
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/32372e302e3139382e302f32342d3234203d3e20313338313138.roa
File: 32372e302e3139382e302f32342d3234203d3e20313338313138.roa (raw, json)
Hash identifier: FtAyLFgcPcOrwdeATSorkqQ+qnS6UD5lf+AdbVbITfE=
Subject key identifier: 83:45:06:73:48:BD:3A:B3:AB:7A:A5:D9:95:D8:70:3F:9A:DC:C0:34
Certificate issuer: /CN=0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C
Certificate serial: 417B0073EFD11D5A3651B2E1B2E2CCE565C92897
Authority key identifier: 0D:CE:F2:10:E6:B2:D9:C5:5C:FF:D3:B1:5E:5E:94:0C:3A:FE:7A:3C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/32372e302e3139382e302f32342d3234203d3e20313338313138.roa
Signing time: Sun 03 May 2026 03:10:48 +0000
ROA not before: Sun 03 May 2026 03:05:48 +0000
ROA not after: Sun 02 May 2027 03:10:48 +0000
asID: 138118
IP address blocks: 27.0.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.crl
rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:7b:00:73:ef:d1:1d:5a:36:51:b2:e1:b2:e2:cc:e5:65:c9:28:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C
Validity
Not Before: May 3 03:05:48 2026 GMT
Not After : May 2 03:10:48 2027 GMT
Subject: CN=8345067348BD3AB3AB7AA5D995D8703F9ADCC034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c3:24:d6:ac:3a:e7:48:12:e1:87:af:e6:08:
96:a6:41:c1:36:d3:bf:35:b8:17:3e:4e:43:87:7a:
3b:51:44:94:93:6e:40:8e:a6:65:0f:7f:25:29:0c:
b7:86:79:e1:b2:70:21:73:9b:24:3a:75:3d:f0:e5:
1f:6d:6c:53:57:a1:22:47:28:bb:8a:dc:35:61:b0:
48:0a:40:d6:a9:b1:ec:fc:a0:aa:9e:df:9d:19:ba:
c8:f4:0d:47:c1:0a:bc:2f:b0:b3:df:1d:70:f1:d6:
08:4a:d5:7a:8e:40:19:c1:50:92:81:44:f7:68:65:
6f:b9:91:8a:fd:91:c9:ef:81:44:73:2d:58:a7:78:
12:18:d5:34:09:45:93:4e:ed:ab:3e:31:5f:d9:91:
0b:39:ed:8b:02:b9:09:e8:0b:19:34:81:5a:e3:c7:
a5:31:aa:b2:19:f8:fa:06:5a:c9:26:53:c8:1e:97:
4b:81:c0:b4:b7:b7:c4:4c:ca:84:71:bc:32:9b:1c:
ba:b3:32:37:17:f3:bb:5f:d2:05:1f:19:bb:24:2e:
eb:c9:26:42:6d:86:0c:9c:1e:bb:e2:0f:6a:c0:b6:
3e:d6:6d:f3:97:8c:c7:91:69:bc:e5:e1:92:eb:9e:
ff:b1:18:f3:fc:c6:af:57:96:86:81:9e:77:3b:ef:
c5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:45:06:73:48:BD:3A:B3:AB:7A:A5:D9:95:D8:70:3F:9A:DC:C0:34
X509v3 Authority Key Identifier:
keyid:0D:CE:F2:10:E6:B2:D9:C5:5C:FF:D3:B1:5E:5E:94:0C:3A:FE:7A:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DCEF210E6B2D9C55CFFD3B15E5E940C3AFE7A3C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/32372e302e3139382e302f32342d3234203d3e20313338313138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.0.198.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:cf:3e:58:7c:03:23:ee:bb:38:b7:28:b4:f5:59:7a:03:30:
6f:d2:d9:83:1a:c5:4b:71:9e:92:fa:d4:29:0f:97:1e:54:31:
06:74:82:13:d2:a6:6b:4a:d7:d3:79:5b:69:37:bf:98:a1:a4:
c1:7c:4d:5c:8e:cc:21:65:94:b8:b5:11:54:93:05:4d:01:e1:
c7:1a:bb:c6:24:26:d2:11:9f:6b:b1:77:1e:51:db:8f:e8:ee:
76:d7:bf:2e:70:0b:6d:b4:84:50:0c:2f:45:80:c9:a9:54:70:
1e:68:24:dc:af:2d:a9:7c:eb:3e:42:73:23:3d:9a:0e:8c:8b:
85:c6:9d:85:81:a3:dd:82:01:4d:3e:02:23:c3:f5:d8:63:82:
d5:a9:90:f9:73:71:23:b4:53:8e:e2:4c:04:dd:c2:4d:d8:b2:
a6:42:dc:b9:23:83:0d:e0:dc:72:e1:97:25:88:61:09:b5:1a:
4b:cf:f3:a8:7b:3c:a8:36:14:c3:a8:02:33:b4:d0:e1:aa:2a:
99:84:f5:a5:bf:fd:6c:1b:2e:d0:ba:84:0a:b2:c9:4c:24:67:
1e:1e:26:85:5a:6d:06:ae:ac:cf:00:e6:32:53:ad:83:36:00:
79:eb:06:c5:32:8c:6b:33:7f:96:fc:31:33:38:40:dd:fc:ba:
bf:2c:86:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:58:51 2026 by rpki-client