
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/34352e3131352e3133362e302f32322d3234203d3e203633383733.roa
File: 34352e3131352e3133362e302f32322d3234203d3e203633383733.roa (raw, json)
Hash identifier: ZBadKIUk/3x1VD+iY8T20vrwwxnWCyDi/bgS1szA1DA=
Subject key identifier: D9:EB:94:A0:D9:38:93:4E:06:F1:6C:95:11:68:77:F6:FE:F0:12:C2
Certificate issuer: /CN=6372758CCA381920292B5E0D338ECF89D0000FEE
Certificate serial: 5487A7E23DB84C85EE1A4592B046D61D9CB383CD
Authority key identifier: 63:72:75:8C:CA:38:19:20:29:2B:5E:0D:33:8E:CF:89:D0:00:0F:EE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6372758CCA381920292B5E0D338ECF89D0000FEE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/34352e3131352e3133362e302f32322d3234203d3e203633383733.roa
Signing time: Sun 03 May 2026 03:15:38 +0000
ROA not before: Sun 03 May 2026 03:10:38 +0000
ROA not after: Sun 02 May 2027 03:15:38 +0000
asID: 63873
IP address blocks: 45.115.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.crl
rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6372758CCA381920292B5E0D338ECF89D0000FEE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:87:a7:e2:3d:b8:4c:85:ee:1a:45:92:b0:46:d6:1d:9c:b3:83:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6372758CCA381920292B5E0D338ECF89D0000FEE
Validity
Not Before: May 3 03:10:38 2026 GMT
Not After : May 2 03:15:38 2027 GMT
Subject: CN=D9EB94A0D938934E06F16C95116877F6FEF012C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f0:d3:d5:32:a8:1a:3d:0a:d1:a3:7a:ed:21:
29:8e:b9:19:dc:a1:6e:be:66:d9:c3:f0:a1:c4:ed:
62:eb:25:43:dd:02:b0:f3:2b:35:34:3b:70:59:d0:
8f:a7:74:67:62:0f:85:1a:e7:3c:7a:ed:a5:f4:64:
35:64:e0:ea:e1:d7:b3:28:30:28:85:a3:1b:a6:a1:
8d:f3:a8:b5:fe:a3:37:e0:5c:0d:f3:38:09:cc:0e:
d9:8d:8b:a4:0c:78:8b:70:ed:85:65:87:22:1b:1d:
ea:47:03:96:60:da:54:8d:ab:ad:5b:22:a8:61:26:
52:22:0a:a0:9e:b0:4e:d9:a6:a2:b0:62:aa:20:3c:
60:20:6b:e7:a3:04:3b:50:d5:9c:14:40:f8:3e:42:
4f:83:89:5f:7b:18:96:3a:53:2f:c6:72:93:c8:96:
44:d3:71:fe:f8:93:ea:d9:9f:fd:1e:d3:f7:05:8b:
4d:f2:75:33:a3:3b:1a:34:9f:23:36:d2:45:24:cb:
31:7a:de:22:d1:39:c7:16:2c:77:d6:be:17:32:c4:
39:7c:e5:ef:74:87:19:0b:b3:3e:8e:88:08:77:03:
73:c4:39:83:4b:6e:23:e3:8b:56:f5:8e:e1:e2:22:
21:ee:3f:4d:d7:cd:ed:77:e7:98:7e:9f:ba:19:8b:
1f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EB:94:A0:D9:38:93:4E:06:F1:6C:95:11:68:77:F6:FE:F0:12:C2
X509v3 Authority Key Identifier:
keyid:63:72:75:8C:CA:38:19:20:29:2B:5E:0D:33:8E:CF:89:D0:00:0F:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6372758CCA381920292B5E0D338ECF89D0000FEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6372758CCA381920292B5E0D338ECF89D0000FEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/34352e3131352e3133362e302f32322d3234203d3e203633383733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.115.136.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:3f:90:48:c2:50:bd:0c:cf:43:1d:58:f7:cd:67:2b:28:7f:
