
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36362e302f32342d3234203d3e203436303633.roa
File: 32372e3131322e36362e302f32342d3234203d3e203436303633.roa (raw, json)
Hash identifier: 3HAIIUys7Tc4LRT+YcRLOfjs2X6R/CDKgmkxni8LvLc=
Subject key identifier: 5F:5C:6F:1F:4E:0D:3E:DD:15:3A:C2:43:9D:AB:DD:4D:F1:5D:97:3A
Certificate issuer: /CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2
Certificate serial: 050DF2B1F2B8D8521DC4F145B26008D893A5D330
Authority key identifier: DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36362e302f32342d3234203d3e203436303633.roa
Signing time: Sun 03 May 2026 03:15:20 +0000
ROA not before: Sun 03 May 2026 03:10:20 +0000
ROA not after: Sun 02 May 2027 03:15:20 +0000
asID: 46063
IP address blocks: 27.112.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl
rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:0d:f2:b1:f2:b8:d8:52:1d:c4:f1:45:b2:60:08:d8:93:a5:d3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2
Validity
Not Before: May 3 03:10:20 2026 GMT
Not After : May 2 03:15:20 2027 GMT
Subject: CN=5F5C6F1F4E0D3EDD153AC2439DABDD4DF15D973A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:58:bb:58:cf:6d:a5:c5:f7:55:82:18:09:b2:
36:ed:7a:c0:9a:1c:f2:f6:c1:04:77:52:95:72:4e:
1f:9e:85:92:4a:27:2c:dd:af:ec:17:a8:c2:24:69:
7e:49:e4:1f:53:00:a6:12:b3:5c:fb:b0:52:40:07:
84:3e:3d:e0:20:d3:b9:1a:ae:b9:3f:d1:f5:8c:bb:
20:8b:2e:24:56:51:7b:47:fa:f5:7d:fa:3e:ae:16:
66:c8:23:51:4a:24:98:6a:61:dc:9f:ce:4c:34:57:
6f:14:09:af:42:ae:f3:a9:d6:87:ad:1b:53:e7:aa:
be:36:d5:75:14:b0:dd:ec:69:54:c9:e6:e0:8c:fa:
4f:d7:5c:0b:2e:01:50:f6:0b:3d:6d:83:e4:1b:0a:
a1:95:89:06:26:3c:c5:ea:60:43:81:68:19:92:61:
5a:aa:5e:59:bc:05:2c:d3:2c:23:bc:b2:73:4b:83:
76:74:a7:8a:aa:49:95:80:6d:6b:19:43:e0:fe:0f:
7f:9b:17:3c:14:af:8d:b5:94:eb:5b:cb:cc:52:b6:
de:2d:54:de:c9:54:41:64:e4:1c:d9:d5:ba:be:37:
1f:bf:fd:a1:28:37:15:35:f4:f0:5b:38:0f:30:c9:
92:19:48:d7:2f:3c:50:1c:bd:98:84:e4:a3:9a:69:
33:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5C:6F:1F:4E:0D:3E:DD:15:3A:C2:43:9D:AB:DD:4D:F1:5D:97:3A
X509v3 Authority Key Identifier:
keyid:DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36362e302f32342d3234203d3e203436303633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.112.66.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:87:d7:2b:d3:6d:d5:7c:4a:90:bb:cf:f5:93:8b:df:6a:4d:
e6:8a:4c:50:ce:41:b2:d3:b8:73:f0:43:9e:be:a4:b6:25:8b:
a6:79:48:5d:90:ff:d0:56:4a:f9:0a:8f:65:0a:27:d1:53:87:
c4:4f:a4:95:fb:34:76:ee:fa:39:4c:2f:53:4f:c5:94:e0:3f:
cc:b9:b6:a4:26:0a:b4:4a:6a:b2:f5:01:c3:60:b4:ab:8b:fe:
45:e3:b1:14:ab:6c:cf:1f:d3:12:d8:43:0d:4a:10:96:83:f1:
57:4c:b7:40:01:a8:23:70:96:c5:c6:a9:39:9b:b5:c1:7c:6d:
05:97:18:70:66:0f:05:f0:14:08:94:c5:fe:18:45:bf:67:b2:
be:4e:dd:35:f7:ba:3a:f5:de:ae:94:ea:79:27:da:57:50:76:
00:08:d8:d2:7b:d0:57:6e:38:75:97:b2:16:f4:60:13:ee:cd:
0d:1a:8d:9f:71:69:c6:27:60:e9:45:11:32:b8:b1:e1:a1:a2:
74:dd:15:da:a7:dc:f2:09:cd:eb:d4:d3:c1:5e:79:eb:ba:1a:
2d:69:80:7d:ed:32:c4:6a:3e:63:0b:d3:64:e3:91:ef:e2:84:
d3:56:6f:dc:be:ef:c2:52:f9:10:76:91:e1:cf:6f:34:25:b0:
e7:fb:fb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:14 2026 by rpki-client