
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/34352e3131332e3232382e302f32322d3234203d3e20313339333936.roa
File: 34352e3131332e3232382e302f32322d3234203d3e20313339333936.roa (raw, json)
Hash identifier: Gy6gsEzVMHwZHSwsQeHdnkzzEfB+MjqsZcuu2XFRbNQ=
Subject key identifier: 6A:37:4D:3C:02:C7:32:73:A7:1F:C4:2B:9B:C0:5D:86:E0:F9:34:00
Certificate issuer: /CN=B4C6D06037582FD0F72239B7AEDCBD0F3342E230
Certificate serial: 162BA9B1C48986EE05A3E53F54361A7B31E49F17
Authority key identifier: B4:C6:D0:60:37:58:2F:D0:F7:22:39:B7:AE:DC:BD:0F:33:42:E2:30
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/34352e3131332e3232382e302f32322d3234203d3e20313339333936.roa
Signing time: Sun 03 May 2026 02:56:54 +0000
ROA not before: Sun 03 May 2026 02:51:54 +0000
ROA not after: Sun 02 May 2027 02:56:54 +0000
asID: 139396
IP address blocks: 45.113.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.crl
rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:2b:a9:b1:c4:89:86:ee:05:a3:e5:3f:54:36:1a:7b:31:e4:9f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4C6D06037582FD0F72239B7AEDCBD0F3342E230
Validity
Not Before: May 3 02:51:54 2026 GMT
Not After : May 2 02:56:54 2027 GMT
Subject: CN=6A374D3C02C73273A71FC42B9BC05D86E0F93400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:02:b2:98:8e:f6:f5:b7:d4:ba:53:05:d0:20:
3c:5c:03:35:a2:e4:77:3c:f6:d7:5a:90:e5:0e:b9:
7c:6f:20:65:44:dc:df:34:64:8d:7a:64:4a:15:f3:
99:19:c4:5e:08:e1:32:43:29:5e:60:e3:9d:f1:6f:
88:6d:95:7d:0c:fd:fe:c8:5c:79:ad:c8:be:62:c4:
35:f4:4c:aa:83:e3:12:8b:a0:cf:85:0f:1f:47:a5:
6c:f4:14:ea:45:02:56:4c:54:fd:3a:a3:d5:95:92:
bf:ce:4f:bc:d1:a2:6d:7c:91:31:f8:3b:b4:55:ba:
8a:ce:f2:39:44:e9:86:8e:8a:47:f6:4a:e3:3e:c7:
3b:19:f6:27:36:85:af:2a:06:eb:cb:5b:cd:a3:28:
af:96:b9:6c:9c:8b:b5:ba:49:db:4f:a7:e9:bf:15:
96:7f:1b:bf:f7:8b:22:1a:08:1b:74:d2:81:d4:93:
52:56:24:ac:9c:bb:5d:d7:c7:37:a1:d3:14:a1:99:
ac:4b:6a:2a:87:5f:2a:32:25:67:55:3a:e1:b9:b2:
07:0f:4f:d1:f3:8a:db:95:51:96:8b:6a:a0:51:7a:
54:08:8a:32:bd:10:3b:0b:65:25:bd:06:e1:ac:89:
80:94:b8:bb:60:a3:c6:0c:71:7a:e4:bf:7c:7b:e5:
29:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:37:4D:3C:02:C7:32:73:A7:1F:C4:2B:9B:C0:5D:86:E0:F9:34:00
X509v3 Authority Key Identifier:
keyid:B4:C6:D0:60:37:58:2F:D0:F7:22:39:B7:AE:DC:BD:0F:33:42:E2:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B4C6D06037582FD0F72239B7AEDCBD0F3342E230.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/34352e3131332e3232382e302f32322d3234203d3e20313339333936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.113.228.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:35:5c:19:d1:03:59:ff:f9:ea:2a:b5:f0:65:cc:b5:35:7e:
57:3a:b5:b7:59:02:fd:ea:d6:58:46:cc:7d:af:02:64:cd:11:
e5:90:ba:99:b6:a2:cb:63:64:0c:ac:c8:47:41:11:14:47:ec:
23:89:8e:7e:bf:40:7a:5b:97:b3:14:c8:4a:b0:84:51:93:22:
c0:05:b1:d2:dd:93:cd:d5:59:c1:a2:fa:ca:d8:bd:9e:23:38:
8e:1a:b0:92:73:b5:a0:73:f8:cf:65:1b:31:e9:4d:65:14:4a:
79:7f:44:a4:bc:25:60:54:52:5a:c1:72:b7:fa:f6:ad:dd:3b:
37:f9:38:ee:ef:0b:bc:aa:0e:e6:08:d7:69:43:f2:ba:6d:5e:
9e:43:a3:69:fa:20:d3:32:2c:70:1f:b9:73:de:2d:1f:af:bc:
dc:f3:38:1f:e4:a1:c4:4c:ce:7b:70:1f:8f:40:02:86:6d:a1:
0a:28:79:30:a8:a2:1e:cc:39:9a:78:5c:60:ad:fc:28:23:71:
14:63:d4:77:65:bb:0e:f1:00:3e:ac:dd:81:f6:b3:20:76:8e:
55:cf:d2:41:e1:f7:00:b6:da:40:64:ab:19:cf:95:f1:8a:36:
42:f4:d9:a5:96:14:bf:d6:9a:66:22:50:b2:84:8b:4b:13:fb:
27:61:23:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 10:48:47 2026 by rpki-client