
$ rpki-client -vvf rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31332e302f32342d3234203d3e203338313530.roa
File: 3230322e39312e31332e302f32342d3234203d3e203338313530.roa (raw, json)
Hash identifier: OjUvEwuMJfYQiDda50+RujR33MhuHSqzyDUYeSQ0JY8=
Subject key identifier: 7C:E3:1B:92:04:70:A2:3B:12:75:B1:E6:FB:E1:B4:FF:40:8C:48:F5
Certificate issuer: /CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Certificate serial: 694A0DDC4DF9A8F09F008BB5AC3D54FD9366E8D6
Authority key identifier: 10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31332e302f32342d3234203d3e203338313530.roa
Signing time: Sun 03 May 2026 02:15:56 +0000
ROA not before: Sun 03 May 2026 02:10:56 +0000
ROA not after: Sun 02 May 2027 02:15:56 +0000
asID: 38150
IP address blocks: 202.91.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:24:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:4a:0d:dc:4d:f9:a8:f0:9f:00:8b:b5:ac:3d:54:fd:93:66:e8:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102CB228255AC59C06F56BF9291AABDD49CD72E1
Validity
Not Before: May 3 02:10:56 2026 GMT
Not After : May 2 02:15:56 2027 GMT
Subject: CN=7CE31B920470A23B1275B1E6FBE1B4FF408C48F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2a:fa:60:c6:18:54:ae:18:e1:9e:92:d9:25:
47:27:31:ac:a4:ea:ba:a4:59:00:eb:04:e0:ef:46:
2d:7e:03:10:d7:c3:68:2f:bf:c3:a5:3b:57:a5:d3:
a3:8a:a7:53:ec:3c:20:8d:dd:22:a6:3f:fc:ff:e9:
57:5d:2e:a4:e5:0b:96:d2:9b:28:4c:fd:03:a7:fe:
b3:69:b9:88:42:27:81:3e:c4:ae:98:5e:9e:9d:06:
f5:3b:3d:3b:6d:90:35:cd:6a:08:cb:44:e3:a2:24:
63:fb:c5:9b:47:f6:e5:48:16:4a:7f:1b:08:92:56:
22:40:c9:5b:db:e7:c4:61:9f:b9:58:ea:ca:5c:14:
17:11:5b:6d:88:d5:1a:2c:30:e1:c1:d2:f7:3e:99:
f0:5e:56:32:63:fb:bf:dd:b2:74:77:5e:dc:fc:53:
81:f5:95:43:5e:76:24:fb:88:52:4d:f2:53:f7:a9:
00:58:62:8d:57:3c:af:c9:8e:3c:13:fb:62:53:c5:
4a:83:90:1c:b4:1e:f1:3d:fb:42:e2:49:bb:b3:3d:
21:eb:c7:d0:3c:85:a8:d6:05:d6:04:fb:e4:60:f0:
e2:bd:b0:c1:52:42:ad:68:60:e1:15:c8:32:b7:6e:
c2:6c:4c:e2:b6:dd:8a:d1:22:af:5e:dc:23:69:05:
4d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E3:1B:92:04:70:A2:3B:12:75:B1:E6:FB:E1:B4:FF:40:8C:48:F5
X509v3 Authority Key Identifier:
keyid:10:2C:B2:28:25:5A:C5:9C:06:F5:6B:F9:29:1A:AB:DD:49:CD:72:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/102CB228255AC59C06F56BF9291AABDD49CD72E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/102CB228255AC59C06F56BF9291AABDD49CD72E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31332e302f32342d3234203d3e203338313530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.91.13.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:f9:33:e0:28:7f:48:04:d1:3f:15:17:f5:e9:13:a1:b1:b8:
a6:bd:6e:a2:58:b0:40:d8:59:fa:85:76:b3:17:3c:f5:25:bd:
ac:3f:26:f9:a6:98:eb:ab:8f:04:5b:b1:8d:22:95:a5:5a:bd:
5f:d3:ac:2c:e4:69:6a:d2:a3:37:51:2a:0b:66:cb:6c:af:4c:
2a:4e:7a:c4:9b:eb:28:48:3b:b6:f1:3b:30:65:e7:c2:93:3a:
15:27:6d:d2:6c:e2:a1:7c:76:0e:fe:b0:a5:c3:15:20:5c:3b:
c6:cb:2d:f5:76:c9:43:01:82:84:9c:23:48:56:95:40:b3:a6:
58:69:9d:30:d5:e7:e3:ee:3d:0a:fc:ad:b5:96:54:5d:44:70:
d3:06:da:ad:ab:5e:7a:a1:53:1d:62:fc:ec:b9:86:87:3c:c2:
f6:b9:f7:0c:0e:35:d7:03:fe:2e:c1:94:6f:46:4b:ed:d6:e7:
df:06:ce:d9:7c:2e:2e:b2:7f:38:2b:dd:43:02:5a:9b:6d:84:
28:bb:72:c4:cf:a4:e6:a7:48:61:da:a7:45:10:b2:b8:22:29:
ce:c4:6a:98:bb:65:3e:81:7a:7e:1b:e7:2d:84:47:ed:13:13:
e1:e8:50:c9:56:9d:e0:e6:37:7b:6f:5b:f7:37:29:94:63:ae:
7b:fe:04:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:00:01 2026 by rpki-client