
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32372e302f32342d3234203d3e20313430343639.roa
File: 3230322e35372e32372e302f32342d3234203d3e20313430343639.roa (raw, json)
Hash identifier: FVzH7nhWf9HlKEhd9diqlsZY20NWlRxKMpXnnJ7+h6Y=
Subject key identifier: E0:88:46:65:6E:ED:D4:11:E0:F8:CE:DD:CA:2B:27:CE:BF:1F:59:44
Certificate issuer: /CN=9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C
Certificate serial: 6C367850E9AC69DA222AD1881F61019F74E67BF5
Authority key identifier: 9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32372e302f32342d3234203d3e20313430343639.roa
Signing time: Sun 03 May 2026 02:13:09 +0000
ROA not before: Sun 03 May 2026 02:08:09 +0000
ROA not after: Sun 02 May 2027 02:13:09 +0000
asID: 140469
IP address blocks: 202.57.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl
rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:21:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:36:78:50:e9:ac:69:da:22:2a:d1:88:1f:61:01:9f:74:e6:7b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C
Validity
Not Before: May 3 02:08:09 2026 GMT
Not After : May 2 02:13:09 2027 GMT
Subject: CN=E08846656EEDD411E0F8CEDDCA2B27CEBF1F5944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c6:b3:4c:4f:de:c1:83:27:af:5c:71:75:54:
30:f7:d0:c1:9a:72:81:be:51:f7:3c:fc:1c:52:bc:
64:1d:56:d6:19:ab:f7:af:bf:c2:1f:c4:93:82:77:
61:9b:9c:23:1f:8a:eb:f9:13:75:a0:a0:34:57:2d:
3c:cb:e4:23:11:7a:42:df:8a:a5:6f:ab:73:bf:bf:
6e:ed:85:72:43:36:b0:7f:d6:cf:1a:ab:bd:03:0a:
20:07:c0:8a:65:97:cf:3a:98:0f:e6:f6:b4:a3:9f:
36:ed:f3:d1:f6:a2:b2:b6:6b:14:fd:61:c1:94:60:
43:7d:7f:2c:37:8b:2b:ef:16:39:b9:f8:e3:1b:e6:
b5:1b:6d:fc:0d:e7:0e:93:8a:8f:97:2c:01:8a:54:
4a:26:33:65:c1:cc:28:b6:f0:6f:2a:6e:b9:79:58:
02:70:bb:65:b1:14:40:d8:fd:da:0c:e8:dd:60:33:
2b:d7:4e:79:9d:c5:31:aa:6e:a9:42:7e:29:57:69:
3e:76:4e:c8:22:2d:3a:9a:4d:bb:af:c4:d4:c2:3b:
ac:1e:36:db:95:e5:63:47:e4:2a:54:fa:27:df:a8:
65:e8:87:cd:23:ae:d5:06:39:91:00:72:05:cf:41:
69:d1:97:93:18:4f:5d:29:39:a6:03:01:af:00:a1:
a6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:88:46:65:6E:ED:D4:11:E0:F8:CE:DD:CA:2B:27:CE:BF:1F:59:44
X509v3 Authority Key Identifier:
keyid:9D:B8:C4:72:3E:3B:FD:D0:13:8A:79:16:A8:BB:12:C4:5C:82:CD:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DB8C4723E3BFDD0138A7916A8BB12C45C82CD9C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32372e302f32342d3234203d3e20313430343639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.57.27.0/24
Signature Algorithm: sha256WithRSAEncryption
51:51:81:23:93:ad:7a:a7:49:1a:a4:33:5f:96:11:b9:6c:22:
df:35:3e:c9:c5:aa:79:d4:ce:c1:74:c1:3a:85:82:8d:90:ef:
c3:ff:c9:a7:b9:ab:97:c7:42:65:a1:c8:79:5d:83:66:e4:cf:
a6:88:8f:ae:1c:cf:4b:2f:ee:0f:99:18:37:79:87:4f:c5:34:
bf:3b:a6:a5:f0:5b:a9:15:ab:49:75:07:ca:9f:ab:37:25:97:
49:f7:da:42:46:74:23:2c:e1:cf:eb:86:5d:f0:d5:62:6d:9a:
00:74:4d:74:5a:7c:01:72:0f:0d:0b:d4:11:42:a6:46:50:53:
d2:e9:25:57:19:9c:af:00:47:00:77:f5:b1:f3:cd:97:05:97:
91:20:f3:f4:1f:18:41:2f:23:28:e8:94:14:4b:a2:ab:ba:62:
48:25:a4:2d:85:fc:c2:31:4a:b4:e5:c5:8c:9d:7e:83:c4:88:
e7:38:94:c1:2d:48:36:4a:83:46:e6:72:14:6e:d6:11:f2:a5:
f2:46:d4:f6:c9:fe:90:a1:54:ec:59:a0:46:fa:89:71:1e:5d:
e4:d0:e3:88:1c:18:68:0b:05:96:be:70:03:73:6c:88:c1:d7:
86:aa:fe:20:06:ba:94:42:fa:cb:82:96:a9:98:12:df:d5:5c:
26:03:35:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:38:30 2026 by rpki-client