
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e31392e302f32342d3234203d3e20313339393831.roa
File: 3230322e35372e31392e302f32342d3234203d3e20313339393831.roa (raw, json)
Hash identifier: G+CJRSAvkLm8DSPQpJTfXwMfnMxnrjXXDvf2WSgrHBE=
Subject key identifier: 41:52:92:98:52:BD:18:2E:4E:01:16:78:19:BA:E9:1E:5A:A8:44:2C
Certificate issuer: /CN=9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C
Certificate serial: 41FFF061B7D8CA599D8F519451D1732F7A18584A
Authority key identifier: 9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e31392e302f32342d3234203d3e20313339393831.roa
Signing time: Sun 03 May 2026 02:13:07 +0000
ROA not before: Sun 03 May 2026 02:08:07 +0000
ROA not after: Sun 02 May 2027 02:13:07 +0000
asID: 139981
IP address blocks: 202.57.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl
rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:21:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:ff:f0:61:b7:d8:ca:59:9d:8f:51:94:51:d1:73:2f:7a:18:58:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C
Validity
Not Before: May 3 02:08:07 2026 GMT
Not After : May 2 02:13:07 2027 GMT
Subject: CN=4152929852BD182E4E01167819BAE91E5AA8442C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d8:52:e3:86:2c:a4:0e:cc:de:c2:7f:9f:e6:
75:93:de:a3:73:29:fd:fb:f8:93:5b:de:ad:20:5f:
96:84:d4:10:80:c5:76:61:e4:10:75:c1:96:cc:b1:
b8:e7:6e:58:a8:ba:db:9a:4f:27:49:75:c1:64:14:
96:9e:39:2a:9f:ee:69:63:14:6e:5e:f1:12:bb:e3:
d4:7f:5f:a6:7d:9b:0c:f2:ec:b4:38:13:da:5a:ea:
a3:0e:0e:68:a3:d5:e8:4e:26:72:35:4e:7b:93:38:
e4:6d:88:b0:88:0a:4b:e6:ff:2d:39:0d:5b:b5:26:
d9:6c:ab:6a:ca:a0:de:ca:d6:aa:c8:26:84:55:54:
21:bd:1e:ec:fb:53:d5:5a:45:9b:09:c1:15:8c:91:
53:a6:04:a1:aa:27:d1:3b:91:a5:ab:94:30:f3:94:
8c:76:5a:52:a6:4a:c9:c3:ba:8f:73:bf:9b:b3:c2:
f1:9c:c9:49:1e:84:79:a1:ef:1a:da:63:a9:9e:41:
8f:3d:8c:73:82:9d:98:ac:04:36:9a:0d:70:68:2f:
33:14:6e:90:20:ce:56:73:c2:03:df:5b:71:13:3e:
b5:2d:c0:4a:c1:3c:42:f3:50:f0:10:ba:e3:f1:d1:
36:08:e3:f0:4b:bd:5c:a1:58:d1:36:5a:1b:bb:87:
17:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:52:92:98:52:BD:18:2E:4E:01:16:78:19:BA:E9:1E:5A:A8:44:2C
X509v3 Authority Key Identifier:
keyid:9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e31392e302f32342d3234203d3e20313339393831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.57.19.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:67:d3:84:f8:69:4a:50:92:d3:80:e4:75:3b:c2:76:fe:fb:
83:a9:80:fe:84:81:be:59:82:1f:43:c4:7f:cc:0f:b1:b5:be:
7f:6b:84:5c:96:b1:c2:91:74:2a:b0:e5:01:7f:79:cf:3c:b9:
ff:cc:68:b1:c5:c0:6b:39:04:8c:aa:ef:3f:0e:d8:df:84:48:
41:d6:52:12:a0:ce:d0:e0:1b:e5:79:c1:45:31:33:22:fb:bd:
d9:cc:47:49:8c:1a:5a:b2:dc:22:c3:70:e0:aa:d9:a0:df:2f:
1c:50:f8:1b:79:2f:0b:0b:4d:2b:8b:0a:82:b3:92:99:80:a0:
b1:b1:fb:7c:cf:d3:30:43:5a:fe:2a:24:ee:88:b9:c5:21:28:
7f:37:de:53:44:f3:2c:e3:90:9f:30:8d:37:84:8e:90:4a:01:
90:38:af:3f:2b:f6:fb:f0:d9:aa:2e:ba:ad:36:0a:53:e0:ef:
ab:3c:3a:9a:a9:53:11:9f:ac:e7:d0:6f:4e:67:c1:42:26:f1:
34:bf:bf:d7:6b:b2:38:3b:ef:09:29:43:ee:69:31:18:57:d2:
73:4e:a4:3d:16:a8:63:a6:51:81:14:17:6b:52:bb:bd:9b:41:
89:45:4f:43:4d:64:e9:3b:8a:ac:f0:d1:4d:2a:f6:9f:0d:b1:
9d:7e:02:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:44:23 2026 by rpki-client