
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36382e302f32342d3234203d3e203436303633.roa
File: 32372e3131322e36382e302f32342d3234203d3e203436303633.roa (raw, json)
Hash identifier: IkNdgsDaw78ogG3Aodj/Jzt/an3DS2wRm3jUm6iycMk=
Subject key identifier: 0D:8E:CC:98:AD:1D:E9:AD:E0:C2:2D:1C:16:76:94:63:2E:13:BB:4E
Certificate issuer: /CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2
Certificate serial: 26388D576001C0599CF47D5636DDB36EAF6433BF
Authority key identifier: DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36382e302f32342d3234203d3e203436303633.roa
Signing time: Sun 03 May 2026 03:15:18 +0000
ROA not before: Sun 03 May 2026 03:10:18 +0000
ROA not after: Sun 02 May 2027 03:15:18 +0000
asID: 46063
IP address blocks: 27.112.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl
rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:38:8d:57:60:01:c0:59:9c:f4:7d:56:36:dd:b3:6e:af:64:33:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2
Validity
Not Before: May 3 03:10:18 2026 GMT
Not After : May 2 03:15:18 2027 GMT
Subject: CN=0D8ECC98AD1DE9ADE0C22D1C167694632E13BB4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3a:eb:fe:b5:3f:c8:5c:06:07:d7:b8:b8:8c:
ab:69:5e:65:f4:40:68:75:27:08:84:61:2d:eb:69:
7c:d5:0b:16:33:76:c5:3c:00:da:99:4a:02:0b:71:
4f:84:93:8b:ad:ad:6d:6b:fe:6f:32:df:06:d1:ab:
83:02:df:63:7b:33:4f:b8:63:ba:3a:36:0b:30:b5:
cf:7d:ce:71:a0:3d:d6:ad:35:2e:a8:05:38:de:ea:
3b:f6:c5:c9:34:1c:3d:97:98:ac:c8:bf:be:c4:a0:
ec:2a:72:f2:07:95:cb:0b:9e:06:a1:5a:6b:cd:fe:
15:cd:ee:89:74:ab:bc:60:71:53:ba:05:c7:bd:e2:
bc:f5:e5:d9:0c:dc:b1:b9:16:3e:ce:6e:1b:bf:66:
f2:8b:2a:c2:8b:36:10:88:32:56:0d:ee:cc:a1:86:
ef:3a:42:f1:b8:6c:3e:d8:85:f5:c8:60:2b:12:a5:
bb:e5:4a:c8:78:70:e7:49:6e:0c:09:0a:be:ca:03:
14:73:d8:17:f6:67:3a:6e:cb:f8:aa:c3:5b:11:15:
9f:f4:be:5a:ea:fc:98:c4:f2:1d:26:e5:28:cb:ca:
79:22:f2:4d:8b:34:df:43:94:a3:cb:49:9e:1b:99:
73:43:47:91:e3:07:65:07:f2:4d:4b:34:6a:0e:10:
a7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8E:CC:98:AD:1D:E9:AD:E0:C2:2D:1C:16:76:94:63:2E:13:BB:4E
X509v3 Authority Key Identifier:
keyid:DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36382e302f32342d3234203d3e203436303633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.112.68.0/24
Signature Algorithm: sha256WithRSAEncryption
82:42:b0:8c:80:93:e9:3c:8b:0b:0b:40:4e:c2:e3:e0:be:09:
18:5b:92:41:41:72:cf:1c:a6:c0:77:00:e0:48:f7:4d:3a:01:
a2:af:37:ff:3b:cb:85:28:f6:58:e9:cf:2e:09:02:5a:4a:5c:
