
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32372e302f32342d3234203d3e203138303539.roa
File: 3132322e3132382e32372e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier: 6xCC/6/yJl/R2f6bWUZ3ktcypuIff/0eWvP/NNAdgUA=
Subject key identifier: 9C:8C:19:19:59:FD:A4:32:F1:82:BC:2C:1C:94:1C:41:A6:FE:4B:95
Certificate issuer: /CN=67239F5E47D123019D26807163E6542441401507
Certificate serial: 655D85D4B87FC0421BD978CE9B33F6F4158D9D1E
Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32372e302f32342d3234203d3e203138303539.roa
Signing time: Sun 03 May 2026 03:03:34 +0000
ROA not before: Sun 03 May 2026 02:58:34 +0000
ROA not after: Sun 02 May 2027 03:03:34 +0000
asID: 18059
IP address blocks: 122.128.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:10:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:5d:85:d4:b8:7f:c0:42:1b:d9:78:ce:9b:33:f6:f4:15:8d:9d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67239F5E47D123019D26807163E6542441401507
Validity
Not Before: May 3 02:58:34 2026 GMT
Not After : May 2 03:03:34 2027 GMT
Subject: CN=9C8C191959FDA432F182BC2C1C941C41A6FE4B95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8f:72:64:63:a7:af:af:f7:b3:76:21:c0:9d:
8b:66:15:93:4b:5b:31:52:fe:d0:9e:98:36:eb:1e:
5f:15:85:34:77:de:40:e5:bf:6d:da:f4:fe:ba:4b:
dc:76:0d:30:83:c0:68:ea:62:dd:99:74:27:2d:6a:
25:ff:42:7d:c0:70:3f:c6:51:07:44:94:a4:aa:6e:
2c:20:3c:88:ad:00:15:c9:e7:73:d5:95:35:03:d7:
fd:5b:61:36:c6:cb:ac:65:38:4e:3a:e5:4a:56:a1:
62:a0:60:24:d6:ec:69:ed:e1:88:21:8a:46:61:52:
0e:2d:fa:84:3c:6a:e8:73:2a:69:2d:c8:8c:0c:b6:
ce:7e:57:ee:20:57:30:c7:68:e6:7b:f3:04:a7:81:
30:8c:46:2a:4e:50:20:22:c4:18:8f:4e:42:01:81:
1f:77:0b:e0:b9:c2:b1:00:69:2b:12:3b:f6:e2:90:
b0:37:0a:a5:11:ed:9f:06:6e:3e:5d:ac:04:e9:5f:
2f:ac:80:10:e4:6e:d3:79:e9:09:8f:2c:dc:cf:ec:
b8:bb:5b:e1:2e:bb:2c:2e:52:d9:e3:7e:f6:f1:73:
24:4e:59:8f:36:a7:16:07:27:38:be:ff:b2:c0:66:
7c:7a:d9:c2:a6:6f:90:36:d8:5c:3f:87:54:cb:dc:
79:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8C:19:19:59:FD:A4:32:F1:82:BC:2C:1C:94:1C:41:A6:FE:4B:95
X509v3 Authority Key Identifier:
keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32372e302f32342d3234203d3e203138303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.128.27.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:96:f1:eb:45:40:af:ed:40:c1:e1:fb:91:70:7e:07:cc:b9:
be:02:b0:e9:a1:66:6a:64:bc:99:d6:7f:dc:b6:ac:f3:4a:a9:
41:4b:47:65:7e:e6:43:16:6e:a5:84:2e:a9:82:d0:4e:89:b3:
0e:a6:91:ab:4a:a3:2e:3f:11:a7:5f:40:e7:c1:8d:40:27:a0:
57:c6:f5:e6:12:22:09:a3:a2:0e:da:f3:ce:f6:8d:7a:b4:8f:
8d:0d:bd:c0:a7:9e:6b:e3:3c:e7:c8:6a:bb:f9:3c:14:bd:28:
b8:29:ed:a7:cb:38:a3:4b:80:17:19:cd:a9:4b:5a:7c:61:d0:
fd:8a:8d:b6:f7:8b:c0:06:33:1f:ca:df:3f:85:82:70:c0:5a:
55:bf:aa:da:30:4c:74:6b:4a:0d:e4:db:65:06:a7:08:df:91:
e8:bd:3e:cb:b0:69:7f:60:7b:89:45:73:a9:84:1d:76:70:db:
15:12:67:5f:df:03:02:67:c9:39:fe:33:c9:4e:11:a3:85:27:
71:c8:b0:93:03:2e:d8:0a:5b:ef:65:d8:ac:c1:0d:49:de:c4:
87:70:f0:2f:e2:15:31:6f:ec:91:4a:83:3b:50:1e:24:13:7a:
19:ba:05:8f:37:38:77:25:12:e1:bb:91:e0:60:a8:a7:8d:57:
99:bf:41:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:55:05 2026 by rpki-client