
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31362e302f32342d3234203d3e20323632393239.roa
File: 3132322e3132382e31362e302f32342d3234203d3e20323632393239.roa (raw, json)
Hash identifier: UaISP/uY7XkkGaHXlOEwAwG75CPuMEMHw61HTW14NUQ=
Subject key identifier: F9:7B:EA:8C:E4:47:61:01:8D:41:92:AA:89:33:6D:F3:5B:B7:BA:B2
Certificate issuer: /CN=684DE34A64F3AFED44A02385FCB35882FB2E6AA5
Certificate serial: 6E0FF3549B3CFDE44CC002E219A70D09A0A8E010
Authority key identifier: 68:4D:E3:4A:64:F3:AF:ED:44:A0:23:85:FC:B3:58:82:FB:2E:6A:A5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31362e302f32342d3234203d3e20323632393239.roa
Signing time: Sun 03 May 2026 02:25:58 +0000
ROA not before: Sun 03 May 2026 02:20:58 +0000
ROA not after: Sun 02 May 2027 02:25:58 +0000
asID: 262929
IP address blocks: 122.128.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl
rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 03:14:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:0f:f3:54:9b:3c:fd:e4:4c:c0:02:e2:19:a7:0d:09:a0:a8:e0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=684DE34A64F3AFED44A02385FCB35882FB2E6AA5
Validity
Not Before: May 3 02:20:58 2026 GMT
Not After : May 2 02:25:58 2027 GMT
Subject: CN=F97BEA8CE44761018D4192AA89336DF35BB7BAB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6a:16:6c:22:a9:bd:7c:ea:42:1c:fd:97:a4:
24:05:8b:60:c5:db:f2:4d:29:2c:47:b0:95:ad:24:
df:b4:be:ba:40:ad:59:4a:7e:7b:b6:9d:4d:d5:43:
76:25:a7:92:98:c7:3d:e1:59:15:05:67:85:08:1d:
5d:0e:51:32:f4:3a:87:aa:cb:d2:d8:e6:7a:7c:e6:
88:68:3a:5b:59:aa:5c:c3:08:c1:46:23:ee:69:9a:
28:be:4c:f3:10:5d:c3:f3:5e:50:13:1d:44:d2:4d:
11:76:9a:87:1b:f4:e4:c6:b7:34:58:80:9a:eb:d0:
fd:d3:e6:91:c9:ef:11:dd:46:62:1b:cb:5f:3b:44:
f6:c9:43:43:5f:d0:e5:10:9a:a3:ff:67:08:82:90:
ed:98:73:78:5c:a5:a0:a7:42:ec:64:80:9e:a8:f1:
47:b4:10:fd:e0:d7:4e:df:84:9a:9c:43:37:20:0e:
f9:2b:c5:fa:7e:2a:fc:70:10:68:29:42:03:70:47:
42:c0:07:ad:c2:be:a7:c6:11:dd:20:9f:96:66:92:
eb:0a:76:cb:5b:2d:05:72:f8:64:76:8f:69:3a:84:
44:1c:fe:60:e0:45:e5:23:72:e9:4c:a5:47:91:63:
1b:95:5d:fc:c4:61:b6:06:05:84:0b:15:ef:bd:bd:
98:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7B:EA:8C:E4:47:61:01:8D:41:92:AA:89:33:6D:F3:5B:B7:BA:B2
X509v3 Authority Key Identifier:
keyid:68:4D:E3:4A:64:F3:AF:ED:44:A0:23:85:FC:B3:58:82:FB:2E:6A:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/684DE34A64F3AFED44A02385FCB35882FB2E6AA5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3853f228-37f2-47d9-b9fe-476bade13393/0/3132322e3132382e31362e302f32342d3234203d3e20323632393239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.128.16.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:cd:29:ca:76:86:77:9b:45:7e:1b:0f:2d:3c:50:02:0f:53:
