
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/3130312e302e342e302f32322d3234203d3e203535363730.roa
File: 3130312e302e342e302f32322d3234203d3e203535363730.roa (raw, json)
Hash identifier: ArAw1U/ObqC6nylMjrPDR+er3LEvT016ghjJZD3baiw=
Subject key identifier: B4:B2:B9:70:7C:F4:7B:12:1C:66:E6:B9:84:8E:92:36:AC:E3:F4:EC
Certificate issuer: /CN=B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF
Certificate serial: 3E3685278FA984C88D7FDBB826A6D94150F33825
Authority key identifier: B6:4A:AD:62:D9:02:F6:08:BB:95:FD:0B:D3:F1:DA:8A:80:77:B4:EF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/3130312e302e342e302f32322d3234203d3e203535363730.roa
Signing time: Sun 03 May 2026 02:45:46 +0000
ROA not before: Sun 03 May 2026 02:40:46 +0000
ROA not after: Sun 02 May 2027 02:45:46 +0000
asID: 55670
IP address blocks: 101.0.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.crl
rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 07:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:36:85:27:8f:a9:84:c8:8d:7f:db:b8:26:a6:d9:41:50:f3:38:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF
Validity
Not Before: May 3 02:40:46 2026 GMT
Not After : May 2 02:45:46 2027 GMT
Subject: CN=B4B2B9707CF47B121C66E6B9848E9236ACE3F4EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:20:aa:58:5a:c3:40:20:ad:44:6c:c1:d5:66:
90:31:b6:3d:22:aa:68:c9:55:e8:1a:03:e5:51:a3:
37:48:51:8e:1c:5d:bf:f9:aa:d9:3a:02:73:99:05:
b9:11:b4:f8:70:fc:6c:19:c5:93:76:99:74:0b:32:
30:68:69:05:9c:47:ad:69:7d:cc:54:13:4d:d0:41:
7a:8b:be:d5:4a:d3:d5:5f:57:d8:a4:11:82:5f:93:
77:54:1f:69:9f:67:cd:3c:4b:f3:d9:95:f6:5b:2a:
b0:97:ba:31:3b:a4:17:d2:2d:fb:e8:b5:db:f7:40:
dc:75:bf:43:f3:07:0b:65:19:4d:b6:36:e0:02:18:
24:1a:38:7c:5f:d7:12:6c:98:0b:07:48:85:3b:cc:
23:42:49:80:75:a1:2d:0d:4a:12:ee:de:a3:56:1f:
69:ca:36:f5:a0:ca:8f:aa:67:fb:8f:ea:02:4f:da:
dc:4c:ff:25:08:11:1b:8b:63:82:8b:e7:6d:da:12:
16:c0:3c:ff:1c:0b:a8:55:a5:65:67:7a:7a:ca:ce:
6b:2a:bf:ce:13:07:2d:99:ac:ab:61:8c:12:11:72:
b8:99:d1:e8:fe:66:d3:2a:c6:8d:13:7b:cb:eb:eb:
03:4d:e2:da:f1:1b:5c:1c:61:69:b0:df:65:7f:01:
d4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B2:B9:70:7C:F4:7B:12:1C:66:E6:B9:84:8E:92:36:AC:E3:F4:EC
X509v3 Authority Key Identifier:
keyid:B6:4A:AD:62:D9:02:F6:08:BB:95:FD:0B:D3:F1:DA:8A:80:77:B4:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B64AAD62D902F608BB95FD0BD3F1DA8A8077B4EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/3130312e302e342e302f32322d3234203d3e203535363730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.0.4.0/22
Signature Algorithm: sha256WithRSAEncryption
90:c8:05:9d:29:7c:9e:a3:0e:01:0c:6f:74:08:2f:62:a0:1c:
b5:ad:9d:d6:b4:77:b4:9e:bf:2c:cb:8b:9e:53:fc:34:55:04:
a3:7e:50:44:76:5d:b9:44:ec:6b:80:ca:ad:1d:2a:b1:96:57:
ad:22:4f:b9:c8:ca:ae:59:85:3d:4c:cc:9c:a9:8b:7b:42:88:
7b:d2:7e:3c:bb:b9:f0:c2:3b:d3:51:56:05:49:f9:5c:56:ca:
b1:f7:96:36:d3:fd:cc:77:b5:de:48:69:0d:3a:b7:32:91:6b:
b1:36:ec:fc:fa:74:15:27:bd:f9:13:01:f8:a8:ad:6f:a5:d5:
f7:53:6b:7f:f2:8b:9b:fa:12:8f:16:d2:39:72:58:1b:b0:d7:
1a:fc:74:13:8c:7f:00:d0:e0:b9:97:29:46:33:b6:cb:79:ae:
6e:0a:9a:ed:2e:b0:7b:4a:6c:1b:ee:9e:ed:61:36:e0:36:f1:
1a:cc:9e:79:19:92:f2:18:76:37:bf:c8:36:28:1b:74:4b:8c:
d4:e7:47:29:61:e2:6c:f2:7c:0c:53:7a:c8:de:2b:39:65:b0:
96:02:03:2f:18:1d:00:c5:24:38:73:1b:73:a9:00:76:11:1e:
f9:ff:e5:3c:69:01:10:f4:c0:6f:58:82:34:c8:20:73:74:28:
95:f6:0d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 18:55:04 2026 by rpki-client