
$ rpki-client -vvf repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/3230322e35322e35382e302f32332d3233203d3e203436303538.roa
File: 3230322e35322e35382e302f32332d3233203d3e203436303538.roa (raw, json)
Hash identifier: +2eNuPGbqptQPyg3bNKQMEAlM7YvhIaWTV375v+atbI=
Subject key identifier: 93:7D:F4:E6:F6:23:49:35:55:0D:31:3F:0D:DC:C7:2E:73:3E:A1:AD
Certificate issuer: /CN=2E55483B906244D2DA357F014F9AFA606D95C345
Certificate serial: 5F0DDE8422632C9DBA336E27399DDDC4A8E1C210
Authority key identifier: 2E:55:48:3B:90:62:44:D2:DA:35:7F:01:4F:9A:FA:60:6D:95:C3:45
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/3230322e35322e35382e302f32332d3233203d3e203436303538.roa
Signing time: Sun 22 Mar 2026 08:00:01 +0000
ROA not before: Sun 22 Mar 2026 07:55:01 +0000
ROA not after: Sun 21 Mar 2027 08:00:01 +0000
asID: 46058
IP address blocks: 202.52.58.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.crl
rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 01:54:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:0d:de:84:22:63:2c:9d:ba:33:6e:27:39:9d:dd:c4:a8:e1:c2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E55483B906244D2DA357F014F9AFA606D95C345
Validity
Not Before: Mar 22 07:55:01 2026 GMT
Not After : Mar 21 08:00:01 2027 GMT
Subject: CN=937DF4E6F6234935550D313F0DDCC72E733EA1AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:15:bf:5e:87:58:12:82:b2:da:fb:f5:52:32:
ac:50:ec:be:b4:b5:ba:73:02:d7:57:92:e9:77:5f:
fa:45:ad:ff:a9:27:e3:9a:d3:01:d4:80:09:2d:d4:
c0:65:1b:da:15:cf:a0:d4:29:f6:f4:a3:38:04:3d:
5b:4c:f5:56:1c:36:1d:95:72:f7:3e:1f:b1:6c:1b:
fb:c4:b5:15:e3:84:c5:85:5c:90:65:5c:26:85:c1:
ff:d8:73:d3:2b:85:09:7f:46:33:6d:77:06:de:94:
eb:05:1f:9c:a1:ba:89:bf:b2:3a:7f:35:c3:fd:12:
90:ab:bf:6f:31:3b:74:a3:6e:8b:06:fb:dd:26:65:
8a:9f:11:3f:d9:74:c5:9f:e8:fd:d2:e0:9d:0a:a0:
da:e7:5e:b4:b3:61:1a:c4:50:44:b6:e7:85:da:ef:
d6:1a:eb:03:58:3c:3f:71:e2:05:18:41:f8:60:02:
91:e6:3a:1a:f8:55:5a:f4:97:8f:68:30:54:ce:59:
ce:91:b9:31:1b:2e:e4:a5:23:84:df:90:cd:19:8f:
98:ae:06:fd:ff:b7:6f:c0:5e:46:c0:be:7f:eb:5f:
dc:da:82:d4:ed:79:83:6b:28:4c:72:8e:14:b7:3d:
ca:08:d4:e2:4d:3f:e6:64:85:f9:ef:10:0e:a3:a1:
5d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7D:F4:E6:F6:23:49:35:55:0D:31:3F:0D:DC:C7:2E:73:3E:A1:AD
X509v3 Authority Key Identifier:
keyid:2E:55:48:3B:90:62:44:D2:DA:35:7F:01:4F:9A:FA:60:6D:95:C3:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/3230322e35322e35382e302f32332d3233203d3e203436303538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.52.58.0/23
Signature Algorithm: sha256WithRSAEncryption
