
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131362e302f32342d3234203d3e203538333936.roa
File: 32372e35342e3131362e302f32342d3234203d3e203538333936.roa (raw, json)
Hash identifier: ZPKZ4RD7GSqwYP85NHWWHCZsGyMBOdDBCWsoKc9qF38=
Subject key identifier: 24:62:91:F8:83:23:10:8C:13:2D:18:21:37:4C:9C:33:65:5E:19:93
Certificate issuer: /CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32
Certificate serial: 0264709CF75B7556771E966D99DB66612931CF72
Authority key identifier: B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131362e302f32342d3234203d3e203538333936.roa
Signing time: Sun 03 May 2026 03:02:33 +0000
ROA not before: Sun 03 May 2026 02:57:33 +0000
ROA not after: Sun 02 May 2027 03:02:33 +0000
asID: 58396
IP address blocks: 27.54.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl
rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:32:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:64:70:9c:f7:5b:75:56:77:1e:96:6d:99:db:66:61:29:31:cf:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32
Validity
Not Before: May 3 02:57:33 2026 GMT
Not After : May 2 03:02:33 2027 GMT
Subject: CN=246291F88323108C132D1821374C9C33655E1993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a1:cb:a0:48:fa:e0:0c:bd:34:64:c1:da:72:
aa:01:75:50:9b:ee:48:01:6d:99:0d:82:80:12:01:
28:0c:f5:4c:49:3f:c0:47:44:81:89:11:93:a2:54:
22:14:15:5c:93:85:da:e3:f4:76:53:10:03:1a:1b:
70:ee:25:7f:2f:0f:56:de:a9:8b:24:48:6b:c2:11:
6a:2a:62:fe:d6:94:85:40:dd:02:54:e5:ad:be:b6:
fa:97:07:d5:65:8f:dd:8f:7b:12:4e:72:52:00:00:
02:63:dd:fb:18:6f:d7:4c:65:3b:6a:88:20:5c:f7:
ca:9e:e0:8f:a8:ec:44:4b:2f:f1:87:03:a9:41:8d:
bb:28:22:1a:62:1e:71:95:2a:e0:1d:03:05:e8:26:
01:05:dc:25:f3:3f:fd:bf:32:86:a1:e6:16:ba:1f:
63:bf:d0:b7:58:7c:ff:91:f1:78:bf:d4:f5:0e:4e:
5e:7d:2c:fc:bb:23:80:73:ee:28:fe:4e:ef:0c:70:
15:74:3d:18:d2:d4:ea:7c:24:f9:6a:fc:e4:b8:df:
77:21:f8:b3:9a:29:d4:42:20:93:f5:bb:0f:61:4d:
9e:4e:ef:41:83:13:d1:ec:a5:e2:f3:0a:ba:e1:34:
3b:57:20:43:37:92:0e:f1:2f:65:2b:48:74:32:b1:
d7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:62:91:F8:83:23:10:8C:13:2D:18:21:37:4C:9C:33:65:5E:19:93
X509v3 Authority Key Identifier:
keyid:B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131362e302f32342d3234203d3e203538333936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.54.116.0/24
Signature Algorithm: sha256WithRSAEncryption
93:b1:d0:b7:a0:0c:44:8e:ad:f2:66:29:02:bf:9d:d7:17:59:
fa:02:4f:e8:83:c4:fd:7a:88:ef:aa:2e:25:b0:9c:23:8c:31:
