
$ rpki-client -vvf rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e34312e302f32342d3234203d3e203435333235.roa
File: 3132322e3234382e34312e302f32342d3234203d3e203435333235.roa (raw, json)
Hash identifier: Y/DmOT1ERuXNTR9l4X0obDV2SVqxiolJs80GKn5Zz9s=
Subject key identifier: F0:44:15:92:17:17:C5:08:0C:3A:04:38:9E:33:8D:BB:92:01:31:6F
Certificate issuer: /CN=D35962E8F839460DC5283C472D81ADB87BBD3992
Certificate serial: 63BED6A55FAA9062A2C7DC451BBFD8463869AF86
Authority key identifier: D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e34312e302f32342d3234203d3e203435333235.roa
Signing time: Sun 03 May 2026 03:12:03 +0000
ROA not before: Sun 03 May 2026 03:07:03 +0000
ROA not after: Sun 02 May 2027 03:12:03 +0000
asID: 45325
IP address blocks: 122.248.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl
rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:be:d6:a5:5f:aa:90:62:a2:c7:dc:45:1b:bf:d8:46:38:69:af:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D35962E8F839460DC5283C472D81ADB87BBD3992
Validity
Not Before: May 3 03:07:03 2026 GMT
Not After : May 2 03:12:03 2027 GMT
Subject: CN=F04415921717C5080C3A04389E338DBB9201316F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7f:a0:d6:e7:7d:2e:05:49:07:7c:99:92:7e:
fc:91:76:6d:a2:de:b3:c0:f2:b6:12:52:35:a5:41:
a8:22:94:9a:25:3e:c0:58:50:ae:9e:97:ed:bc:a9:
f6:be:b3:0e:07:9a:b2:53:d7:4b:f0:fe:37:51:0d:
d7:6c:18:61:a4:0c:21:b7:7c:fa:ce:40:80:84:69:
8b:8a:13:f2:09:45:ab:a3:f1:7e:8d:7b:3c:9c:c1:
9d:9b:a6:12:5f:90:9c:f6:20:64:a8:61:2e:d3:dc:
13:e7:e9:94:59:bc:98:f5:db:8e:7e:fb:56:36:37:
e5:5c:60:95:b6:52:84:74:e6:3d:2e:6f:7a:ca:67:
ca:04:0c:c2:3b:39:32:64:af:b0:a3:d8:07:75:7f:
8e:f3:7d:0b:09:b8:1c:25:e8:d3:5f:89:03:b5:7b:
d1:ab:c3:fa:47:80:42:00:a9:03:d2:b1:81:fd:19:
1a:18:94:54:85:d8:cb:6c:e3:fc:05:d8:1a:be:97:
74:de:b1:a3:f8:b8:70:c5:a8:bf:20:f7:3c:0b:27:
66:f5:e2:eb:85:a8:c3:30:6f:76:ed:af:3b:cf:94:
d4:6d:56:e9:9d:9b:18:67:90:38:c2:07:a1:36:55:
45:51:56:14:a9:76:1b:58:b9:c3:23:49:9b:35:5d:
31:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:44:15:92:17:17:C5:08:0C:3A:04:38:9E:33:8D:BB:92:01:31:6F
X509v3 Authority Key Identifier:
keyid:D3:59:62:E8:F8:39:46:0D:C5:28:3C:47:2D:81:AD:B8:7B:BD:39:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/D35962E8F839460DC5283C472D81ADB87BBD3992.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D35962E8F839460DC5283C472D81ADB87BBD3992.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e34312e302f32342d3234203d3e203435333235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.248.41.0/24
Signature Algorithm: sha256WithRSAEncryption
20:f3:0a:a3:f3:b3:bb:ea:cb:09:90:15:30:ee:a0:97:34:85:
43:4a:d3:d9:1f:64:33:55:15:f0:e8:9e:43:03:8a:ab:ab:1a:
69:eb:27:fb:fb:39:38:62:69:e0:34:08:32:b2:10:e2:4b:45:
0f:8d:08:aa:83:e0:b2:8c:0e:27:fe:9d:10:3c:9b:1c:08:dc:
09:23:59:e0:14:85:da:ae:f7:af:34:61:29:46:f1:2c:b9:eb:
b6:69:10:38:78:77:71:dc:13:ed:27:47:d4:b0:cc:32:e5:6b:
36:f4:04:36:37:ed:9e:56:3b:3a:4e:de:1d:f8:9a:6e:21:40:
2a:74:bc:63:7c:19:4c:40:55:a4:44:51:4b:35:e3:ca:ed:ed:
a6:48:b7:f5:47:de:3f:ff:ea:c1:d2:12:f3:0e:e9:35:72:83:
5b:24:0f:c2:49:26:ef:e8:b7:15:19:85:9b:cd:29:3e:45:cc:
a8:b6:32:02:f6:ef:58:62:e9:f0:fc:0a:e2:63:c1:6a:3c:1f:
6b:b0:96:9e:e9:fc:b1:9b:9f:d7:6e:b2:ec:54:12:18:59:ec:
ae:e1:5b:bf:01:12:1d:5e:eb:9d:2a:92:60:20:fa:31:4b:1e:
e8:f7:26:e2:ae:ec:db:c9:65:05:ab:c3:6f:04:fe:9f:80:77:
4d:3c:c2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:41 2026 by rpki-client