
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131372e302f32342d3234203d3e203538333936.roa
File: 32372e35342e3131372e302f32342d3234203d3e203538333936.roa (raw, json)
Hash identifier: 0Oh1NBqzZ3I6VHN6/EtyqgY+6ATqaMWE9Ah1ExUBh+k=
Subject key identifier: 2B:6F:A5:B1:D9:AB:A1:B8:F2:8B:43:A1:A0:14:2A:2F:0E:03:0F:F2
Certificate issuer: /CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32
Certificate serial: 23463AB25C6F33DE9A53D0EEEF4A1F8AD3944CF2
Authority key identifier: B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131372e302f32342d3234203d3e203538333936.roa
Signing time: Sun 03 May 2026 03:02:34 +0000
ROA not before: Sun 03 May 2026 02:57:34 +0000
ROA not after: Sun 02 May 2027 03:02:34 +0000
asID: 58396
IP address blocks: 27.54.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl
rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:32:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:46:3a:b2:5c:6f:33:de:9a:53:d0:ee:ef:4a:1f:8a:d3:94:4c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32
Validity
Not Before: May 3 02:57:34 2026 GMT
Not After : May 2 03:02:34 2027 GMT
Subject: CN=2B6FA5B1D9ABA1B8F28B43A1A0142A2F0E030FF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9b:9b:bc:a8:f4:2c:f9:7d:0d:25:9b:42:46:
1c:07:a9:81:f2:fb:34:4b:bc:ec:c2:cf:b6:17:fa:
5f:fe:7a:58:81:b1:b6:e9:b5:b5:9a:3b:ef:2c:44:
83:5b:33:46:d2:d3:44:a6:15:fe:c6:c5:f8:bf:8b:
23:c1:a2:5b:2f:79:dd:b7:49:df:e9:84:b9:a6:42:
f0:2a:80:eb:40:8c:67:07:ef:96:b6:50:fd:c8:48:
50:db:55:3d:e1:e5:3a:3c:f9:ae:59:35:55:fb:ea:
7a:2d:fa:67:e4:46:3a:98:29:9f:e9:82:4d:a8:61:
36:0e:04:b3:86:70:56:5c:e4:75:db:a6:fc:cb:25:
cd:1d:ff:df:08:82:a4:4f:4a:59:7d:f5:f8:a7:e1:
51:34:91:bb:49:f0:b6:24:10:54:0e:7e:1b:84:15:
69:2d:40:88:21:01:2d:0a:e4:2d:60:d6:82:3e:c9:
04:0b:0e:0b:05:99:6a:e8:aa:f2:fb:e6:08:d3:6f:
27:38:c4:45:81:f6:7c:12:05:0c:2b:5f:ed:24:1c:
1d:b1:5c:76:c5:47:27:15:76:13:fd:31:d0:44:b3:
1f:07:8b:dc:58:82:2c:60:36:45:f7:6f:5e:36:f3:
1d:19:86:30:81:76:91:0c:71:f6:b9:ef:d4:a1:e6:
40:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6F:A5:B1:D9:AB:A1:B8:F2:8B:43:A1:A0:14:2A:2F:0E:03:0F:F2
X509v3 Authority Key Identifier:
keyid:B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131372e302f32342d3234203d3e203538333936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.54.117.0/24
Signature Algorithm: sha256WithRSAEncryption
33:d0:c4:c4:9d:7e:ce:32:98:9e:31:e3:59:1c:13:89:14:f9:
d3:71:92:74:d8:04:c9:3e:30:1c:4e:7b:47:d5:92:1e:97:f0:
18:c5:ea:62:12:59:4e:35:03:c9:f5:a8:72:ba:4c:a2:24:10:
28:8d:19:e6:f0:09:37:1f:4e:06:2a:52:41:b9:45:40:42:e6:
8b:64:5e:f2:bc:f9:65:7d:ed:ba:dc:67:41:d5:b6:a3:1d:e1:
90:4d:f1:52:d8:1c:77:8b:29:4c:8f:13:47:7f:f6:dc:a3:7c:
5e:43:4b:29:94:eb:e5:4f:0d:db:2a:9c:41:4c:97:8f:01:9d:
ec:24:f5:90:36:46:70:f9:75:ec:a7:ee:a9:43:a4:20:50:0b:
e1:0b:42:91:7e:3c:37:a5:cd:68:9f:99:f4:b7:fb:29:19:ae:
4f:d5:d5:c4:d7:83:8d:d6:6b:47:e3:d2:26:32:2b:53:bf:b9:
79:b0:b3:40:5c:4a:04:33:ac:85:74:09:09:64:da:1f:d8:f1:
5c:14:81:41:ae:71:e9:f1:f8:0a:70:a9:b3:24:71:10:e1:0a:
9f:83:ae:ec:03:44:43:5c:65:9e:1c:52:6e:64:2e:33:d3:5b:
45:21:fd:b9:76:48:8d:95:45:87:54:7a:cf:f4:c4:95:b3:5a:
13:24:23:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:58:22 2026 by rpki-client