
$ rpki-client -vvf rpki-rsync.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3230322e35322e34382e302f32332d3234203d3e203436303535.roa
File: 3230322e35322e34382e302f32332d3234203d3e203436303535.roa (raw, json)
Hash identifier: 2iUHhReRTogx2RhTVdfCvVoaJpAuDQddykI0WZaNgaI=
Subject key identifier: 3B:E4:5F:74:A3:29:12:C5:2D:B5:CB:58:35:54:37:73:8C:37:CF:DA
Certificate issuer: /CN=F69314440BEB879DDDA166C5976A2F1F6A19E031
Certificate serial: 55944310713DA4342CD2DFA44F3901CA65642572
Authority key identifier: F6:93:14:44:0B:EB:87:9D:DD:A1:66:C5:97:6A:2F:1F:6A:19:E0:31
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F69314440BEB879DDDA166C5976A2F1F6A19E031.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3230322e35322e34382e302f32332d3234203d3e203436303535.roa
Signing time: Sun 03 May 2026 02:12:18 +0000
ROA not before: Sun 03 May 2026 02:07:18 +0000
ROA not after: Sun 02 May 2027 02:12:18 +0000
asID: 46055
IP address blocks: 202.52.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/F69314440BEB879DDDA166C5976A2F1F6A19E031.crl
rsync://rpki-rsync.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/F69314440BEB879DDDA166C5976A2F1F6A19E031.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F69314440BEB879DDDA166C5976A2F1F6A19E031.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:94:43:10:71:3d:a4:34:2c:d2:df:a4:4f:39:01:ca:65:64:25:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F69314440BEB879DDDA166C5976A2F1F6A19E031
Validity
Not Before: May 3 02:07:18 2026 GMT
Not After : May 2 02:12:18 2027 GMT
Subject: CN=3BE45F74A32912C52DB5CB58355437738C37CFDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1c:1b:ab:e4:98:cd:57:d3:a3:7c:4f:82:f7:
d6:57:b8:10:63:7d:46:d3:44:c8:da:cb:42:b2:98:
14:78:16:3d:2e:33:b0:24:d8:a6:8c:9f:56:47:07:
e6:c7:bc:c2:be:99:92:70:ce:27:01:e5:12:50:04:
9e:a4:9b:a2:36:b8:d7:55:56:46:b5:3a:9a:25:df:
3e:30:b8:93:0d:7d:65:04:dc:c7:17:c5:df:0b:cb:
76:b4:88:e3:82:49:52:90:b0:74:e3:8a:cb:59:d1:
8c:f6:32:3e:51:d1:79:87:d9:79:0f:6c:4f:ca:a5:
3c:43:0d:66:3a:60:6b:2a:a5:33:2a:f7:2e:01:12:
aa:b6:c3:c3:c2:84:16:b6:93:c2:5d:99:dd:23:08:
a1:9b:cd:16:5b:0a:db:ee:19:ce:d2:d2:be:4b:9b:
26:c7:ae:5b:a2:81:ff:04:ab:03:ce:0d:c4:84:d7:
69:77:66:8c:d8:65:8b:ba:59:0f:cd:8d:8c:3f:44:
aa:25:a7:3f:b7:e0:73:0f:57:3d:f7:2d:37:ca:39:
0a:4c:fe:ff:1b:85:e2:ea:fe:0e:8f:b5:f1:c5:9a:
63:43:48:1b:4c:aa:0b:56:62:01:e2:9a:99:4d:d0:
3f:01:10:b3:ba:63:ca:8b:85:6a:e7:2b:af:8a:60:
c9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E4:5F:74:A3:29:12:C5:2D:B5:CB:58:35:54:37:73:8C:37:CF:DA
X509v3 Authority Key Identifier:
keyid:F6:93:14:44:0B:EB:87:9D:DD:A1:66:C5:97:6A:2F:1F:6A:19:E0:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/F69314440BEB879DDDA166C5976A2F1F6A19E031.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F69314440BEB879DDDA166C5976A2F1F6A19E031.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3230322e35322e34382e302f32332d3234203d3e203436303535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.52.48.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:42:f2:fe:56:e8:74:48:4a:4d:a5:a4:a6:74:d1:3e:09:d4:
d6:cf:40:c9:20:4e:f1:87:2d:f4:b2:18:48:2a:15:6d:58:28:
fb:fc:5b:53:2d:da:20:29:16:07:a9:4b:1d:3d:c0:ff:1b:03:
a9:71:eb:4c:3c:0e:df:0d:97:55:80:70:db:cb:2e:58:0e:ec:
20:e1:5d:b4:45:1c:23:fb:c8:cf:1e:d7:ab:e3:7a:c1:a6:94:
18:45:9f:1f:fa:41:27:56:0c:d5:18:e2:82:ae:72:67:a1:f1:
be:01:d8:c1:13:9c:0e:1f:9c:15:6a:43:4c:a2:01:0a:26:23:
76:21:6f:96:81:b4:5b:d1:ce:f1:c8:26:93:4a:f4:ba:19:f1:
42:01:ea:26:1d:a1:ab:6d:f6:1e:b7:ce:5c:00:f9:ee:1f:b1:
a9:19:e9:38:f1:a5:e0:df:c5:10:59:49:3e:33:82:3e:42:e2:
f4:49:a1:a5:96:4a:11:aa:76:ed:01:3f:8c:6d:ea:cd:21:0b:
53:a5:72:20:8b:95:4d:dc:48:a5:21:3f:64:98:d2:60:d2:a0:
d7:92:a8:4c:d0:cf:91:84:8e:33:1c:f3:87:23:08:7e:b6:3e:
c6:5a:41:47:1a:73:6d:32:8d:4c:ce:c7:c7:34:c4:7a:f6:36:
c9:24:7a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:53:38 2026 by rpki-client