0f:27:b4:ad:8d:89:13:79:89:72:bc:24:56:01:9c:01:ff:d7:
81:ef:21:f6:91:e2:39:17:b4:12:2f:b3:e4:d8:6a:eb:43:18:
1f:50:43:1f:5a:c7:c3:fb:6c:73:8d:c1:d3:4b:d4:3c:6b:4f:
52:1e:20:12:25:e1:ca:6c:58:58:88:a2:a4:ce:00:70:67:0c:
0a:03:52:09:e5:a3:f3:34:1f:72:c9:ad:1a:8a:f2:45:38:cb:
b8:41:1b:26:7f:72:3b:89:1a:a6:32:8b:20:70:7c:c0:09:32:
18:ae:13:2c:11:7d:20:50:de:d7:8f:44:d8:13:d5:67:49:cf:
cd:9f:7a:bc:32:8e:da:f9:98:9a:7a:a9:c3:23:0a:10:14:98:
15:b9:7f:a3:25:64:11:ff:31:ba:cb:ac:4e:02:6b:90:c2:74:
29:b9:ef:cd:cd:1f:e1:73:e4:c2:79:66:0a:a0:6e:24:d5:75:
b1:af:36:cd:e3:0e:fb:f9:6d:e9:fc:a0:ba:0c:9b:c0:4e:82:
4b:1d:08:71
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUJjiNV2ABwFmc9H1WNt2zbq9kM78wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJFQjVGQzg5MUNDMEE4NjIwQTUyNTA4RTY3QkIxMjlD
NDFFMzFDMjAeFw0yNjA1MDMwMzEwMThaFw0yNzA1MDIwMzE1MThaMDMxMTAvBgNV
BAMTKDBEOEVDQzk4QUQxREU5QURFMEMyMkQxQzE2NzY5NDYzMkUxM0JCNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSOuv+tT/IXAYH17i4jKtpXmX0
QGh1JwiEYS3raXzVCxYzdsU8ANqZSgILcU+Ek4utrW1r/m8y3wbRq4MC32N7M0+4
Y7o6Ngswtc99znGgPdatNS6oBTje6jv2xck0HD2XmKzIv77EoOwqcvIHlcsLngah
WmvN/hXN7ol0q7xgcVO6Bce94rz15dkM3LG5Fj7Obhu/ZvKLKsKLNhCIMlYN7syh
hu86QvG4bD7YhfXIYCsSpbvlSsh4cOdJbgwJCr7KAxRz2Bf2Zzpuy/iqw1sRFZ/0
vlrq/JjE8h0m5SjLynki8k2LNN9DlKPLSZ4bmXNDR5HjB2UH8k1LNGoOEKf/AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUDY7MmK0d6a3gwi0cFnaUYy4Tu04wHwYDVR0j
BBgwFoAU2+tfyJHMCoYgpSUI5nuxKcQeMcIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZWFkMWUxNmEtMGE0ZC00NGIxLTk4NDUtOWMwY2Q3YTZmMzhmLzAvREJFQjVGQzg5
MUNDMEE4NjIwQTUyNTA4RTY3QkIxMjlDNDFFMzFDMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9EQkVCNUZDODkxQ0MwQTg2MjBBNTI1MDhFNjdCQjEyOUM0MUUz
MUMyLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2VhZDFlMTZhLTBhNGQtNDRiMS05
ODQ1LTljMGNkN2E2ZjM4Zi8wLzMyMzcyZTMxMzEzMjJlMzYzODJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM0MzYzMDM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAbcEQwDQYJKoZIhvcN
AQELBQADggEBAIJCsIyAk+k8iwsLQE7C4+C+CRhbkkFBcs8cpsB3AOBI9006AaKv
N/87y4Uo9ljpzy4JAlpKXA8ntK2NiRN5iXK8JFYBnAH/14HvIfaR4jkXtBIvs+TY
autDGB9QQx9ax8P7bHONwdNL1DxrT1IeIBIl4cpsWFiIoqTOAHBnDAoDUgnlo/M0
H3LJrRqK8kU4y7hBGyZ/cjuJGqYyiyBwfMAJMhiuEywRfSBQ3tePRNgT1WdJz82f
erwyjtr5mJp6qcMjChAUmBW5f6MlZBH/MbrLrE4Ca5DCdCm5783NH+Fz5MJ5Zgqg
biTVdbGvNs3jDvv5ben8oLoMm8BOgksdCHE=
-----END CERTIFICATE-----
Generated at Wed May 13 02:16:24 2026 by rpki-client