
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32352e302f32342d3234203d3e20313430343639.roa
File: 3230322e35372e32352e302f32342d3234203d3e20313430343639.roa (raw, json)
Hash identifier: tedUTTSe47lCMR7mgNFb3hX/nrYcz1gvH0zDmHz42Os=
Subject key identifier: EC:85:A2:DE:44:A5:DA:F2:E1:CF:93:F7:43:FD:8F:E3:0E:EE:C3:ED
Certificate issuer: /CN=9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C
Certificate serial: 07D87862786F42162FC3DD2670A25355CFB711D5
Authority key identifier: 9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32352e302f32342d3234203d3e20313430343639.roa
Signing time: Sun 03 May 2026 02:13:08 +0000
ROA not before: Sun 03 May 2026 02:08:08 +0000
ROA not after: Sun 02 May 2027 02:13:08 +0000
asID: 140469
IP address blocks: 202.57.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl
rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:21:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:d8:78:62:78:6f:42:16:2f:c3:dd:26:70:a2:53:55:cf:b7:11:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C
Validity
Not Before: May 3 02:08:08 2026 GMT
Not After : May 2 02:13:08 2027 GMT
Subject: CN=EC85A2DE44A5DAF2E1CF93F743FD8FE30EEEC3ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:88:8d:cd:4b:55:88:b6:72:3c:a0:1e:b4:a0:
d8:44:26:ba:b4:f4:ef:c1:4b:df:d4:0b:fe:b3:1a:
d9:3c:87:9d:fa:bd:72:cd:a6:24:ac:6a:f7:0f:15:
38:94:2e:23:f2:c6:1e:0e:aa:5a:8a:34:ab:7d:f1:
74:81:da:0b:87:8f:be:f5:3d:ec:7e:df:f6:c2:07:
14:be:97:90:d1:f5:7b:f8:6c:15:62:32:27:b3:86:
6d:3f:fe:d7:8c:95:0e:d3:18:69:3e:f0:d1:e3:09:
8c:da:60:63:99:c6:d6:f7:6c:21:cf:87:79:25:b3:
86:2a:48:1f:b0:d1:20:2f:13:a4:8e:29:dd:db:02:
76:1e:e9:25:ce:3a:1f:b5:1b:e9:22:5e:ee:20:7f:
82:8b:23:6c:26:1a:11:ae:c0:7a:ed:12:b9:b9:a6:
d1:25:03:79:86:4f:15:35:b4:dd:32:82:29:7d:d7:
35:74:f9:a6:36:db:6b:e2:f9:99:61:7c:f1:70:e1:
89:bf:0d:fa:58:5c:fc:6e:44:ff:8a:8f:66:b7:09:
74:7f:1a:41:4a:b5:b7:26:1f:27:e4:19:6e:fe:9f:
e7:a6:4a:25:24:53:c2:fc:b9:be:a7:50:8b:19:08:
24:3a:9f:1c:16:9c:44:e8:86:7b:67:36:7e:94:5e:
b8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:85:A2:DE:44:A5:DA:F2:E1:CF:93:F7:43:FD:8F:E3:0E:EE:C3:ED
X509v3 Authority Key Identifier:
keyid:9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32352e302f32342d3234203d3e20313430343639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.57.25.0/24
Signature Algorithm: sha256WithRSAEncryption
91:24:12:9c:98:8b:e7:c7:e0:05:fb:7b:f5:1d:2a:1d:8c:64:
bc:13:66:a4:76:5f:db:b9:7c:d7:91:18:e0:81:52:01:61:95:
bf:ad:b1:5d:f2:85:c6:cf:25:e3:e4:44:33:a6:88:bf:07:e4:
94:2e:66:7a:47:c6:77:a8:87:8c:d6:c1:bf:09:35:3c:7a:09:
49:26:52:d5:78:b9:40:b8:ee:2e:17:25:b1:7b:a0:f7:1b:ee:
e2:6e:a2:a2:9c:2c:05:7d:fb:f4:d6:33:46:ed:23:19:7a:06:
0f:08:a9:b2:d9:4e:44:c6:72:ec:7c:a8:9a:19:78:b3:5b:a5:
01:58:13:b4:e4:63:fb:71:ef:d6:62:42:9a:4b:ca:00:90:c2:
fb:e4:46:c8:54:3f:5a:e3:8f:cb:be:d9:b3:25:01:e3:02:e5:
5a:e6:bd:f2:c8:25:e3:fa:49:d5:62:fd:e1:ef:95:94:fc:d5:
43:53:34:5c:b8:58:0e:3c:c2:12:25:9c:ee:c6:60:75:70:b5:
7b:71:84:f7:8e:23:68:36:0d:1b:3d:b6:7a:3c:18:f2:84:f1:
89:e5:d2:99:88:b4:f5:5a:df:2c:00:07:4f:e1:37:3d:0b:61:
b9:6d:5d:47:01:e3:b7:9c:fe:1d:75:4e:18:fa:5d:ed:8a:00:
63:8d:0b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:47:34 2026 by rpki-client