
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32362e302f32342d3234203d3e20313430343639.roa
File: 3230322e35372e32362e302f32342d3234203d3e20313430343639.roa (raw, json)
Hash identifier: C5EXjolwl07zRhpLr0tmhZ7KpZpGgWZO494eyJEQSqk=
Subject key identifier: B3:79:7C:CD:FB:F3:43:1A:AB:6A:1B:65:6D:71:3A:4F:B2:86:DC:C6
Certificate issuer: /CN=9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C
Certificate serial: 46493D7C347E5E028A29E5D7D7BAB9FF3F605335
Authority key identifier: 9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32362e302f32342d3234203d3e20313430343639.roa
Signing time: Sun 03 May 2026 02:13:10 +0000
ROA not before: Sun 03 May 2026 02:08:10 +0000
ROA not after: Sun 02 May 2027 02:13:10 +0000
asID: 140469
IP address blocks: 202.57.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl
rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:49:3d:7c:34:7e:5e:02:8a:29:e5:d7:d7:ba:b9:ff:3f:60:53:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C
Validity
Not Before: May 3 02:08:10 2026 GMT
Not After : May 2 02:13:10 2027 GMT
Subject: CN=B3797CCDFBF3431AAB6A1B656D713A4FB286DCC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b6:4c:e5:3b:b6:2e:7a:ba:67:fe:7b:c1:70:
f0:a2:3a:aa:9c:90:22:4d:06:24:ca:67:4a:22:e8:
3f:40:bf:e4:4e:f0:6e:db:81:90:b8:06:cc:13:3a:
b6:71:a1:2e:5d:12:ea:38:4f:9f:58:fc:26:39:73:
07:52:d5:ee:b6:9e:90:6e:18:25:1b:0b:3a:45:99:
5d:9e:2a:92:e6:89:15:06:14:a7:44:17:b1:c2:a8:
85:96:17:ca:36:c0:d6:4b:c3:82:c5:fd:fb:e9:b2:
b3:54:c2:0c:bb:7c:32:64:39:ff:48:ab:c3:33:33:
48:15:da:3b:5b:dd:5b:09:3b:7a:0e:c5:c1:0e:13:
08:ea:4a:0b:90:fc:15:c7:79:e1:24:a7:1b:41:33:
9d:78:f9:d1:f0:65:60:e3:bd:20:d8:b8:4a:11:27:
a9:c6:00:59:08:9c:88:f1:1c:11:7d:e4:74:a0:8f:
6f:14:73:08:25:b1:dd:ab:89:3c:d5:fe:fb:7f:7d:
fa:30:7f:ae:58:74:20:d3:c4:a6:79:ca:a6:8a:ab:
d7:26:b2:22:2c:09:c7:b9:05:1d:26:a2:3b:18:d2:
99:11:66:a8:71:04:f5:a5:5f:4b:7b:28:e3:0b:07:
e4:80:a5:51:5e:8c:65:5b:9f:70:3e:b9:37:58:ac:
a9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:79:7C:CD:FB:F3:43:1A:AB:6A:1B:65:6D:71:3A:4F:B2:86:DC:C6
X509v3 Authority Key Identifier:
keyid:9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32362e302f32342d3234203d3e20313430343639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.57.26.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:fe:c9:e0:33:56:f8:ee:28:87:df:82:ee:9a:aa:37:08:73:
34:f8:75:eb:01:74:fd:c4:ef:a3:48:17:03:0d:82:87:f7:5a:
bb:c8:de:b5:2e:cf:78:d6:72:89:36:9e:5e:a7:c8:24:6d:ad:
1e:f6:31:1f:32:4f:07:85:42:f3:20:23:55:4c:ff:28:69:fb:
ee:ad:d4:ea:87:00:de:94:c3:ad:d7:fe:36:9a:e8:33:f5:ca:
4f:5a:fd:19:30:ec:09:7b:d2:92:2c:43:ea:17:e2:8d:06:14:
46:56:e1:2d:85:71:68:c2:69:d9:2c:45:a3:e2:5f:91:f7:d4:
9d:83:b8:82:88:19:d5:39:06:f1:6b:40:2c:c7:3c:37:7a:31:
06:7a:14:6b:91:a5:c0:a7:17:82:74:c7:75:51:52:41:ee:93:
14:36:7c:83:70:a3:45:61:4e:c4:17:b5:76:1f:f3:00:bd:70:
86:38:bf:5f:cb:2f:58:05:cd:01:c5:50:57:3f:f6:dc:8e:2e:
09:4d:f2:99:1f:c8:66:0a:0c:39:bc:72:32:cd:ed:76:e2:e5:
63:5c:b7:1a:73:67:a1:ee:0e:dc:09:30:d2:29:66:24:96:3e:
02:a3:f2:c0:e0:3f:f1:ed:14:08:19:65:bc:83:5b:ff:56:87:
2d:7a:a7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:24:39 2026 by rpki-client