:cc:6d:59:6e:9d:95:23:60:ae:4a:a6:6e:
ce:8c:cf:ac:3a:ec:92:89:6d:8a:8a:06:7d:1c:e4:
6b:70:19:4f:87:9d:d9:2a:b0:93:2e:1e:51:4e:c4:
ab:a9:e7:07:3a:03:0f:e8:cc:f7:f3:3b:9b:2b:14:
e8:36:56:e0:35:20:eb:e3:be:b9:76:be:4b:15:d2:
37:e2:f8:99:6b:d7:91:23:f2:8a:dd:41:3a:32:a4:
d7:70:37:53:bf:cd:3b:b9:d6:76:ce:55:02:8f:cf:
1c:de:52:08:9b:2d:d2:7a:62:86:26:cd:0b:68:d9:
51:28:dd:8a:85:43:4f:29:03:5d:39:53:5f:c7:a8:
d8:47:c0:d2:57:08:f3:ed:c1:59:53:57:ce:17:99:
72:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4D:E0:2F:C4:AD:F9:27:8D:23:EB:02:C8:32:1A:BE:8E:45:E6:BC
X509v3 Authority Key Identifier:
keyid:51:F5:11:E4:56:B4:CA:99:CA:7B:D1:C9:1B:65:1F:DD:C5:C0:26:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51F511E456B4CA99CA7BD1C91B651FDDC5C0268F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38372e302f32342d3234203d3e203535363532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.121.87.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:70:d4:ec:73:16:b0:22:af:dd:27:cf:1b:8f:ae:34:4e:7b:
b2:ef:1e:07:24:c7:8a:de:95:a9:cc:24:60:e1:50:6a:3b:85:
1e:40:26:94:f5:c7:ca:5b:0d:9f:89:71:96:63:b9:20:32:5f:
4c:f7:f3:ba:83:67:28:79:8f:a7:57:62:16:d5:6b:53:9c:36:
e4:8f:e3:13:2d:3e:1f:89:b5:84:2c:46:46:76:44:28:de:73:
b1:ed:fd:3c:80:0f:2d:e3:e5:a5:a7:2f:71:47:b6:42:3c:c3:
87:62:8d:b9:2e:7b:e8:12:6f:3f:f2:26:4a:64:19:73:04:65:
10:aa:87:89:8a:ed:09:be:60:4b:b5:2b:2d:49:6c:85:48:68:
e5:8b:f7:7d:27:22:6f:8a:36:65:94:94:ac:96:89:22:e5:e6:
8d:1f:e8:12:d9:d3:0d:06:d6:3e:29:cb:97:a0:aa:42:68:9f:
32:7e:0e:26:18:f2:8b:de:09:a4:5e:a2:3f:1e:44:af:12:d4:
bd:8d:78:66:c5:04:75:3e:02:77:90:bc:96:35:8a:55:71:07:
0d:c5:54:ea:57:23:d1:99:92:82:ce:a8:1b:4a:f8:75:cf:eb:
05:0b:d4:d4:1e:23:40:63:6c:3a:7b:1d:0c:0d:89:cf:92:3f:
02:f4:d5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:12:10 2026 by rpki-client