
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/34352e3132332e3134302e302f32342d3234203d3e20313532303439.roa
File: 34352e3132332e3134302e302f32342d3234203d3e20313532303439.roa (raw, json)
Hash identifier: WXJAvvrLyVsCEeqVhO/3ROtMMzsfMOa0TSLjg89eRJQ=
Subject key identifier: 63:2A:59:88:49:13:E9:58:B3:A1:E3:A1:42:23:A4:13:99:7D:DF:60
Certificate issuer: /CN=548D1B6B6BA9A165E77ADEEFE2842487042C325E
Certificate serial: 107277FB3D29421A4417683A8B9C4E96B5257360
Authority key identifier: 54:8D:1B:6B:6B:A9:A1:65:E7:7A:DE:EF:E2:84:24:87:04:2C:32:5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/548D1B6B6BA9A165E77ADEEFE2842487042C325E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/34352e3132332e3134302e302f32342d3234203d3e20313532303439.roa
Signing time: Sun 03 May 2026 03:19:41 +0000
ROA not before: Sun 03 May 2026 03:14:41 +0000
ROA not after: Sun 02 May 2027 03:19:41 +0000
asID: 152049
IP address blocks: 45.123.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.crl
rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/548D1B6B6BA9A165E77ADEEFE2842487042C325E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:40:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:72:77:fb:3d:29:42:1a:44:17:68:3a:8b:9c:4e:96:b5:25:73:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=548D1B6B6BA9A165E77ADEEFE2842487042C325E
Validity
Not Before: May 3 03:14:41 2026 GMT
Not After : May 2 03:19:41 2027 GMT
Subject: CN=632A59884913E958B3A1E3A14223A413997DDF60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ca:db:31:a5:93:6a:8c:78:f8:16:b7:8f:5f:
46:4c:5c:11:84:f2:bc:59:a9:3c:91:8b:12:d0:9e:
28:79:29:d4:9c:51:39:45:54:ae:f5:f1:f0:55:c4:
eb:fe:3f:a7:5b:ee:ff:95:eb:4d:6a:1a:f5:b3:06:
b4:b7:79:d8:0d:3b:0a:e6:b1:d7:81:47:bc:7b:1d:
85:66:de:db:94:6f:53:c5:86:d8:9d:a0:15:81:52:
c0:8c:19:74:05:53:e3:f2:01:d2:55:c0:9d:88:4a:
ee:04:c7:4d:94:ef:ff:8e:72:cd:a7:b6:a4:55:46:
eb:12:a0:09:38:e9:6e:64:dc:b5:6c:f8:1f:54:eb:
b5:22:d8:74:01:c9:d3:a2:5c:c0:34:20:9a:4b:ca:
e6:21:c6:1b:43:23:0b:0f:97:e4:fa:ed:09:95:a7:
a1:78:ce:f7:aa:70:0e:08:74:e7:96:ab:ac:80:71:
e6:a1:86:87:71:68:f7:14:c1:fe:88:9a:5d:85:6d:
17:74:e4:f1:06:b2:d8:de:c5:1e:33:75:a3:ea:45:
13:28:05:28:2d:38:b1:12:2c:c7:74:07:c3:b7:74:
bf:bd:4d:ee:f2:4b:c7:03:30:f6:50:bd:f4:56:f8:
47:4d:7f:64:a5:a6:ad:be:75:34:08:2d:91:59:2c:
18:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2A:59:88:49:13:E9:58:B3:A1:E3:A1:42:23:A4:13:99:7D:DF:60
X509v3 Authority Key Identifier:
keyid:54:8D:1B:6B:6B:A9:A1:65:E7:7A:DE:EF:E2:84:24:87:04:2C:32:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/548D1B6B6BA9A165E77ADEEFE2842487042C325E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/548D1B6B6BA9A165E77ADEEFE2842487042C325E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/34352e3132332e3134302e302f32342d3234203d3e20313532303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.123.140.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:be:fd:3e:10:13:a8:d4:5a:6f:c9:b9:62:02:f8:4d:97:a2:
55:e6:06:13:3e:9f:90:bf:af:f0:51:6d:4f:8d:6a:a2:73:90:
a9:f2:8c:b6:49:42:52:65:ff:cc:ef:ca:95:5a:7b:86:50:bb:
6a:ab:5c:50:c4:45:b6:c8:a3:90:dc:09:2f:78:2b:22:a8:ba:
87:dc:82:17:6f:c3:91:70:b4:4a:d3:e2:de:e3:f2:87:54:f4:
5e:c8:03:8c:17:c3:40:5b:64:96:10:87:ee:81:8d:02:ca:de:
2a:47:c1:8b:e7:f7:95:e0:80:b3:90:4f:20:70:ce:9f:e7:55:
08:fc:2f:c9:48:2b:00:60:e0:b9:a7:13:4b:39:a7:96:74:28:
a6:80:ce:3a:30:78:9f:6a:77:e5:d7:cc:c1:fd:b0:6a:d0:f0:
7b:72:16:f8:c9:b6:dd:47:e2:cf:78:41:68:a7:71:62:5f:98:
a2:56:5b:32:24:a5:69:ac:3b:29:a9:ba:b0:3d:c9:46:01:79:
aa:cb:ae:7d:4a:ca:3c:ed:d7:27:5f:78:f9:82:05:99:09:7d:
32:f5:63:74:40:13:96:96:77:93:b6:d1:72:77:97:30:2c:87:
35:72:09:8b:e6:09:c4:2f:05:b1:a7:47:78:b2:39:7e:3f:30:
78:fb:23:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:27:42 2026 by rpki-client