
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/34392e302e32342e302f32332d3234203d3e203137393935.roa
File: 34392e302e32342e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier: JCF66MyDOPPpoP3h97z544G+/kStkUh5SxWxjVUNyZE=
Subject key identifier: 81:04:BE:89:DB:48:BC:7E:DC:65:A4:88:30:5D:49:C2:D5:0F:2D:92
Certificate issuer: /CN=9EDD58FB55B45037D75C83359B697B445D7A5AF0
Certificate serial: 6040A3AC9CB722065EA92259979AB76EDB3A4618
Authority key identifier: 9E:DD:58:FB:55:B4:50:37:D7:5C:83:35:9B:69:7B:44:5D:7A:5A:F0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/34392e302e32342e302f32332d3234203d3e203137393935.roa
Signing time: Sun 03 May 2026 03:19:42 +0000
ROA not before: Sun 03 May 2026 03:14:42 +0000
ROA not after: Sun 02 May 2027 03:19:42 +0000
asID: 17995
IP address blocks: 49.0.24.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl
rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 08 May 2026 20:12:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:40:a3:ac:9c:b7:22:06:5e:a9:22:59:97:9a:b7:6e:db:3a:46:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9EDD58FB55B45037D75C83359B697B445D7A5AF0
Validity
Not Before: May 3 03:14:42 2026 GMT
Not After : May 2 03:19:42 2027 GMT
Subject: CN=8104BE89DB48BC7EDC65A488305D49C2D50F2D92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2b:9a:da:fb:a5:7f:3e:c5:50:9b:ef:cf:44:
e2:22:ac:11:49:ef:2b:f2:90:67:9f:fb:5a:b1:59:
1a:83:2e:72:cc:79:47:c5:7c:4c:b6:19:cd:6c:11:
2c:bc:97:4c:37:73:de:63:b9:c3:3c:60:fa:a6:90:
cb:7c:03:96:be:bd:ad:38:b3:4a:1c:f1:cf:48:2d:
c2:19:9f:a7:63:dd:63:2b:6a:2a:04:f4:22:2f:61:
7d:c6:91:af:a0:54:45:52:7e:70:68:f0:28:24:0f:
04:d3:1c:eb:ed:d0:bb:90:df:bb:4a:c0:7f:b9:b7:
83:e9:1d:3b:b5:dc:16:95:2a:f2:f8:de:d4:cf:3c:
6c:94:0c:b9:d7:a0:2b:b2:9d:e6:49:79:6f:5f:10:
74:bd:68:09:a1:cd:2b:17:1b:37:d9:f0:80:86:e3:
26:33:e8:aa:52:ba:4e:c3:24:ee:e6:f3:89:a9:4f:
60:5b:54:d3:03:ac:b7:87:b4:37:14:88:02:91:93:
ed:3d:0f:c1:be:bc:bf:ac:7b:c4:4d:d5:cc:78:ca:
ac:ca:66:ca:34:1f:d0:2c:d9:56:9a:2e:4f:38:90:
11:0e:3f:45:97:38:fb:c1:9e:6d:2c:53:9a:e0:46:
2a:a0:67:6d:73:ea:9e:88:48:e1:17:53:b7:c9:5e:
bb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:04:BE:89:DB:48:BC:7E:DC:65:A4:88:30:5D:49:C2:D5:0F:2D:92
X509v3 Authority Key Identifier:
keyid:9E:DD:58:FB:55:B4:50:37:D7:5C:83:35:9B:69:7B:44:5D:7A:5A:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/9EDD58FB55B45037D75C83359B697B445D7A5AF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EDD58FB55B45037D75C83359B697B445D7A5AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/34392e302e32342e302f32332d3234203d3e203137393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
49.0.24.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:ed:e9:0a:81:dc:d4:32:1f:98:10:41:89:60:a6:fe:d0:54:
60:ff:84:f7:fe:7b:c5:7a:05:93:97:88:69:fc:6b:9d:29:1b:
d4:ae:26:f1:ac:a8:2b:9f:bb:e7:eb:84:f2:50:14:86:ea:96:
43:e1:71:0d:3a:a5:f9:b2:1b:ec:d3:8d:43:0d:26:4a:a7:87:
2b:34:ca:4f:73:68:83:af:39:f7:be:93:6c:92:19:fe:4b:1d:
b8:66:07:28:a0:31:47:a0:62:6c:88:c5:47:0a:30:72:44:6e:
8e:6e:c0:f2:82:d2:4c:77:f3:ac:26:67:76:09:59:fc:d4:b0:
e7:2d:4f:c2:48:1d:9b:46:10:47:62:2b:d7:31:79:51:7c:cd:
db:86:b2:91:0f:ee:6b:ec:10:87:cc:4a:28:bc:85:87:fc:b1:
cf:37:42:4c:8e:e5:0e:e4:01:9c:ac:5d:5f:84:e6:bd:2f:27:
b4:31:8b:12:03:b7:1b:01:4e:79:39:4c:ce:d5:84:25:75:78:
68:29:21:97:f6:67:7d:5b:be:22:53:5f:fe:55:44:9d:fe:70:
52:52:33:c0:1f:39:3f:6b:9e:f0:4a:58:1e:1a:42:55:e0:11:
f3:5f:66:15:e0:87:0f:b8:d3:78:3d:72:67:e2:ac:b6:f0:6e:
5d:05:73:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 06:33:56 2026 by rpki-client