
$ rpki-client -vvf rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31302e302f32342d3234203d3e203338313530.roa
File: 3230322e39312e31302e302f32342d3234203d3e203338313530.roa (raw, json)
Hash identifier: +VS5/Tu3kvOWWv43cJdkwZYGDexUxzNwL5sBfy7ijfc=
Subject key identifier: 9F:73:73:93:C4:5D:10:D7:F0:66:B7:CE:F7:1E:B2:16:C0:BF:3C:1F
Certificate issuer: /CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Certificate serial: 748ACBECAD9E33DF8BE5FEB6DA2D6AB08EE7BC6B
Authority key identifier: 10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31302e302f32342d3234203d3e203338313530.roa
Signing time: Sun 03 May 2026 02:15:55 +0000
ROA not before: Sun 03 May 2026 02:10:55 +0000
ROA not after: Sun 02 May 2027 02:15:55 +0000
asID: 38150
IP address blocks: 202.91.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:24:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:8a:cb:ec:ad:9e:33:df:8b:e5:fe:b6:da:2d:6a:b0:8e:e7:bc:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Validity
Not Before: May 3 02:10:55 2026 GMT
Not After : May 2 02:15:55 2027 GMT
Subject: CN=9F737393C45D10D7F066B7CEF71EB216C0BF3C1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:92:5c:fa:43:11:1d:c9:34:24:82:47:fb:5b:
80:82:35:1a:ff:b8:2c:23:08:b3:dc:e6:53:9c:d5:
0d:99:cc:7f:01:8a:32:a7:86:b5:1d:be:b0:f5:3a:
68:3b:ab:ba:60:72:0b:62:76:dd:04:61:eb:21:76:
7f:2a:44:e5:d6:4d:e9:75:a8:69:e0:9e:d1:58:b7:
ab:02:ce:df:5f:ab:be:d1:e5:28:fc:37:78:b7:d3:
7b:49:83:e8:e3:d0:57:63:5a:f3:ef:0c:95:f3:e9:
08:6a:f2:9b:65:fd:e5:00:e1:24:9c:e7:14:6c:d6:
cb:23:58:e2:46:ef:3e:56:5d:87:08:93:12:ef:ab:
a6:0b:66:b5:dd:6f:26:2e:62:97:c2:7c:79:cf:44:
3e:54:bb:f8:c9:4c:a5:bd:51:7f:d4:65:ac:4d:24:
26:d3:94:08:eb:0a:dd:27:81:3a:d8:d7:7c:7f:b9:
0f:a3:f2:89:5d:e7:c1:ff:04:f4:a8:e6:f7:b7:fe:
ec:ab:42:86:3d:60:36:d0:99:92:30:19:9d:59:7e:
5b:0e:5d:4a:d2:e8:d4:58:f3:a1:55:c1:10:aa:23:
ed:76:f9:75:6a:9a:3a:6c:77:ef:a7:f6:d7:ee:08:
23:f9:36:65:1b:e3:bb:c8:92:c0:a3:e7:ee:45:df:
02:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:73:73:93:C4:5D:10:D7:F0:66:B7:CE:F7:1E:B2:16:C0:BF:3C:1F
X509v3 Authority Key Identifier:
keyid:10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31302e302f32342d3234203d3e203338313530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.91.10.0/24
Signature Algorithm: sha256WithRSAEncryption
42:7d:2b:08:be:af:50:f2:93:6f:68:f7:d1:b3:ce:8b:df:e7:
56:4b:30:5e:71:2d:23:e5:f3:d2:48:50:0e:24:92:fa:38:31:
ad:90:e8:4c:27:de:62:4e:0b:b4:84:25:9b:c2:66:87:95:0d:
d4:24:5d:c5:de:d0:86:fb:6f:5d:36:e8:bb:9d:e8:ac:f7:13:
55:67:a0:27:cc:24:00:65:3b:f9:87:30:00:3e:e2:bb:e0:b2:
5b:5e:f3:03:56:1f:78:db:c9:6f:9b:2f:a9:23:00:7f:d6:57:
dd:ba:c1:15:24:1e:47:fc:de:43:5e:42:ea:4d:28:76:0e:5c:
da:4e:ad:2d:27:eb:ae:87:3b:e6:7d:70:03:6c:bb:8a:a8:51:
24:21:cb:c3:3d:e8:e5:d4:c7:58:87:d1:db:cd:7c:16:1b:a5:
6b:47:c1:e0:47:e6:45:33:a6:55:78:9d:24:32:fe:a6:c9:8a:
c3:2a:74:76:0b:1b:55:dc:05:60:9e:53:f2:85:34:82:4a:82:
ee:4c:ef:83:d6:c8:36:6f:84:de:2f:af:41:23:18:09:bf:11:
2b:c0:81:1e:13:dc:a6:17:7f:90:a1:56:a6:c8:4b:0e:8d:ff:
ed:59:01:4b:78:78:53:da:b1:12:e9:46:63:1a:ae:2c:8e:16:
6d:c7:fa:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:28:47 2026 by rpki-client