
$ rpki-client -vvf rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/3131322e37382e34302e302f32312d3234203d3e203435333032.roa
File: 3131322e37382e34302e302f32312d3234203d3e203435333032.roa (raw, json)
Hash identifier: Bb70QI8I0CYc6IwIpgNXub4ms9l/sBWzH164tmo/pIU=
Subject key identifier: 32:DC:47:F5:6A:88:BC:34:3D:B1:EA:3A:F3:C0:9E:38:9C:DF:17:56
Certificate issuer: /CN=ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2
Certificate serial: 5D040E82EE2B74ADCEB89F0A9C3920C334A0B3A9
Authority key identifier: ED:41:DE:F7:56:30:D6:BC:76:B3:92:AB:AF:C7:A2:0B:95:98:A8:A2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/3131322e37382e34302e302f32312d3234203d3e203435333032.roa
Signing time: Sun 03 May 2026 03:19:00 +0000
ROA not before: Sun 03 May 2026 03:14:00 +0000
ROA not after: Sun 02 May 2027 03:19:00 +0000
asID: 45302
IP address blocks: 112.78.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.crl
rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:04:0e:82:ee:2b:74:ad:ce:b8:9f:0a:9c:39:20:c3:34:a0:b3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2
Validity
Not Before: May 3 03:14:00 2026 GMT
Not After : May 2 03:19:00 2027 GMT
Subject: CN=32DC47F56A88BC343DB1EA3AF3C09E389CDF1756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f5:6f:0e:4b:13:8d:04:30:26:a7:c5:7f:30:
dd:01:aa:35:5b:a6:98:86:65:28:52:60:06:67:e0:
fe:a6:6d:78:c1:25:ae:a8:0f:d1:e6:ef:1d:c4:62:
2c:e2:91:7f:0f:07:ae:c7:0c:38:d9:bc:a6:a8:0d:
a3:f0:47:f9:0b:3e:b7:f9:6d:fd:2c:40:52:e6:4e:
41:3e:dc:12:f4:cb:12:89:75:f9:ae:77:53:05:a3:
81:30:a8:cb:6c:58:05:e3:0f:65:41:99:1b:09:e1:
f0:50:77:4e:f2:95:e5:0f:c0:1d:08:7b:9c:47:7b:
ad:dd:21:6d:c3:92:53:79:29:6f:33:67:f7:1f:48:
ec:04:61:da:a0:db:17:29:44:ae:1b:65:69:93:97:
cd:81:fc:2e:d2:f8:11:30:95:69:ad:39:e2:8b:aa:
28:fa:9c:01:e0:83:c6:fd:b5:de:38:9f:f6:bc:cb:
2a:0d:c7:53:df:96:9f:13:2e:dd:96:20:4e:20:d0:
3f:a4:86:7c:03:af:07:de:87:80:16:09:2b:a9:8c:
03:77:1f:67:96:d7:5b:9f:49:db:2b:5b:d8:5d:da:
cd:e1:f5:a2:88:ad:6c:64:d0:0a:10:5c:19:c4:e4:
2d:e9:04:f3:41:6e:de:2a:60:cd:b5:36:aa:b5:96:
39:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DC:47:F5:6A:88:BC:34:3D:B1:EA:3A:F3:C0:9E:38:9C:DF:17:56
X509v3 Authority Key Identifier:
keyid:ED:41:DE:F7:56:30:D6:BC:76:B3:92:AB:AF:C7:A2:0B:95:98:A8:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/3131322e37382e34302e302f32312d3234203d3e203435333032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.78.40.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:1b:ff:09:2a:64:4b:6b:11:c4:ee:36:62:44:f1:ce:e5:76:
88:c9:c1:39:90:2b:24:53:9f:ea:8a:c7:79:9c:88:17:53:c8:
47:24:17:71:19:fe:4a:99:36:ea:36:ca:94:a7:0d:90:e6:62:
a1:7d:d9:85:bf:df:40:7c:78:2d:8a:17:4c:98:b0:dc:bc:e1:
88:b0:57:b9:df:dd:4c:d5:c9:a1:be:89:98:63:7e:45:a9:65:
fd:5a:aa:65:b1:65:20:b1:07:c0:56:87:49:43:84:b2:7f:1d:
2e:72:67:4a:79:d5:4a:13:3d:44:b2:54:c5:ce:0c:d1:41:41:
87:84:03:3b:dc:d0:cc:94:ca:ce:97:51:e9:e1:13:37:61:f7:
4d:f8:50:cb:67:09:c9:14:c6:22:9b:0e:b0:89:2d:a1:28:26:
c5:19:6e:ec:89:d3:a3:30:96:63:49:ee:52:03:4f:7c:94:43:
0b:ca:e6:31:fc:93:92:3f:95:fa:6f:05:68:a5:92:6b:b3:ff:
53:5c:8b:ab:f9:79:33:73:7b:28:82:4b:79:53:fd:ea:42:cd:
12:92:6c:29:4a:56:28:21:aa:39:b0:0e:26:c7:7f:3d:02:d1:
ed:1b:82:5d:6f:c1:4a:bc:71:72:17:bd:8f:b5:c4:cd:22:bd:
10:04:f3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:25:39 2026 by rpki-client