
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/3230332e3131342e3232362e302f32342d3234203d3e203435373033.roa
File: 3230332e3131342e3232362e302f32342d3234203d3e203435373033.roa (raw, json)
Hash identifier: RQ6zv/OcNcVun/cTLFBfmSLzfQJzMXKgcoU2+4K4YAw=
Subject key identifier: 17:64:D4:57:1E:16:53:6C:79:2D:A3:40:77:FD:0D:5B:29:23:5D:D4
Certificate issuer: /CN=AA23A685C6726226B631C7DF6C89BB4413F6F3B6
Certificate serial: C951B1DEC5DA989DAB2A17187A635E9A0A855C
Authority key identifier: AA:23:A6:85:C6:72:62:26:B6:31:C7:DF:6C:89:BB:44:13:F6:F3:B6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/3230332e3131342e3232362e302f32342d3234203d3e203435373033.roa
Signing time: Sun 03 May 2026 02:10:59 +0000
ROA not before: Sun 03 May 2026 02:05:59 +0000
ROA not after: Sun 02 May 2027 02:10:59 +0000
asID: 45703
IP address blocks: 203.114.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.crl
rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
c9:51:b1:de:c5:da:98:9d:ab:2a:17:18:7a:63:5e:9a:0a:85:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA23A685C6726226B631C7DF6C89BB4413F6F3B6
Validity
Not Before: May 3 02:05:59 2026 GMT
Not After : May 2 02:10:59 2027 GMT
Subject: CN=1764D4571E16536C792DA34077FD0D5B29235DD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bb:5a:31:08:95:bf:99:90:1c:6f:50:6a:e7:
9b:72:fa:ac:80:59:84:ba:9e:97:1b:3b:b7:60:e1:
8f:4a:c2:13:dc:e5:b7:d1:fc:51:62:01:d3:e6:9b:
d2:28:ed:56:ec:11:ae:c9:ab:33:55:b1:20:a6:20:
c4:c7:a1:87:5e:00:e7:61:5e:06:21:c1:8f:a5:13:
44:90:5f:0e:8b:76:a2:29:17:99:1b:77:5b:f8:40:
44:61:bb:c6:9f:27:2c:18:a5:4d:04:19:92:4c:3b:
6a:37:27:b9:d2:22:2c:9d:24:18:67:cf:45:86:7f:
10:96:69:eb:0f:42:18:2f:60:1d:b1:b0:79:db:b9:
70:56:97:87:46:59:cc:de:3d:21:c9:54:ca:37:7f:
2e:87:dd:41:79:f3:44:74:7a:30:b7:ed:f9:28:5f:
6d:b4:7d:78:e4:92:1a:88:39:14:be:5a:95:e3:5f:
52:e3:2b:be:84:4c:49:72:71:c4:bb:24:e3:d8:45:
e9:01:60:80:32:68:c3:19:62:5f:39:b3:0d:bb:78:
ae:69:af:49:a1:be:4c:52:27:3d:73:02:f8:4b:bb:
9d:61:13:2b:9b:61:2c:92:50:5b:fc:60:c7:66:e8:
95:9c:b0:09:19:c8:85:0c:1d:6e:a3:aa:51:30:8d:
b5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:64:D4:57:1E:16:53:6C:79:2D:A3:40:77:FD:0D:5B:29:23:5D:D4
X509v3 Authority Key Identifier:
keyid:AA:23:A6:85:C6:72:62:26:B6:31:C7:DF:6C:89:BB:44:13:F6:F3:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/3230332e3131342e3232362e302f32342d3234203d3e203435373033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.114.226.0/24
Signature Algorithm: sha256WithRSAEncryption
82:66:28:b3:89:82:25:ff:97:c2:0a:38:e2:f7:39:6c:5b:e2:
f0:0c:28:fe:a1:c9:9b:80:cc:66:3c:f4:13:36:9d:d9:9b:27:
df:64:73:9e:81:20:22:45:40:f8:b2:6f:02:5c:55:24:64:3d:
ca:e0:5f:fa:df:66:30:c6:61:ce:67:a2:78:54:dc:b1:66:53:
ed:5a:b6:15:47:6b:c3:b6:84:63:a2:04:92:74:7d:25:f2:d3:
04:21:91:95:41:7e:6e:39:42:ca:d3:38:e0:04:36:f9:b7:3d:
12:13:ec:0f:52:bd:ce:f3:c8:15:ce:77:b4:50:b4:91:a8:ac:
ec:80:aa:47:00:33:d3:57:37:26:35:d6:0f:e2:1b:10:cb:ab:
2f:39:e4:1d:bb:a4:6a:ab:ee:a7:cf:04:6f:47:bc:b0:ca:57:
61:de:b9:f7:d1:5f:a2:98:53:05:64:79:94:7d:f7:2b:5d:2f:
d7:96:c4:a0:81:b1:90:6f:45:06:f2:68:ad:31:58:08:31:37:
4f:bc:0b:f1:33:8c:04:9f:2d:ec:cc:cd:da:0b:66:d9:b2:dd:
9e:6b:0e:ed:6d:ff:92:18:3e:5a:59:55:9f:96:dc:bf:da:96:
79:c1:b8:35:11:ae:cf:d4:ed:6c:ba:a7:39:e7:53:6c:da:20:
85:11:e2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:15:51 2026 by rpki-client