e8:23:eb:d5:60:75:0f:d9:80:76:21:0d:ce:90:03:2e:6a:cf:
a1:63:b9:c9:f7:a7:36:7a:a2:5a:d7:22:1e:dd:8c:23:95:a9:
e2:7e:cf:8b:c7:b1:6f:7e:b7:f9:99:97:cc:88:b8:70:0d:72:
a3:f0:d3:ab:20:9f:e9:08:f4:79:df:bf:92:de:85:82:6b:a6:
a6:0f:b7:57:c5:a0:9b:f6:8f:3a:52:ff:cb:d1:47:12:7f:c0:
19:1d:6b:62:c3:7f:39:ff:62:73:ed:de:9f:b0:a3:52:19:b1:
f6:74:3f:6f:6e:e3:75:a2:df:0b:a6:31:e5:64:89:15:7c:2b:
15:66:da:3e:4a:d9:24:67:48:2a:80:1d:d8:2f:94:1a:45:57:
eb:9a:e5:da:26:03:34:f4:7f:e3:1f:e9:61:fc:ec:92:ee:a3:
bd:45:0a:71:4a:70:d8:b3:a0:0b:25:0b:d3:ba:c3:53:00:aa:
7e:5b:74:84:ab:ac:a5:11:6b:7e:11:90:00:bd:3b:4d:e1:70:
c6:62:cc:24:a1:1f:37:8b:31:ec:59:b0:a4:03:8a:c4:c1:cb:
c9:97:d6:56:63:4e:a0:9a:e4:69:0b:37:70:a1:c2:2c:a0:27:
83:77:43:1a
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUVIen4j24TIXuGkWSsEbWHZyzg80wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM3Mjc1OENDQTM4MTkyMDI5MkI1RTBEMzM4RUNGODlE
MDAwMEZFRTAeFw0yNjA1MDMwMzEwMzhaFw0yNzA1MDIwMzE1MzhaMDMxMTAvBgNV
BAMTKEQ5RUI5NEEwRDkzODkzNEUwNkYxNkM5NTExNjg3N0Y2RkVGMDEyQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK8NPVMqgaPQrRo3rtISmOuRnc
oW6+ZtnD8KHE7WLrJUPdArDzKzU0O3BZ0I+ndGdiD4Ua5zx67aX0ZDVk4Orh17Mo
MCiFoxumoY3zqLX+ozfgXA3zOAnMDtmNi6QMeItw7YVlhyIbHepHA5Zg2lSNq61b
IqhhJlIiCqCesE7ZpqKwYqogPGAga+ejBDtQ1ZwUQPg+Qk+DiV97GJY6Uy/GcpPI
lkTTcf74k+rZn/0e0/cFi03ydTOjOxo0nyM20kUkyzF63iLROccWLHfWvhcyxDl8
5e90hxkLsz6OiAh3A3PEOYNLbiPji1b1juHiIiHuP03Xze1355h+n7oZix+PAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU2euUoNk4k04G8WyVEWh39v7wEsIwHwYDVR0j
BBgwFoAUY3J1jMo4GSApK14NM47PidAAD+4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZWM1MWU3YWItYTYzOC00ZmEwLWJiY2MtYjBmODU2YThhMTU3LzAvNjM3Mjc1OEND
QTM4MTkyMDI5MkI1RTBEMzM4RUNGODlEMDAwMEZFRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82MzcyNzU4Q0NBMzgxOTIwMjkyQjVFMEQzMzhFQ0Y4OUQwMDAw
RkVFLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2VjNTFlN2FiLWE2MzgtNGZhMC1i
YmNjLWIwZjg1NmE4YTE1Ny8wLzM0MzUyZTMxMzEzNTJlMzEzMzM2MmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzYzMzM4MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1ziDANBgkqhkiG
9w0BAQsFAAOCAQEAXj+QSMJQvQzPQx1Y981nKyh/6CPr1WB1D9mAdiENzpADLmrP
oWO5yfenNnqiWtciHt2MI5Wp4n7Pi8exb363+ZmXzIi4cA1yo/DTqyCf6Qj0ed+/
kt6Fgmumpg+3V8Wgm/aPOlL/y9FHEn/AGR1rYsN/Of9ic+3en7CjUhmx9nQ/b27j
daLfC6Yx5WSJFXwrFWbaPkrZJGdIKoAd2C+UGkVX65rl2iYDNPR/4x/pYfzsku6j
vUUKcUpw2LOgCyUL07rDUwCqflt0hKuspRFrfhGQAL07TeFwxmLMJKEfN4sx7Fmw
pAOKxMHLyZfWVmNOoJrkaQs3cKHCLKAng3dDGg==
-----END CERTIFICATE-----
Generated at Wed May 13 00:21:38 2026 by rpki-client