40:0b:b3:29:68:a2:fd:96:69:15:7c:eb:3a:27:2c:82:a9:51:
d0:bd:0b:e2:04:59:a3:53:f3:2f:7e:b2:11:50:78:16:20:a3:
d1:e3:05:01:05:7a:05:e4:65:ea:e2:de:ca:04:82:28:d3:be:
f7:99:11:2a:90:5b:ac:c4:c5:6a:93:d6:bf:61:cf:19:29:f6:
95:cf:bd:1d:a9:29:54:b4:f8:d1:c0:35:48:b9:1c:b6:cd:0c:
3b:e4:49:09:89:8f:46:bc:9d:1b:e9:72:7a:30:78:e6:9d:e4:
fe:86:a2:97:eb:68:d1:35:4d:49:f9:41:7c:8c:e0:8c:57:5f:
9a:1c:41:7b:99:c6:2d:2f:f5:8e:9e:42:57:21:4a:a9:86:6b:
01:de:d0:3f:bb:e0:24:6d:23:64:6e:ae:7a:e8:bc:89:b9:50:
f9:44:c6:18:01:b7:7d:17:b3:25:e4:2f:88:a7:cf:5f:69:b8:
75:53:dd:b7:19:af:1c:0a:00:a6:31:79:6f:eb:90:ba:f9:65:
12:72:53:18:73:fb:92:bf:43:76:37:c3:21:d7:ec:a6:b9:b5:
07:b7:9f:24
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUAmRwnPdbdVZ3HpZtmdtmYSkxz3IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg3QUM1QzEwNEQ1MUExNkQxRkVENkFBQkE0MEQ1RjMz
NkM3NkUzMjAeFw0yNjA1MDMwMjU3MzNaFw0yNzA1MDIwMzAyMzNaMDMxMTAvBgNV
BAMTKDI0NjI5MUY4ODMyMzEwOEMxMzJEMTgyMTM3NEM5QzMzNjU1RTE5OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVocugSPrgDL00ZMHacqoBdVCb
7kgBbZkNgoASASgM9UxJP8BHRIGJEZOiVCIUFVyThdrj9HZTEAMaG3DuJX8vD1be
qYskSGvCEWoqYv7WlIVA3QJU5a2+tvqXB9Vlj92PexJOclIAAAJj3fsYb9dMZTtq
iCBc98qe4I+o7ERLL/GHA6lBjbsoIhpiHnGVKuAdAwXoJgEF3CXzP/2/Moah5ha6
H2O/0LdYfP+R8Xi/1PUOTl59LPy7I4Bz7ij+Tu8McBV0PRjS1Op8JPlq/OS433ch
+LOaKdRCIJP1uw9hTZ5O70GDE9HspeLzCrrhNDtXIEM3kg7xL2UrSHQysdd1AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUJGKR+IMjEIwTLRghN0ycM2VeGZMwHwYDVR0j
BBgwFoAUuHrFwQTVGhbR/taqukDV8zbHbjIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YmQ1YzQ3MTUtMjgyZS00NTdmLWI4OWUtMDQxYmY5MTEwYWY4LzAvQjg3QUM1QzEw
NEQ1MUExNkQxRkVENkFBQkE0MEQ1RjMzNkM3NkUzMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CODdBQzVDMTA0RDUxQTE2RDFGRUQ2QUFCQTQwRDVGMzM2Qzc2
RTMyLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2JkNWM0NzE1LTI4MmUtNDU3Zi1i
ODllLTA0MWJmOTExMGFmOC8wLzMyMzcyZTM1MzQyZTMxMzEzNjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM1MzgzMzM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAbNnQwDQYJKoZIhvcN
AQELBQADggEBAJOx0LegDESOrfJmKQK/ndcXWfoCT+iDxP16iO+qLiWwnCOMMUAL
syloov2WaRV86zonLIKpUdC9C+IEWaNT8y9+shFQeBYgo9HjBQEFegXkZeri3soE
gijTvveZESqQW6zExWqT1r9hzxkp9pXPvR2pKVS0+NHANUi5HLbNDDvkSQmJj0a8
nRvpcnoweOad5P6GopfraNE1TUn5QXyM4IxXX5ocQXuZxi0v9Y6eQlchSqmGawHe
0D+74CRtI2RurnrovIm5UPlExhgBt30XsyXkL4inz19puHVT3bcZrxwKAKYxeW/r
kLr5ZRJyUxhz+5K/Q3Y3wyHX7Ka5tQe3nyQ=
-----END CERTIFICATE-----
Generated at Wed May 13 05:58:22 2026 by rpki-client