
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/34352e3131382e3131342e302f32332d3233203d3e20313331373137.roa
File: 34352e3131382e3131342e302f32332d3233203d3e20313331373137.roa (raw, json)
Hash identifier: NngQ0IQfUPOCY/8TWuIA/cVIqSFiTXs2casQNFQDWbs=
Subject key identifier: 11:2D:04:A0:BE:DC:D2:E3:D3:4E:EF:96:12:83:DE:69:1B:ED:73:BA
Certificate issuer: /CN=CB0A606FD0642E68B5212AE751953E0B9A92959F
Certificate serial: 22CC41AA3735A4928CC6968AF71016A61212097E
Authority key identifier: CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/34352e3131382e3131342e302f32332d3233203d3e20313331373137.roa
Signing time: Sun 03 May 2026 03:08:06 +0000
ROA not before: Sun 03 May 2026 03:03:06 +0000
ROA not after: Sun 02 May 2027 03:08:06 +0000
asID: 131717
IP address blocks: 45.118.114.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl
rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 08:16:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:cc:41:aa:37:35:a4:92:8c:c6:96:8a:f7:10:16:a6:12:12:09:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB0A606FD0642E68B5212AE751953E0B9A92959F
Validity
Not Before: May 3 03:03:06 2026 GMT
Not After : May 2 03:08:06 2027 GMT
Subject: CN=112D04A0BEDCD2E3D34EEF961283DE691BED73BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bb:d6:4d:70:66:c0:cd:0b:14:45:22:f1:3f:
5c:1e:de:93:f1:6f:5c:18:31:4d:b3:25:26:fb:19:
f9:71:5e:21:cd:04:20:84:cf:41:66:b4:aa:c9:db:
9f:70:6b:a8:53:de:fa:aa:e1:12:cb:55:00:41:15:
54:c3:7d:69:80:fb:33:fd:83:08:eb:8e:06:86:8f:
a3:e4:57:bb:1d:45:55:50:33:7f:31:e2:46:61:59:
c2:b5:44:81:e8:2f:52:8e:8f:6c:50:f2:bd:91:ee:
03:8e:03:64:dc:b9:b8:b7:a4:83:31:13:63:77:ae:
f6:f5:03:d9:8f:08:87:f8:21:7c:f1:0f:c3:05:62:
3a:c3:87:05:71:36:76:73:5d:43:aa:0f:a8:9e:79:
71:a2:e8:6a:18:e5:37:5f:f1:a3:23:10:02:fd:02:
c1:b6:98:31:a7:c2:ae:b9:d2:6e:e1:44:da:d4:dc:
f6:59:8d:7d:21:63:07:14:ae:88:cf:ff:5f:6c:ad:
cf:e6:48:2a:ab:e2:58:57:10:d9:69:44:2b:90:32:
48:08:c0:8b:51:7f:c5:a9:03:4e:96:5e:bc:4d:9c:
29:c9:e1:c1:a3:0f:f9:d1:9e:e8:86:c4:85:0d:ca:
14:ad:e3:8f:c4:64:da:8d:47:f3:0f:ac:00:05:6d:
2a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2D:04:A0:BE:DC:D2:E3:D3:4E:EF:96:12:83:DE:69:1B:ED:73:BA
X509v3 Authority Key Identifier:
keyid:CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/34352e3131382e3131342e302f32332d3233203d3e20313331373137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.118.114.0/23
Signature Algorithm: sha256WithRSAEncryption
55:12:d0:a7:14:93:4c:27:6e:29:f1:71:f3:47:13:fd:e8:4a:
