
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36372e302f32342d3234203d3e203436303633.roa
File: 32372e3131322e36372e302f32342d3234203d3e203436303633.roa (raw, json)
Hash identifier: 0DqNe75QOc3hGqgnlAm5b0fiz1fZsts/kBEvqeLylzQ=
Subject key identifier: BC:C7:D6:81:32:DA:8D:55:FC:F8:36:78:C5:0D:5D:1F:17:52:6F:6D
Certificate issuer: /CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2
Certificate serial: 44E60CED487CD1B51E18ED33A5733808546BDD69
Authority key identifier: DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36372e302f32342d3234203d3e203436303633.roa
Signing time: Sun 03 May 2026 03:15:19 +0000
ROA not before: Sun 03 May 2026 03:10:19 +0000
ROA not after: Sun 02 May 2027 03:15:19 +0000
asID: 46063
IP address blocks: 27.112.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl
rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:e6:0c:ed:48:7c:d1:b5:1e:18:ed:33:a5:73:38:08:54:6b:dd:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2
Validity
Not Before: May 3 03:10:19 2026 GMT
Not After : May 2 03:15:19 2027 GMT
Subject: CN=BCC7D68132DA8D55FCF83678C50D5D1F17526F6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2f:92:ca:de:75:07:a9:18:8f:41:cc:97:87:
92:e4:cd:3e:fd:4a:1c:09:b8:67:83:15:7b:21:a8:
fd:96:4b:34:f9:c5:08:97:92:8f:c8:db:83:9e:53:
f0:50:f9:04:eb:31:23:9a:66:31:bf:64:39:72:07:
27:a8:7c:1b:49:af:b1:ae:9f:2d:7b:d1:65:8a:42:
43:3e:e0:99:91:ae:df:91:40:a1:2e:b1:89:de:8c:
c9:32:fa:40:91:e8:cd:52:fd:e9:39:b8:2c:6c:e2:
42:87:51:ba:24:16:3c:26:b1:85:ae:c4:76:09:5b:
82:ca:91:6a:8f:36:bb:ce:d0:26:30:57:79:82:18:
26:87:d2:3a:a5:d8:40:77:5d:04:c9:22:d3:6d:43:
f6:db:08:f9:b4:39:e8:1c:d0:da:9b:30:c1:01:65:
65:00:9b:39:0f:2c:2c:bc:fd:86:50:31:c0:8a:21:
4d:90:4c:a2:b7:cb:ad:da:48:fa:93:1d:05:38:d3:
89:2c:9b:70:a3:60:7e:de:5d:12:da:e5:4c:2e:e6:
f2:ca:e9:45:a2:40:b8:db:3b:e4:c9:40:35:64:7a:
35:1c:a5:e9:13:0e:fc:18:70:a8:07:b1:c2:a7:dc:
cb:8f:1d:cb:f9:6a:4e:ab:85:51:e0:c6:ce:89:8b:
7c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C7:D6:81:32:DA:8D:55:FC:F8:36:78:C5:0D:5D:1F:17:52:6F:6D
X509v3 Authority Key Identifier:
keyid:DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36372e302f32342d3234203d3e203436303633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.112.67.0/24
Signature Algorithm: sha256WithRSAEncryption
28:a0:58:2d:85:3a:71:71:c8:cc:82:32:70:96:6c:76:00:99:
c9:d0:60:98:73:1e:b9:04:24:2e:b6:3c:e2:81:67:cb:34:69:
fd:01:6f:78:28:4b:8c:ac:f7:5e:6c:fd:5a:a2:95:86:cb:ef:
3f:36:65:08:0f:1e:6e:c9:a9:a6:0e:4e:de:78:1c:e0:ef:ec:
ef:6a:d9:da:d6:0c:db:65:7e:ea:6f:a5:70:8d:5c:99:40:cd:
6d:33:30:f2:4f:a6:cb:36:a1:db:40:48:55:29:b9:4f:af:a8:
fe:f2:f4:1f:2a:9f:1e:dc:75:24:95:41:66:3f:b9:c8:f0:e1:
77:78:60:1b:1f:47:c6:1d:5f:72:bc:8c:e6:60:a4:8d:0b:6a:
33:fb:4d:88:2d:12:a5:f4:c7:2d:ad:dc:bb:df:2c:83:07:f8:
69:99:a4:26:03:c0:ee:8b:5a:39:62:37:8f:db:c5:f5:91:b7:
a4:e2:4f:27:fc:3d:6c:2c:3f:3e:21:95:c0:20:8b:27:19:1c:
1b:9e:31:eb:e3:1c:1b:45:5d:ba:88:6f:48:21:2f:d8:12:1b:
9b:59:23:fd:83:2f:22:59:9f:15:98:df:64:ef:8d:f1:82:58:
68:5c:a2:48:3c:e4:51:de:f7:ef:49:0f:a3:46:63:50:02:e0:
b9:bf:ea:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:51:25 2026 by rpki-client