
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/1/3134342e37392e3232392e302f32342d3234203d3e20313432313933.roa
File: 3134342e37392e3232392e302f32342d3234203d3e20313432313933.roa (raw, json)
Hash identifier: z0l7Jg74I6/X1fUoqM2N8PY0DnkyoPTf46foVKvgxYU=
Subject key identifier: 00:A5:30:14:77:C3:C9:6A:96:F3:81:CD:DD:96:AA:D7:79:80:20:D0
Certificate issuer: /CN=87357D7017B31FB08B42DD4ECE6B29F36D937E74
Certificate serial: 3DC3B2F54849AC66C1D345CB7B69B503CEE808F1
Authority key identifier: 87:35:7D:70:17:B3:1F:B0:8B:42:DD:4E:CE:6B:29:F3:6D:93:7E:74
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/87357D7017B31FB08B42DD4ECE6B29F36D937E74.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/1/3134342e37392e3232392e302f32342d3234203d3e20313432313933.roa
Signing time: Wed 30 Sep 2026 15:02:18 +0000
ROA not before: Wed 30 Sep 2026 14:57:18 +0000
ROA not after: Wed 29 Sep 2027 15:02:18 +0000
asID: 142193
IP address blocks: 144.79.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/1/87357D7017B31FB08B42DD4ECE6B29F36D937E74.crl
rsync://rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/1/87357D7017B31FB08B42DD4ECE6B29F36D937E74.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/87357D7017B31FB08B42DD4ECE6B29F36D937E74.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 14:49:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:c3:b2:f5:48:49:ac:66:c1:d3:45:cb:7b:69:b5:03:ce:e8:08:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87357D7017B31FB08B42DD4ECE6B29F36D937E74
Validity
Not Before: Sep 30 14:57:18 2026 GMT
Not After : Sep 29 15:02:18 2027 GMT
Subject: CN=00A5301477C3C96A96F381CDDD96AAD7798020D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:22:41:4a:84:80:7a:57:01:95:98:bd:07:85:
40:70:7c:fe:9e:6a:29:67:0a:51:25:67:8a:e8:43:
1f:b8:f6:bb:4f:db:45:13:7c:52:78:3e:27:74:7b:
91:62:e9:21:c9:2f:99:d9:b3:ad:c0:64:b2:d3:d8:
18:3f:2d:ec:98:f4:1b:99:15:c7:6e:2d:84:1d:92:
17:64:4c:c5:6f:3c:8c:4f:57:f4:30:12:f7:03:24:
58:d8:3a:99:94:ba:a9:6c:57:dc:21:5d:9a:3a:66:
d6:e9:91:ab:7f:6e:cd:97:80:6f:b8:f1:b0:de:4f:
1f:54:d2:94:e7:33:a6:b5:ad:3c:35:0e:6f:1d:14:
d0:5f:ef:21:b4:f1:f8:76:75:95:84:19:07:7e:d8:
d2:3e:02:a0:dd:ea:48:94:d6:ac:e4:dd:6f:1b:67:
71:a4:17:d5:e1:97:ac:82:5a:c0:56:ef:ce:85:42:
2c:91:0e:79:b4:da:fe:cd:90:e9:87:0f:a2:68:c3:
9d:7e:d0:ac:d5:34:d7:31:00:8f:eb:9e:4f:71:23:
cb:e3:c7:93:0e:79:89:3e:aa:d3:3a:4f:cc:38:47:
c4:b6:9c:59:43:3a:2a:d0:75:52:a3:b0:d5:95:f3:
ba:27:b4:3c:ac:24:0a:32:02:53:c5:dd:3f:15:09:
cc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A5:30:14:77:C3:C9:6A:96:F3:81:CD:DD:96:AA:D7:79:80:20:D0
X509v3 Authority Key Identifier:
keyid:87:35:7D:70:17:B3:1F:B0:8B:42:DD:4E:CE:6B:29:F3:6D:93:7E:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/1/87357D7017B31FB08B42DD4ECE6B29F36D937E74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/87357D7017B31FB08B42DD4ECE6B29F36D937E74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/1/3134342e37392e3232392e302f32342d3234203d3e20313432313933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.79.229.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:b8:cc:99:8c:ea:08:6f:7b:94:ba:55:18:e1:8c:6d:29:a9:
fa:ee:b0:88:a1:ab:2f:72:0b:cb:b1:42:bc:8b:40:e0:8d:48:
5f:37:23:3a:5e:90:b1:58:28:2b:e5:46:f0:33:94:de:69:b6:
3e:b9:2a:1d:b8:8e:7b:53:0f:f5:a8:9c:b8:64:ca:22:a1:60:
ea:08:af:50:6f:19:7a:d1:c6:95:9c:06:66:88:c8:10:cd:d4:
ed:41:e1:be:ba:95:00:a3:db:d4:a4:f7:95:67:66:6b:ef:a9:
15:63:19:d8:84:5b:03:99:2e:f0:c2:06:fb:2e:06:cb:55:ef:
8f:99:8a:15:11:db:85:d3:4f:37:d2:fc:b2:19:e9:49:61:1e:
77:7f:87:03:ce:12:6e:2f:93:8c:bb:60:54:75:f9:03:37:c9:
fb:c8:76:11:eb:7f:96:68:29:3f:29:ca:b2:92:53:cc:a1:22:
b2:ff:d1:bd:f0:99:f4:b3:e9:c5:55:4e:df:83:6d:ce:1f:21:
ff:a0:b1:5e:fd:b2:35:31:f9:ce:c9:2d:58:0e:dc:05:d0:9e:
01:3b:84:65:bf:83:1d:2a:6d:ab:2c:fc:58:9a:ea:21:d9:82:
a6:fa:2b:68:fd:b1:98:c3:a1:43:a1:79:53:1b:d2:b5:78:ef:
8e:75:39:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:01:26 2026 by rpki-client