
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e37312e302f32342d3234203d3e203436303633.roa
File: 32372e3131322e37312e302f32342d3234203d3e203436303633.roa (raw, json)
Hash identifier: Y9lsT2HQ5ICM+BicfmZcvwMhmuIC9lwWMF3PEUQBipo=
Subject key identifier: 8F:1A:00:E9:9A:2F:CC:4B:32:A5:D9:3E:A1:EB:D3:F8:83:30:BD:40
Certificate issuer: /CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2
Certificate serial: 26DA2E2B9DB12472E2ABDB3A55D5D51E5A157610
Authority key identifier: DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e37312e302f32342d3234203d3e203436303633.roa
Signing time: Sun 03 May 2026 03:15:21 +0000
ROA not before: Sun 03 May 2026 03:10:21 +0000
ROA not after: Sun 02 May 2027 03:15:21 +0000
asID: 46063
IP address blocks: 27.112.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl
rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:da:2e:2b:9d:b1:24:72:e2:ab:db:3a:55:d5:d5:1e:5a:15:76:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBEB5FC891CC0A8620A52508E67BB129C41E31C2
Validity
Not Before: May 3 03:10:21 2026 GMT
Not After : May 2 03:15:21 2027 GMT
Subject: CN=8F1A00E99A2FCC4B32A5D93EA1EBD3F88330BD40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3c:66:a0:51:b4:5f:9a:57:a3:66:e8:d8:08:
d7:d1:44:41:25:b1:21:18:ad:28:cc:92:1e:af:14:
f0:e6:62:09:d9:a2:36:84:2b:43:65:83:b3:13:4f:
ca:6a:95:d2:9a:59:1f:2a:4c:ea:c9:f0:fb:5f:fe:
ea:4c:06:76:7c:39:89:cb:ab:ff:f4:0e:e6:d1:51:
36:2b:17:09:a4:56:b2:5f:e3:33:80:b8:a5:fc:62:
ef:6b:0e:49:ff:08:80:87:24:25:24:41:10:d6:3d:
75:f0:39:53:63:37:e2:ea:07:b5:e7:04:d5:19:6b:
01:c5:81:1b:36:c5:5b:1e:f3:7b:21:cf:dd:6c:a4:
ed:15:cd:19:2e:56:ce:f4:7e:0e:ec:c6:41:dc:b9:
f2:1c:56:dd:00:0d:e7:8b:b3:ce:60:d9:27:46:bc:
c9:dd:17:8a:31:46:8c:95:b6:98:a5:cf:a7:0e:fd:
de:4c:d8:df:1d:3b:53:ef:75:1a:22:cf:41:f7:dd:
db:d3:ae:39:bd:30:22:79:0a:56:8d:23:48:b5:f2:
ee:6b:5d:5a:54:6e:4b:d4:60:b8:aa:d5:7f:81:ef:
77:14:91:6e:a1:a4:58:95:51:8d:c3:6e:57:d4:b5:
e3:35:b2:92:ef:85:2d:98:c0:71:bb:c3:68:07:91:
76:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1A:00:E9:9A:2F:CC:4B:32:A5:D9:3E:A1:EB:D3:F8:83:30:BD:40
X509v3 Authority Key Identifier:
keyid:DB:EB:5F:C8:91:CC:0A:86:20:A5:25:08:E6:7B:B1:29:C4:1E:31:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DBEB5FC891CC0A8620A52508E67BB129C41E31C2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e37312e302f32342d3234203d3e203436303633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.112.71.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:97:17:e5:6c:0b:bd:cd:d1:8f:5d:c5:f2:bb:67:ee:44:b3:
b6:b9:e1:6c:ad:4f:dc:34:40:89:6a:3c:50:e0:47:3e:7f:4c:
de:39:45:7d:c0:55:bb:c9:d4:97:92:64:7e:1f:3c:34:e8:58:
5c:6b:df:05:73:fb:f4:66:ed:64:f2:26:f4:e8:c1:07:cf:97:
00:30:e2:44:d9:f9:66:65:e5:1f:95:be:9b:c5:f6:ad:a0:36:
3a:9b:04:72:96:33:c9:dd:f9:b2:40:98:08:91:ba:f8:96:9c:
51:36:b6:4b:c9:af:b6:fb:30:fa:c9:0b:16:30:18:2d:78:7f:
a5:86:02:f7:ae:9a:4f:63:85:0f:64:aa:ac:c6:21:b1:44:fc:
5d:7c:ee:76:8f:b7:3e:b4:9b:69:ed:a3:67:58:2b:30:7b:40:
ff:8b:29:86:59:36:51:de:eb:9f:dd:fa:f6:0e:31:a0:44:bd:
b2:14:21:7e:f7:f7:39:25:1e:ab:3f:69:02:d6:c6:e8:32:d7:
60:79:bc:44:1f:c8:c0:70:fe:40:e2:81:1a:43:9e:08:24:60:
ba:06:69:0c:c0:8a:4b:47:71:67:35:9e:1f:b6:70:79:5e:2b:
b3:df:8e:3c:0b:63:0c:de:e1:17:1d:65:51:f5:95:f9:5c:9d:
73:19:55:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:27:27 2026 by rpki-client