
$ rpki-client -vvf rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31312e302f32342d3234203d3e203338313530.roa
File: 3230322e39312e31312e302f32342d3234203d3e203338313530.roa (raw, json)
Hash identifier: /bDQ1gDKqvhjUD5sIBBKcc/d7hDJ/PXDCn4UuJeT0Ls=
Subject key identifier: 6E:DA:88:A0:F6:5B:7C:0A:18:F3:18:F9:B7:FD:D6:F7:02:17:77:9F
Certificate issuer: /CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Certificate serial: 06B6EEBBE70D6984041F21E770EA8568E33DC641
Authority key identifier: 10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31312e302f32342d3234203d3e203338313530.roa
Signing time: Sun 03 May 2026 02:15:53 +0000
ROA not before: Sun 03 May 2026 02:10:53 +0000
ROA not after: Sun 02 May 2027 02:15:53 +0000
asID: 38150
IP address blocks: 202.91.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:24:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:b6:ee:bb:e7:0d:69:84:04:1f:21:e7:70:ea:85:68:e3:3d:c6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Validity
Not Before: May 3 02:10:53 2026 GMT
Not After : May 2 02:15:53 2027 GMT
Subject: CN=6EDA88A0F65B7C0A18F318F9B7FDD6F70217779F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5d:74:67:c6:fc:3d:2e:dd:e2:f9:72:c8:45:
ef:32:7f:1c:84:1a:ba:1a:12:36:43:1e:1f:40:08:
34:74:8e:3d:af:51:8d:13:03:a2:2b:23:62:4f:d2:
cb:32:52:d3:5f:45:a7:8f:ff:36:46:76:9d:8a:6a:
1b:70:14:de:dc:4d:79:0f:82:0b:37:2e:58:94:6e:
b0:69:26:03:57:80:e3:17:fe:7d:32:3f:7b:37:92:
ac:67:8d:7a:32:0d:e2:8b:fe:ee:52:b8:8e:89:8d:
4c:3d:e1:0d:94:04:64:ea:63:ca:58:8b:5a:02:c8:
d9:59:3a:2d:d0:44:8a:9f:9a:9d:d6:1b:dc:5b:16:
13:64:e3:95:45:f3:cb:90:f3:86:72:b6:d9:21:90:
fb:e7:ff:ba:71:42:63:59:bb:66:28:2e:9f:76:42:
7b:5d:54:f1:a9:2f:84:0c:7f:c2:e9:3c:b6:97:d5:
c5:97:6f:d1:61:12:1f:8f:75:a4:68:38:59:3c:cb:
7a:f7:e8:61:0d:6f:e5:f7:17:12:64:d2:65:86:ec:
ed:e3:b3:a7:49:05:91:e0:d0:a3:07:c0:70:28:e8:
5e:4c:0a:72:ac:b3:1d:7a:18:3e:25:9a:29:4f:4f:
6c:03:f6:cc:0c:67:57:71:9d:d4:f3:f1:c8:f3:59:
4c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DA:88:A0:F6:5B:7C:0A:18:F3:18:F9:B7:FD:D6:F7:02:17:77:9F
X509v3 Authority Key Identifier:
keyid:10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31312e302f32342d3234203d3e203338313530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.91.11.0/24
Signature Algorithm: sha256WithRSAEncryption
07:27:31:96:1b:47:96:e0:59:29:d1:4c:59:07:a9:99:e4:06:
fb:d9:4d:e9:4b:27:e4:b3:65:ae:73:56:86:ad:c8:ae:c8:da:
e3:6d:a3:96:37:2c:ec:a1:a2:91:ad:79:e2:1a:d9:5f:f3:e7:
91:81:8a:87:28:6f:e4:27:8f:3a:e9:c5:f8:2d:5d:49:bf:0b:
26:7d:71:96:75:a6:24:78:8e:39:66:d0:b8:6c:5c:08:ce:1c:
17:29:41:0f:e4:36:0b:8b:b0:c1:83:07:be:42:69:eb:e3:96:
e6:e3:ef:42:c3:a2:a3:3b:83:d7:78:10:02:46:43:f6:e3:c5:
5d:4c:c6:19:f4:d1:ef:2d:97:94:08:bb:f9:5a:0b:63:49:62:
a8:d0:2f:65:f0:3e:8a:9c:69:7e:07:60:f5:4a:ea:4e:7c:b3:
69:72:bf:c2:20:f5:6e:f8:3a:09:2b:35:f1:7d:c0:d1:49:bb:
36:bc:f1:95:7a:8e:03:fe:28:19:a7:98:43:f7:14:c8:17:39:
35:6a:58:3e:1c:b1:cd:b1:31:fa:5f:7a:7d:f4:2a:d0:c4:b6:
70:80:52:54:9f:5c:ae:5f:a2:8a:d6:ab:34:3e:2d:41:ae:ae:
15:72:71:a6:bd:ce:51:3d:de:5d:95:c7:1f:74:8c:2d:1a:f9:
ef:97:7b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:39:27 2026 by rpki-client