
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/34352e3132362e3133322e302f32322d3232203d3e20313332363434.roa
File: 34352e3132362e3133322e302f32322d3232203d3e20313332363434.roa (raw, json)
Hash identifier: LSiSWeahGCiGQr2oAGZdxTD7aS5l5Mx3rTY5xcHY1Cs=
Subject key identifier: 1A:DE:BA:89:3E:4C:21:CA:58:BF:90:48:53:73:F6:FA:3F:80:DE:7B
Certificate issuer: /CN=90DFB5F1A9E58FE1ACB77CDF0B4E752370346916
Certificate serial: 612E34ADC61831323108E9CC2C551299C96A7A71
Authority key identifier: 90:DF:B5:F1:A9:E5:8F:E1:AC:B7:7C:DF:0B:4E:75:23:70:34:69:16
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/34352e3132362e3133322e302f32322d3232203d3e20313332363434.roa
Signing time: Sun 03 May 2026 03:12:38 +0000
ROA not before: Sun 03 May 2026 03:07:38 +0000
ROA not after: Sun 02 May 2027 03:12:38 +0000
asID: 132644
IP address blocks: 45.126.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.crl
rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:2e:34:ad:c6:18:31:32:31:08:e9:cc:2c:55:12:99:c9:6a:7a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90DFB5F1A9E58FE1ACB77CDF0B4E752370346916
Validity
Not Before: May 3 03:07:38 2026 GMT
Not After : May 2 03:12:38 2027 GMT
Subject: CN=1ADEBA893E4C21CA58BF90485373F6FA3F80DE7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:bf:46:06:50:84:66:c5:8a:f9:c1:b5:e5:7c:
b9:28:fe:17:45:30:7c:bd:74:4f:13:4c:9d:57:09:
6e:56:25:3f:cf:aa:9a:3d:22:f2:14:a7:32:e3:c5:
4d:0a:b3:3f:ea:e7:7d:93:2c:32:ba:18:a4:12:32:
9b:1e:9f:93:fe:dc:a6:4a:de:00:46:da:b6:31:cd:
38:22:aa:4e:d1:e7:80:39:99:d7:dc:f2:9f:74:17:
9b:ba:28:63:09:30:71:65:a8:e8:0c:b4:72:c9:fa:
53:10:ae:79:fc:a0:e5:6b:7e:59:ff:31:78:d5:bc:
47:39:12:14:31:94:3e:d8:45:7b:b9:79:c2:c5:13:
dc:98:2c:b0:60:70:22:bd:15:79:71:29:b6:10:4a:
85:0a:21:09:ae:64:82:e6:a9:3f:82:e7:19:24:e3:
81:6b:86:64:9e:be:b3:92:20:62:0d:39:e7:00:23:
b8:75:33:4b:2a:b0:c4:90:72:81:4d:36:7f:8d:20:
3f:3a:7f:7c:c1:1e:f6:da:45:24:36:c4:af:31:4d:
13:e4:67:9b:79:0d:ce:24:22:d0:ef:ee:fa:bc:0b:
e2:47:62:53:7c:76:53:2d:8d:ed:09:d9:6f:2c:6e:
dd:42:57:4a:6a:19:a6:90:59:62:2f:5f:2e:f9:d6:
35:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DE:BA:89:3E:4C:21:CA:58:BF:90:48:53:73:F6:FA:3F:80:DE:7B
X509v3 Authority Key Identifier:
keyid:90:DF:B5:F1:A9:E5:8F:E1:AC:B7:7C:DF:0B:4E:75:23:70:34:69:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/34352e3132362e3133322e302f32322d3232203d3e20313332363434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.126.132.0/22
Signature Algorithm: sha256WithRSAEncryption
96:f0:81:4f:44:dc:5b:f8:34:59:30:86:db:5b:13:92:9e:56:
d0:74:41:77:2c:42:ad:35:59:45:9c:12:ae:f3:b0:c0:1c:68:
f5:29:b2:26:07:f0:e8:80:96:fc:50:a8:09:66:b0:ab:b0:d5:
10:48:c2:0b:2c:48:82:52:6e:42:2c:a5:e9:e6:af:c5:8c:25:
32:83:75:7a:ee:55:55:a7:d3:61:6d:45:92:6a:0b:ad:ed:3e:
97:f8:85:d8:52:6b:4c:3c:8f:94:b4:35:72:ff:c6:35:e9:f7:
8d:62:34:a5:c3:8e:60:d3:7d:34:f7:d0:33:8d:85:ec:4d:37:
53:44:47:38:1d:c5:49:05:5f:01:6a:1c:b6:86:d2:ad:22:4a:
e6:c8:8f:79:e8:ed:19:10:d5:b8:de:4e:f3:de:ce:af:22:22:
31:f7:d6:0e:f3:36:08:d4:15:bc:04:5e:4f:c4:bb:9d:87:e9:
c8:43:19:26:55:fb:6a:05:d7:7d:ec:af:4d:d9:a1:73:5e:ed:
30:4f:05:ce:da:1e:81:ff:1e:7d:46:98:f6:0f:44:fe:8c:7f:
48:07:b7:37:5c:f4:27:a1:91:a4:20:d4:9d:b7:11:58:3c:85:
36:a6:09:2c:b9:0a:c3:fe:8a:dd:b5:97:5c:92:8c:d5:5c:1c:
00:ce:b9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:01:32 2026 by rpki-client