
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/3230332e3131342e3232372e302f32342d3234203d3e203435373033.roa
File: 3230332e3131342e3232372e302f32342d3234203d3e203435373033.roa (raw, json)
Hash identifier: vehsLc9IdsSn7EUUdSdrNurNOdDJw1QIcbLPuX3RJb4=
Subject key identifier: 37:FE:10:E9:AB:04:7C:A0:0B:3D:4E:10:A4:AC:AC:58:28:4D:96:6F
Certificate issuer: /CN=AA23A685C6726226B631C7DF6C89BB4413F6F3B6
Certificate serial: 0C7199A1464470FAEC136642F2F89FF66E42B162
Authority key identifier: AA:23:A6:85:C6:72:62:26:B6:31:C7:DF:6C:89:BB:44:13:F6:F3:B6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/3230332e3131342e3232372e302f32342d3234203d3e203435373033.roa
Signing time: Sun 03 May 2026 02:10:59 +0000
ROA not before: Sun 03 May 2026 02:05:59 +0000
ROA not after: Sun 02 May 2027 02:10:59 +0000
asID: 45703
IP address blocks: 203.114.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.crl
rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:71:99:a1:46:44:70:fa:ec:13:66:42:f2:f8:9f:f6:6e:42:b1:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA23A685C6726226B631C7DF6C89BB4413F6F3B6
Validity
Not Before: May 3 02:05:59 2026 GMT
Not After : May 2 02:10:59 2027 GMT
Subject: CN=37FE10E9AB047CA00B3D4E10A4ACAC58284D966F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:84:3a:ef:f2:a4:75:d7:b0:9d:e0:4e:76:44:
c5:93:e2:53:23:1d:c8:79:d7:69:5a:0a:7a:18:d7:
19:27:bb:00:99:e2:44:39:3e:22:ae:a4:d9:de:3c:
fb:ab:de:fe:fb:93:73:7c:b0:86:1a:a0:fa:62:99:
f2:f5:69:1d:d2:b5:74:f2:8d:18:c6:99:2c:7f:08:
4c:99:93:0a:58:57:67:7a:74:b0:11:f6:51:df:92:
8b:01:e7:6b:4d:50:d2:d1:a4:a1:7c:65:ec:96:ab:
bd:7c:ef:e2:ce:3b:2a:02:70:29:f3:6b:b9:14:96:
ff:7b:d9:46:f6:49:9d:1c:aa:55:44:2b:a8:54:29:
65:e3:f3:15:76:fb:c2:47:e3:55:d2:ea:f2:21:d1:
77:60:74:77:26:0b:2c:00:f1:70:70:d7:22:c4:0c:
e3:f5:4b:f6:6b:cc:c6:18:ad:62:2b:7d:ce:1e:db:
f9:79:4e:62:20:00:53:51:d6:e6:d0:33:b8:ab:b4:
c0:e1:ee:48:65:ce:e4:a4:5c:90:96:8b:c8:d0:78:
6c:92:fc:3d:c6:f6:c9:88:e6:5a:6d:2c:46:6c:0d:
ed:ce:83:74:bd:4f:7e:b8:5c:c4:b8:42:c7:0f:f8:
9e:ad:c9:bc:e3:29:af:1b:82:8d:31:71:1c:5e:c1:
50:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FE:10:E9:AB:04:7C:A0:0B:3D:4E:10:A4:AC:AC:58:28:4D:96:6F
X509v3 Authority Key Identifier:
keyid:AA:23:A6:85:C6:72:62:26:B6:31:C7:DF:6C:89:BB:44:13:F6:F3:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA23A685C6726226B631C7DF6C89BB4413F6F3B6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/3230332e3131342e3232372e302f32342d3234203d3e203435373033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.114.227.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:4a:0b:55:cf:22:a2:3f:cb:73:04:b8:9b:cb:59:f5:9f:44:
c0:c7:8c:c7:f3:3b:ae:3a:c9:32:88:34:5e:3a:f7:28:74:bf:
23:66:95:f8:65:02:fe:01:dd:0b:9b:f0:ae:d7:ab:26:32:ac:
22:c0:05:71:1a:9b:d1:7d:e6:b4:77:c6:a3:4d:0b:34:a3:c5:
23:d5:1f:00:2d:7a:a4:f9:3f:12:ff:33:6d:81:54:ab:d8:3f:
19:e6:62:4e:98:59:8e:a6:b6:45:4f:71:09:b0:cf:9c:52:ec:
e8:f9:8b:c3:ac:7e:1d:b4:d4:76:57:48:5a:22:09:40:86:57:
94:8e:69:42:60:87:36:29:94:1f:9d:82:11:e8:f2:f1:42:b6:
23:eb:fe:24:58:1a:47:ed:e3:8f:ec:48:32:f0:de:3d:cb:7d:
16:30:c1:c0:81:81:f9:86:76:33:91:16:ef:91:b8:98:57:96:
9b:6f:d1:c0:62:ac:84:dc:a0:9e:7c:05:32:6d:9e:6f:8d:17:
e0:12:cd:d8:71:fd:b3:56:7c:3d:e3:f9:d9:f2:d0:ba:56:3f:
c0:3b:4d:04:07:63:81:e6:46:9d:64:e2:ed:87:43:1f:3e:a6:
a1:39:f0:86:d7:4a:b3:b0:3b:d1:48:1b:f4:56:8b:9f:86:a3:
db:09:45:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:15:56 2026 by rpki-client