a7:14:7b:62:2e:63:c5:fb:0c:f3:9f:d9:60:97:04:d3:e1:f3:
cf:6f:b5:5a:5c:09:d6:2b:96:5b:b6:c6:bb:c0:8a:b6:72:a8:
a0:6f:df:6a:93:6f:7a:d8:a0:6a:22:15:3f:56:92:54:41:1d:
ee:89:11:e6:76:b7:69:8d:c1:bf:97:55:72:6b:9f:88:74:9e:
68:88:ea:3c:23:14:04:8e:3d:80:b3:56:6d:de:05:ad:98:03:
b4:a6:a8:d0:46:8f:9c:ff:05:7e:68:9c:3e:02:4d:bd:32:9a:
5f:bd:5a:79:b0:41:b3:a9:17:83:ac:d3:70:bf:9d:de:81:2a:
68:10:76:a2:27:23:70:13:83:98:52:46:fd:19:1b:23:b9:ec:
6c:c7:fe:85:c4:11:1b:1b:db:c7:27:65:a6:ed:4e:2c:b3:ad:
47:ae:01:cc:d4:c1:d4:07:58:b2:c3:fc:08:d9:37:a8:74:ee:
44:43:77:03:9d:71:bb:12:1d:5d:89:7c:86:22:fb:d8:52:98:
9a:75:26:4c:2a:a6:cc:f0:5a:ad:1c:22:01:eb:1f:b6:23:f5:
65:a6:b2:7e:8b:5b:b5:3d:8d:67:71:8c:e9:b1:75:1b:4a:ad:
ac:4e:cb:42
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUIsxBqjc1pJKMxpaK9xAWphISCX4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0IwQTYwNkZEMDY0MkU2OEI1MjEyQUU3NTE5NTNFMEI5
QTkyOTU5RjAeFw0yNjA1MDMwMzAzMDZaFw0yNzA1MDIwMzA4MDZaMDMxMTAvBgNV
BAMTKDExMkQwNEEwQkVEQ0QyRTNEMzRFRUY5NjEyODNERTY5MUJFRDczQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4u9ZNcGbAzQsURSLxP1we3pPx
b1wYMU2zJSb7GflxXiHNBCCEz0FmtKrJ259wa6hT3vqq4RLLVQBBFVTDfWmA+zP9
gwjrjgaGj6PkV7sdRVVQM38x4kZhWcK1RIHoL1KOj2xQ8r2R7gOOA2Tcubi3pIMx
E2N3rvb1A9mPCIf4IXzxD8MFYjrDhwVxNnZzXUOqD6ieeXGi6GoY5Tdf8aMjEAL9
AsG2mDGnwq650m7hRNrU3PZZjX0hYwcUrojP/19src/mSCqr4lhXENlpRCuQMkgI
wItRf8WpA06WXrxNnCnJ4cGjD/nRnuiGxIUNyhSt44/EZNqNR/MPrAAFbSoDAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUES0EoL7c0uPTTu+WEoPeaRvtc7owHwYDVR0j
BBgwFoAUywpgb9BkLmi1ISrnUZU+C5qSlZ8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDA3NDcxYTMtZWU1My00OTljLTlmMmQtY2YxNmIxZTRhMzUzLzAvQ0IwQTYwNkZE
MDY0MkU2OEI1MjEyQUU3NTE5NTNFMEI5QTkyOTU5Ri5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DQjBBNjA2RkQwNjQyRTY4QjUyMTJBRTc1MTk1M0UwQjlBOTI5
NTlGLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QwNzQ3MWEzLWVlNTMtNDk5Yy05
ZjJkLWNmMTZiMWU0YTM1My8wLzM0MzUyZTMxMzEzODJlMzEzMTM0MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzMzMxMzczMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLXZyMA0GCSqG
SIb3DQEBCwUAA4IBAQBVEtCnFJNMJ24p8XHzRxP96EqnFHtiLmPF+wzzn9lglwTT
4fPPb7VaXAnWK5Zbtsa7wIq2cqigb99qk2962KBqIhU/VpJUQR3uiRHmdrdpjcG/
l1Vya5+IdJ5oiOo8IxQEjj2As1Zt3gWtmAO0pqjQRo+c/wV+aJw+Ak29MppfvVp5
sEGzqReDrNNwv53egSpoEHaiJyNwE4OYUkb9GRsjuexsx/6FxBEbG9vHJ2Wm7U4s
s61HrgHM1MHUB1iyw/wI2TeodO5EQ3cDnXG7Eh1diXyGIvvYUpiadSZMKqbM8Fqt
HCIB6x+2I/VlprJ+i1u1PY1ncYzpsXUbSq2sTstC
-----END CERTIFICATE-----
Generated at Wed May 13 00:43:47 2026 by rpki-client