
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/34352e3235302e3130312e302f32342d3234203d3e203435373135.roa
File: 34352e3235302e3130312e302f32342d3234203d3e203435373135.roa (raw, json)
Hash identifier: jkQHVpY+b8x1fVrBYmfrV/VR7GaRoecR+sAgoMdC2Ko=
Subject key identifier: 46:EA:C6:CE:A4:15:94:3B:8E:0D:5A:AC:DA:62:FB:15:61:4B:AA:B1
Certificate issuer: /CN=0A40D86EAE29C558B2406A52DF151128A596DFEF
Certificate serial: 1BBA72E6498D5A3FF78BC5FDCCA4899955EA018F
Authority key identifier: 0A:40:D8:6E:AE:29:C5:58:B2:40:6A:52:DF:15:11:28:A5:96:DF:EF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A40D86EAE29C558B2406A52DF151128A596DFEF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/34352e3235302e3130312e302f32342d3234203d3e203435373135.roa
Signing time: Fri 16 Oct 2026 09:32:28 +0000
ROA not before: Fri 16 Oct 2026 09:27:28 +0000
ROA not after: Fri 15 Oct 2027 09:32:28 +0000
asID: 45715
IP address blocks: 45.250.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/0A40D86EAE29C558B2406A52DF151128A596DFEF.crl
rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/0A40D86EAE29C558B2406A52DF151128A596DFEF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A40D86EAE29C558B2406A52DF151128A596DFEF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:ba:72:e6:49:8d:5a:3f:f7:8b:c5:fd:cc:a4:89:99:55:ea:01:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A40D86EAE29C558B2406A52DF151128A596DFEF
Validity
Not Before: Oct 16 09:27:28 2026 GMT
Not After : Oct 15 09:32:28 2027 GMT
Subject: CN=46EAC6CEA415943B8E0D5AACDA62FB15614BAAB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:db:49:6c:da:70:09:06:c7:04:5c:45:9b:8c:
72:97:c2:c5:34:a4:d2:a0:00:2d:89:29:6f:c9:bf:
dc:56:39:9d:28:55:9e:d6:73:4c:d7:35:58:69:c5:
84:2e:26:c5:e5:15:13:20:61:ca:6d:91:0d:6b:54:
bf:34:85:2a:0a:61:93:f4:c0:e2:42:f7:2d:bc:40:
af:79:75:fb:6c:14:6b:78:a3:75:68:da:00:ee:e6:
c3:bf:98:1a:27:6d:4c:33:46:c0:38:13:b8:38:32:
c7:e1:63:4a:41:b5:05:0f:91:fa:a4:37:e3:bc:3b:
04:ce:05:ab:d4:67:84:39:f1:31:49:a9:ac:c4:9b:
34:3c:73:a0:c7:ab:b6:6a:41:9a:b9:69:c0:e5:b4:
c2:57:b6:6c:66:31:12:30:39:5f:12:a3:17:e7:5d:
87:b0:16:3b:29:bf:44:64:5a:62:10:da:40:d3:86:
c4:62:44:72:d9:de:13:a9:28:a6:e3:97:ee:e6:bb:
da:46:11:86:63:27:15:78:c4:55:ff:c0:a9:8e:1c:
71:67:94:50:95:a8:89:29:6f:88:a4:1d:6b:e1:c9:
7e:d6:38:c4:2d:59:dd:62:fc:0d:b0:98:00:5b:50:
2e:94:13:12:16:ba:7c:ab:d4:02:eb:d4:2d:12:04:
84:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EA:C6:CE:A4:15:94:3B:8E:0D:5A:AC:DA:62:FB:15:61:4B:AA:B1
X509v3 Authority Key Identifier:
keyid:0A:40:D8:6E:AE:29:C5:58:B2:40:6A:52:DF:15:11:28:A5:96:DF:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/0A40D86EAE29C558B2406A52DF151128A596DFEF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A40D86EAE29C558B2406A52DF151128A596DFEF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/34352e3235302e3130312e302f32342d3234203d3e203435373135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.250.101.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:ab:3c:b7:92:4e:f1:50:a1:25:89:8d:3b:30:5c:cf:e7:f9:
bd:85:a7:8d:92:c9:58:f1:e5:a3:35:1a:27:32:a8:82:03:03:
1f:72:72:32:2f:69:17:a3:e2:57:37:0f:cb:3f:11:09:9b:c4:
af:0f:e6:a1:f9:58:1d:cf:55:72:d2:19:a1:b0:e9:10:4f:89:
af:d8:8b:57:ac:f0:d2:6e:d5:13:c9:bb:39:31:fa:5e:9a:35:
a0:b8:f1:bb:14:75:b6:bc:37:28:2c:e2:f5:05:8a:02:48:5b:
e5:94:13:53:b4:7c:5c:d0:2d:36:20:70:b2:52:e5:23:f5:f6:
1d:33:38:83:bb:34:ed:8c:61:58:a5:cc:b9:de:fe:39:88:91:
18:61:54:80:0e:f6:56:71:05:7b:1c:9b:15:cb:e3:7a:9d:a0:
2b:29:8f:b9:b5:92:99:21:d5:f5:ce:38:3b:f1:80:34:f1:4a:
d1:4e:99:64:03:51:56:22:51:41:39:f0:2f:09:ee:27:c1:d5:
6c:eb:c4:a9:d2:99:51:5f:37:a6:5b:0e:0f:4b:da:5c:63:ca:
26:b8:9e:24:59:bf:98:be:a3:e8:00:11:76:8d:28:91:9d:a1:
40:13:4c:f8:1c:47:f5:c4:e3:5b:0a:65:e3:98:bb:da:b5:83:
c8:4e:38:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:52:36 2026 by rpki-client