
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e33312e302f32342d3234203d3e203138303539.roa
File: 3132322e3132382e33312e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier: UJxVjoB/yD0XQoQwUxT1LxweG2HrFw/9nCh1uOJYQMk=
Subject key identifier: 20:E5:2C:22:A2:F9:9F:8C:28:76:26:1C:C8:8C:9F:DE:24:59:34:C8
Certificate issuer: /CN=67239F5E47D123019D26807163E6542441401507
Certificate serial: 498F192FFE3D70B762555386E14E9C11E65333FA
Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e33312e302f32342d3234203d3e203138303539.roa
Signing time: Sun 03 May 2026 03:03:46 +0000
ROA not before: Sun 03 May 2026 02:58:46 +0000
ROA not after: Sun 02 May 2027 03:03:46 +0000
asID: 18059
IP address blocks: 122.128.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:10:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:8f:19:2f:fe:3d:70:b7:62:55:53:86:e1:4e:9c:11:e6:53:33:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67239F5E47D123019D26807163E6542441401507
Validity
Not Before: May 3 02:58:46 2026 GMT
Not After : May 2 03:03:46 2027 GMT
Subject: CN=20E52C22A2F99F8C2876261CC88C9FDE245934C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:61:bb:e0:db:69:12:a2:3a:43:44:51:80:77:
c0:8d:7e:48:36:98:32:81:d3:e8:2f:7d:74:4f:53:
36:ae:18:4f:93:65:8b:69:a9:83:36:e6:c4:ee:50:
25:1f:ed:de:dd:3f:6c:87:47:b9:79:c2:0b:c1:8a:
c1:6a:43:88:c0:5b:b8:47:8c:71:3b:0e:a2:43:de:
18:aa:b1:a4:db:6e:2a:39:a5:d9:1c:d6:2d:f7:ee:
c3:8f:68:81:9d:6d:c1:50:51:a9:42:e3:e9:de:62:
6d:a8:2e:e8:56:82:64:a3:df:45:07:c1:c7:44:6d:
a3:f9:d3:d8:da:6c:83:6f:48:29:64:eb:d0:72:90:
00:de:92:02:67:eb:eb:b9:13:f0:b3:51:b0:6c:be:
40:b1:da:e4:fc:c8:56:a0:35:4c:f7:a5:70:17:85:
24:d8:36:3c:e0:29:16:d6:c1:b6:af:86:a1:11:be:
4d:b9:11:d1:ce:b2:3a:a4:bb:22:c3:44:e1:d8:6a:
97:73:c5:16:8a:2b:92:63:55:a5:ab:23:cc:09:87:
03:35:86:ee:82:cc:11:98:d9:04:7f:3c:22:cc:c3:
da:cc:a5:e7:43:c1:7d:ef:59:c1:7a:6f:6e:1f:b8:
ec:62:50:13:ac:f4:29:84:73:78:86:51:08:b9:43:
a2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E5:2C:22:A2:F9:9F:8C:28:76:26:1C:C8:8C:9F:DE:24:59:34:C8
X509v3 Authority Key Identifier:
keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e33312e302f32342d3234203d3e203138303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.128.31.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:b2:34:9e:3b:10:51:c4:2c:f8:2a:ad:94:85:14:00:28:2d:
fa:9d:7b:81:c4:57:5e:b3:0b:bc:30:3a:d1:ef:b0:53:3f:ee:
d3:e8:63:a9:a1:51:b2:ca:3b:3f:0d:7f:82:3d:fd:71:bc:e9:
15:61:3a:48:4c:4a:57:0b:34:11:2b:55:b2:91:94:0e:89:dd:
e2:80:d2:08:8d:8b:8e:f3:f8:c5:5d:a1:b6:63:c8:12:4d:cf:
ee:e8:58:a9:5f:40:72:d4:d1:34:ea:69:9c:68:a9:ae:cf:e7:
05:61:90:02:70:f9:7d:79:74:8f:1b:b1:8b:8f:fa:e4:c3:d5:
15:80:a6:c5:e3:49:39:4e:c0:1c:41:b1:bf:51:ae:6b:bf:98:
92:45:0e:3d:fa:fe:9b:af:77:4f:0c:3a:78:8e:b9:dc:52:4e:
ac:2e:96:b2:31:ca:1e:34:04:cb:f3:f1:52:07:0e:c6:ca:5c:
93:ec:1c:76:1c:cb:7b:fb:3f:51:09:c0:d8:08:49:20:84:a8:
be:bc:11:0e:d8:f2:f5:ee:af:94:9e:bf:ed:34:43:f5:d4:f1:
c2:9f:19:c5:73:fd:9c:09:2c:29:f3:4d:55:75:6f:73:e0:12:
c6:5c:01:f4:77:4a:ec:50:2c:ac:89:1f:8c:3f:f7:7d:38:79:
04:80:02:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:33:00 2026 by rpki-client