05:5a:d6:8a:a9:60:d4:43:96:da:62:69:5c:fb:df:9a:19:3f:
7c:b4:93:4a:27:fa:e1:f9:d0:0c:0a:2b:b4:e9:27:6f:e6:e7:
5d:c7:39:8d:b5:d7:fb:04:d9:0f:df:f6:5f:93:5a:83:84:93:
94:f1:af:c1:23:c1:85:f2:2b:06:4c:b2:0d:21:08:80:85:3a:
e4:77:a6:69:72:7e:80:31:51:47:b3:62:95:48:16:c1:8d:7e:
bd:3a:89:21:1e:fa:ff:28:b3:57:df:07:aa:37:92:8e:81:f5:
52:19:ec:77:c0:c2:78:34:43:0f:f0:d5:93:40:94:c4:11:5b:
06:33:ba:76:34:10:49:16:1f:56:5e:40:81:db:f4:15:64:a8:
13:1d:26:0b:79:74:54:31:02:11:65:70:e0:ee:c2:2b:75:14:
9f:5f:4d:02:90:a9:2a:71:a0:d8:ac:ff:50:c4:56:dd:0b:33:
d8:1b:df:43:22:5a:12:09:ce:05:93:20:55:e2:2d:1e:cd:fa:
79:c4:fc:3b:fe:4f:3e:7b:52:4d:a6:46:94:54:20:61:7c:00:
3c:48:4b:8b:1a:54:07:fe:6a:62:44:1d:05:bc:fb:07:13:83:
ef:d4:a3:3a:75:17:8a:57:e5:d8:21:69:1a:33:dc:c2:0d:23:
5b:3c:9d:68
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUXw3ehCJjLJ26M24nOZ3dxKjhwhAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU1NTQ4M0I5MDYyNDREMkRBMzU3RjAxNEY5QUZBNjA2
RDk1QzM0NTAeFw0yNjAzMjIwNzU1MDFaFw0yNzAzMjEwODAwMDFaMDMxMTAvBgNV
BAMTKDkzN0RGNEU2RjYyMzQ5MzU1NTBEMzEzRjBERENDNzJFNzMzRUExQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlFb9eh1gSgrLa+/VSMqxQ7L60
tbpzAtdXkul3X/pFrf+pJ+Oa0wHUgAkt1MBlG9oVz6DUKfb0ozgEPVtM9VYcNh2V
cvc+H7FsG/vEtRXjhMWFXJBlXCaFwf/Yc9MrhQl/RjNtdwbelOsFH5yhuom/sjp/
NcP9EpCrv28xO3SjbosG+90mZYqfET/ZdMWf6P3S4J0KoNrnXrSzYRrEUES254Xa
79Ya6wNYPD9x4gUYQfhgApHmOhr4VVr0l49oMFTOWc6RuTEbLuSlI4TfkM0Zj5iu
Bv3/t2/AXkbAvn/rX9zagtTteYNrKExyjhS3PcoI1OJNP+ZkhfnvEA6joV1HAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUk3305vYjSTVVDTE/DdzHLnM+oa0wHwYDVR0j
BBgwFoAULlVIO5BiRNLaNX8BT5r6YG2Vw0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MmUyM2RjNC00ZmQ1LTQzZTItYmI2YS00ZmRjMzg3ZWJjNTgvMC8yRTU1NDgzQjkw
NjI0NEQyREEzNTdGMDE0RjlBRkE2MDZEOTVDMzQ1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMkU1NTQ4M0I5MDYyNDREMkRBMzU3RjAxNEY5QUZBNjA2RDk1
QzM0NS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EyZTIzZGM0LTRmZDUtNDNlMi1i
YjZhLTRmZGMzODdlYmM1OC8wLzMyMzAzMjJlMzUzMjJlMzUzODJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDM0MzYzMDM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHKNDowDQYJKoZIhvcN
AQELBQADggEBAAVa1oqpYNRDltpiaVz735oZP3y0k0on+uH50AwKK7TpJ2/m513H
OY211/sE2Q/f9l+TWoOEk5Txr8EjwYXyKwZMsg0hCICFOuR3pmlyfoAxUUezYpVI
FsGNfr06iSEe+v8os1ffB6o3ko6B9VIZ7HfAwng0Qw/w1ZNAlMQRWwYzunY0EEkW
H1ZeQIHb9BVkqBMdJgt5dFQxAhFlcODuwit1FJ9fTQKQqSpxoNis/1DEVt0LM9gb
30MiWhIJzgWTIFXiLR7N+nnE/Dv+Tz57Uk2mRpRUIGF8ADxIS4saVAf+amJEHQW8
+wcTg+/Uozp1F4pX5dghaRoz3MINI1s8nWg=
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:28:01 2026 by rpki-client