e1:82:33:07:05:a7:d2:2e:81:d6:50:ca:a7:3b:b2:0c:da:94:
bf:a7:e6:16:48:e2:ab:a4:eb:a7:bd:86:87:79:ca:5a:63:c9:
ed:04:ac:6a:70:9d:68:8d:f8:f9:fa:03:0a:73:ef:50:e1:19:
11:ca:cc:9a:a3:51:9c:39:dd:78:9f:a0:ae:47:da:e8:1a:ae:
a0:ab:3f:3c:37:fe:bc:1c:c0:4a:4e:15:96:83:7c:f8:a5:4b:
28:62:8d:df:7b:d2:b7:da:62:51:6b:b3:5e:6d:19:33:a1:f3:
34:71:28:0e:b6:c0:95:10:47:9f:bf:4d:7f:6c:85:fb:47:e0:
3b:61:54:5e:02:5f:4f:51:3d:5b:2f:69:83:30:84:00:92:ab:
b6:7d:ab:80:ee:af:41:08:30:00:09:c1:84:43:54:25:fc:24:
cc:ed:d2:76:ba:f6:64:9a:84:c3:c9:b7:c9:53:90:26:cd:60:
22:4c:6b:53:8c:6a:7b:d4:2a:db:0b:c4:0d:9b:03:8a:a3:71:
e7:1b:05:06:0d:2b:b3:75:28:1f:ce:59:73:fc:34:b3:02:a3:
c5:ac:a3:7b:06:5a:34:0b:b7:13:c1:f1:86:a1:d2:8e:53:c7:
2a:a4:78:9e
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUbg/zVJs8/eRMwALiGacNCaCo4BAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg0REUzNEE2NEYzQUZFRDQ0QTAyMzg1RkNCMzU4ODJG
QjJFNkFBNTAeFw0yNjA1MDMwMjIwNThaFw0yNzA1MDIwMjI1NThaMDMxMTAvBgNV
BAMTKEY5N0JFQThDRTQ0NzYxMDE4RDQxOTJBQTg5MzM2REYzNUJCN0JBQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChahZsIqm9fOpCHP2XpCQFi2DF
2/JNKSxHsJWtJN+0vrpArVlKfnu2nU3VQ3Ylp5KYxz3hWRUFZ4UIHV0OUTL0Ooeq
y9LY5np85ohoOltZqlzDCMFGI+5pmii+TPMQXcPzXlATHUTSTRF2mocb9OTGtzRY
gJrr0P3T5pHJ7xHdRmIby187RPbJQ0Nf0OUQmqP/ZwiCkO2Yc3hcpaCnQuxkgJ6o
8Ue0EP3g107fhJqcQzcgDvkrxfp+KvxwEGgpQgNwR0LAB63CvqfGEd0gn5ZmkusK
dstbLQVy+GR2j2k6hEQc/mDgReUjculMpUeRYxuVXfzEYbYGBYQLFe+9vZiLAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU+XvqjORHYQGNQZKqiTNt81u3urIwHwYDVR0j
BBgwFoAUaE3jSmTzr+1EoCOF/LNYgvsuaqUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Mzg1M2YyMjgtMzdmMi00N2Q5LWI5ZmUtNDc2YmFkZTEzMzkzLzAvNjg0REUzNEE2
NEYzQUZFRDQ0QTAyMzg1RkNCMzU4ODJGQjJFNkFBNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82ODRERTM0QTY0RjNBRkVENDRBMDIzODVGQ0IzNTg4MkZCMkU2
QUE1LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzM4NTNmMjI4LTM3ZjItNDdkOS1i
OWZlLTQ3NmJhZGUxMzM5My8wLzMxMzIzMjJlMzEzMjM4MmUzMTM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzNjMyMzkzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAeoAQMA0GCSqG
SIb3DQEBCwUAA4IBAQAMzSnKdoZ3m0V+Gw8tPFACD1PhgjMHBafSLoHWUMqnO7IM
2pS/p+YWSOKrpOunvYaHecpaY8ntBKxqcJ1ojfj5+gMKc+9Q4RkRysyao1GcOd14
n6CuR9roGq6gqz88N/68HMBKThWWg3z4pUsoYo3fe9K32mJRa7NebRkzofM0cSgO
tsCVEEefv01/bIX7R+A7YVReAl9PUT1bL2mDMIQAkqu2fauA7q9BCDAACcGEQ1Ql
/CTM7dJ2uvZkmoTDybfJU5AmzWAiTGtTjGp71CrbC8QNmwOKo3HnGwUGDSuzdSgf
zllz/DSzAqPFrKN7Blo0C7cTwfGGodKOU8cqpHie
-----END CERTIFICATE-----
Generated at Sun May 3 20:01:50 2026 by rpki-client