
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3132302e38392e38382e302f32342d3234203d3e203435323839.roa
File: 3132302e38392e38382e302f32342d3234203d3e203435323839.roa (raw, json)
Hash identifier: hGcThccPbRGAGg17WeoAE2cy8dF6FfNo3FqZCcptl04=
Subject key identifier: 9B:FA:41:87:A2:C8:5D:29:A2:A3:C6:4B:C0:F7:44:DE:96:32:CA:4D
Certificate issuer: /CN=6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9
Certificate serial: 1AD078D6DC6F960CE1D794F6170F665B5F837D04
Authority key identifier: 6F:8E:E2:55:E2:21:6F:E3:EC:99:36:7C:FB:CC:9A:85:63:F2:C0:E9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3132302e38392e38382e302f32342d3234203d3e203435323839.roa
Signing time: Sun 03 May 2026 03:07:18 +0000
ROA not before: Sun 03 May 2026 03:02:18 +0000
ROA not after: Sun 02 May 2027 03:07:18 +0000
asID: 45289
IP address blocks: 120.89.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.crl
rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:d0:78:d6:dc:6f:96:0c:e1:d7:94:f6:17:0f:66:5b:5f:83:7d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9
Validity
Not Before: May 3 03:02:18 2026 GMT
Not After : May 2 03:07:18 2027 GMT
Subject: CN=9BFA4187A2C85D29A2A3C64BC0F744DE9632CA4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:52:29:65:4d:5a:68:c4:d9:5d:0e:34:38:fc:
3e:05:43:d2:5a:6f:f7:83:5c:3e:3b:08:77:ac:ad:
30:c4:9f:c0:6a:21:09:54:3f:95:4b:0c:e4:26:49:
f0:79:5a:9d:84:db:de:53:8e:49:9d:ab:80:df:29:
cc:53:a4:4e:6b:42:72:e2:5e:4e:8a:a0:d7:e9:14:
3b:e1:10:dc:a8:71:0f:ab:c8:7a:08:d5:3c:f0:d8:
a8:00:c1:15:c9:b6:e5:fa:85:6f:82:9d:f7:fa:d6:
3d:45:93:7a:53:50:c8:88:d5:ec:d7:fb:2a:be:fc:
9e:46:9c:a7:49:5a:c6:e8:6f:b1:39:15:32:5b:4b:
c7:17:d6:6b:7c:d9:ad:c0:b4:ff:2a:76:17:a4:4b:
2b:6e:45:0e:e7:6d:6d:24:27:8e:23:fa:ed:93:51:
20:1b:e2:5c:4b:df:b7:df:45:ad:33:94:2d:a7:7d:
50:eb:1a:c3:90:de:10:5e:fa:ae:08:00:87:f9:67:
4c:ce:27:47:85:b7:71:10:a6:97:22:a7:5b:06:d1:
63:cd:c1:a1:7d:fa:40:43:5b:91:42:6f:06:60:9f:
2f:4a:b8:31:d1:31:71:a4:6a:41:70:fc:33:d7:e9:
6e:5c:c8:a7:a8:64:1f:ed:70:32:c2:a0:cf:37:09:
5e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FA:41:87:A2:C8:5D:29:A2:A3:C6:4B:C0:F7:44:DE:96:32:CA:4D
X509v3 Authority Key Identifier:
keyid:6F:8E:E2:55:E2:21:6F:E3:EC:99:36:7C:FB:CC:9A:85:63:F2:C0:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3132302e38392e38382e302f32342d3234203d3e203435323839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.89.88.0/24
Signature Algorithm: sha256WithRSAEncryption
22:54:c0:bd:b1:3a:d5:41:1d:0b:99:5c:aa:21:45:09:57:b7:
a5:45:e8:5d:d0:34:6c:a6:d8:c6:4e:d2:c5:31:bf:17:f1:da:
00:7b:3b:81:7c:d2:f6:54:04:47:c0:2c:ac:d6:33:6e:d4:e6:
24:5f:e3:75:21:3b:90:1d:92:f4:22:bd:de:01:c7:92:66:e9:
32:fa:9b:3a:14:28:4b:da:17:7c:21:48:52:41:28:05:19:fd:
78:52:67:cc:12:b8:be:be:ce:8b:77:ef:85:51:ff:dd:8e:5d:
a3:b7:d4:77:c5:43:19:42:2f:ce:4f:ed:68:e6:2a:70:8f:21:
0c:a0:9a:c8:34:3f:31:21:f6:4c:35:1c:5d:d0:6b:21:8d:a5:
b6:ae:7c:0a:ca:6c:6a:4d:7d:01:18:60:7b:5f:2d:79:cc:3e:
ae:b3:9c:fd:bd:54:41:84:ab:8c:62:68:7b:02:f2:c3:b3:c5:
67:ae:54:a4:72:59:8d:63:05:33:ba:16:94:3b:dd:f1:2e:92:
60:05:7e:7b:88:76:eb:b2:2a:8f:1e:2f:f8:56:7b:57:67:a4:
83:ea:c3:bb:75:c1:de:74:40:43:24:fb:f4:f3:ae:03:ab:81:
a4:40:a9:bb:cb:bc:4c:ef:87:ca:1b:5d:39:9c:5b:66:49:35:
71:9b:37:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:28 2026 by rpki-client