
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32392e302f32342d3234203d3e203138303539.roa
File: 3132322e3132382e32392e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier: 4DbH8GPa69XSU4cm0BfoJiarzg8e/II40/nVBa/Vigo=
Subject key identifier: 2E:C6:C2:AE:7F:F1:C0:41:52:13:C5:11:40:3E:7E:B3:89:71:F4:21
Certificate issuer: /CN=67239F5E47D123019D26807163E6542441401507
Certificate serial: 252584C8135B988C7E7995601CC1B9172E48A799
Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32392e302f32342d3234203d3e203138303539.roa
Signing time: Sun 03 May 2026 03:03:52 +0000
ROA not before: Sun 03 May 2026 02:58:52 +0000
ROA not after: Sun 02 May 2027 03:03:52 +0000
asID: 18059
IP address blocks: 122.128.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:10:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:25:84:c8:13:5b:98:8c:7e:79:95:60:1c:c1:b9:17:2e:48:a7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67239F5E47D123019D26807163E6542441401507
Validity
Not Before: May 3 02:58:52 2026 GMT
Not After : May 2 03:03:52 2027 GMT
Subject: CN=2EC6C2AE7FF1C0415213C511403E7EB38971F421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:15:1f:87:84:96:b6:22:c0:8b:ef:51:cf:db:
15:db:b8:ec:04:79:4c:8d:ac:59:82:e0:bc:8a:fe:
37:22:d8:4d:8e:b1:d7:a8:7b:01:56:cf:19:4b:45:
dd:2a:7c:f6:00:c9:ec:47:da:e8:a4:bb:d2:65:3f:
0a:5e:e7:bb:d8:48:9e:39:05:b3:b7:99:a0:d8:54:
60:a2:a8:cb:0c:e9:49:66:7f:22:ee:36:eb:a0:9e:
03:85:27:26:a7:33:44:1c:84:d8:13:a6:1f:7b:09:
1a:8f:1a:71:bd:a5:63:82:26:26:d5:9d:d6:fa:bf:
fd:d6:07:e7:bb:59:e7:85:d8:1e:af:96:6c:18:45:
b0:83:f2:b6:cc:05:d4:aa:2c:8a:02:5f:20:1b:41:
00:df:7c:8e:ee:e2:4e:49:f6:ac:37:e2:f3:77:48:
00:ff:89:43:e9:0b:b9:2d:00:d4:7b:f0:30:39:cb:
6d:62:90:0e:1d:3f:d7:1b:55:ea:31:f0:61:7a:64:
6b:70:c2:99:64:bf:a2:f1:e4:26:55:6b:6e:37:dd:
47:e4:9f:2c:12:e6:f3:50:0b:19:32:da:ea:ca:26:
aa:0a:ad:6f:43:02:84:86:47:76:c9:f5:fe:9c:b0:
b0:17:59:10:a9:05:9a:ee:70:7c:6b:40:73:7e:15:
1d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C6:C2:AE:7F:F1:C0:41:52:13:C5:11:40:3E:7E:B3:89:71:F4:21
X509v3 Authority Key Identifier:
keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32392e302f32342d3234203d3e203138303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.128.29.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:0c:11:50:ac:e8:50:a8:03:36:e8:b1:3b:4c:85:b5:e5:e5:
3f:b2:a6:16:1a:36:8d:59:9a:a6:b8:c2:08:3e:a9:f6:b2:5b:
30:b3:a7:53:d9:3b:a0:0c:77:9d:33:c6:10:c1:3f:6d:57:6f:
2a:b6:d3:66:1a:57:1e:77:20:11:25:14:be:c0:6a:25:f4:cd:
ca:7b:ae:76:07:0e:7f:78:38:70:b3:f7:a8:be:56:51:64:56:
9d:10:ae:d7:a6:42:77:94:5c:32:6f:fb:31:7a:72:f2:8b:b3:
cd:60:f1:43:6e:6e:87:06:d9:05:81:95:8b:e1:07:5a:aa:ee:
b4:7a:51:ec:4d:69:bc:26:c2:c6:f8:ec:b7:41:2a:8f:8e:fd:
da:b8:fa:15:03:0e:3c:18:8c:0b:04:7d:6d:02:e0:86:61:8d:
fb:32:ee:15:4d:92:22:49:43:c1:52:65:78:a7:78:52:21:bb:
c3:79:d7:17:32:88:1d:3e:ed:50:04:01:33:ef:02:39:c1:99:
c3:86:1f:19:ac:86:c9:3e:34:de:04:a4:c9:29:7a:6a:45:4a:
77:15:ec:bc:a3:cb:44:e0:33:db:7e:d6:e4:80:ae:8c:80:03:
d9:df:4a:60:b7:9a:72:e7:b0:cf:9d:70:da:b6:6a:46:fc:99:
2b:01:a4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:39:14 2026 by rpki-client