
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3230332e3137362e3137362e302f32322d3234203d3e203338373538.roa
File: 3230332e3137362e3137362e302f32322d3234203d3e203338373538.roa (raw, json)
Hash identifier: UhpUzSIid4nElP2BrBkQKHrGQ01clvXoVE30CFaDI7E=
Subject key identifier: 31:7F:DB:A8:53:D7:47:5F:66:CB:AF:75:E1:FC:99:EF:7B:CF:34:D8
Certificate issuer: /CN=B8A1A7850FE4606645CDB993613F0326921CB0E7
Certificate serial: 644E8979A659E0A5BD888B68C776D25FEC380D08
Authority key identifier: B8:A1:A7:85:0F:E4:60:66:45:CD:B9:93:61:3F:03:26:92:1C:B0:E7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3230332e3137362e3137362e302f32322d3234203d3e203338373538.roa
Signing time: Sun 03 May 2026 02:17:03 +0000
ROA not before: Sun 03 May 2026 02:12:03 +0000
ROA not after: Sun 02 May 2027 02:17:03 +0000
asID: 38758
IP address blocks: 203.176.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.crl
rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:4e:89:79:a6:59:e0:a5:bd:88:8b:68:c7:76:d2:5f:ec:38:0d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8A1A7850FE4606645CDB993613F0326921CB0E7
Validity
Not Before: May 3 02:12:03 2026 GMT
Not After : May 2 02:17:03 2027 GMT
Subject: CN=317FDBA853D7475F66CBAF75E1FC99EF7BCF34D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:34:d7:5c:0f:e5:2f:93:ef:0f:24:61:68:5e:
c1:56:3e:a7:18:45:53:1d:30:b0:2f:76:40:bc:cd:
f6:30:c7:06:aa:7d:37:0b:51:1e:cf:ff:76:0f:86:
0c:c0:78:97:58:ff:4c:5b:1f:11:33:f7:60:19:3d:
5c:2e:49:ed:8f:d9:89:59:38:19:37:44:3c:30:e3:
a9:31:8a:8c:cc:da:73:ae:7d:09:25:18:9f:79:e1:
92:92:50:49:27:a7:f6:6c:fc:09:56:a8:10:5c:26:
e3:0d:6d:2f:c5:26:ab:ef:4c:9f:10:ca:97:0f:94:
78:c5:d8:28:5c:08:1d:01:1a:ad:92:6f:12:d5:22:
98:fc:e5:98:e9:14:18:24:2f:c5:14:1a:df:a7:bf:
3a:f8:92:c8:58:5f:33:94:77:97:f0:ea:d7:bf:c7:
d6:52:03:73:1f:af:17:12:94:64:88:90:a9:d1:c8:
89:5d:5b:f1:98:ac:b7:12:70:6d:82:0a:99:35:4a:
1f:c2:7e:ef:03:23:a3:e2:37:ac:fd:12:b9:24:07:
29:0d:9e:5c:a5:30:96:9e:cd:7e:1b:57:cd:92:28:
75:66:32:ac:bb:c8:5c:e2:bb:5d:10:55:5b:43:d4:
23:8e:aa:c6:1a:e3:93:6f:6d:16:77:c8:41:c6:54:
2d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7F:DB:A8:53:D7:47:5F:66:CB:AF:75:E1:FC:99:EF:7B:CF:34:D8
X509v3 Authority Key Identifier:
keyid:B8:A1:A7:85:0F:E4:60:66:45:CD:B9:93:61:3F:03:26:92:1C:B0:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3230332e3137362e3137362e302f32322d3234203d3e203338373538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.176.176.0/22
Signature Algorithm: sha256WithRSAEncryption
91:aa:8d:18:76:d9:70:e6:a9:6a:2b:09:05:3c:9f:11:4b:a0:
6f:29:ce:c4:3d:ef:51:4d:79:c8:73:81:60:b9:9e:53:58:d2:
19:1c:80:a6:07:81:61:57:a0:92:bc:1b:1d:2d:1a:fa:da:af:
ef:2f:f4:a2:1b:5f:26:c3:f0:ed:15:49:16:59:a3:58:22:e2:
c8:b7:2a:46:dc:1f:4b:04:e1:d6:02:2f:dc:8e:ba:e3:5b:06:
25:68:25:b3:a9:ee:fc:a7:b8:bc:e6:9a:3c:c4:3a:2a:24:f0:
be:6e:8a:53:fb:68:b8:71:ec:3a:69:4a:73:40:64:2f:fb:37:
b8:8a:90:a3:27:4a:3e:83:0e:4a:d5:52:40:31:66:f9:f6:33:
c2:d6:9f:3e:28:39:da:cc:fd:92:ca:d6:c5:b1:fa:03:23:2e:
fc:f5:cc:f0:d3:fc:97:7a:60:b9:74:4a:35:5c:4b:88:53:80:
68:04:35:d4:07:1f:b2:2e:de:f9:e7:c1:40:b7:5b:70:ab:88:
80:dd:9b:75:55:26:52:f1:90:36:19:73:93:0b:1a:9d:46:58:
5d:de:d8:22:f6:4d:f9:e4:95:1c:e6:7d:a8:e7:a3:80:c2:d3:
0f:7a:0f:7b:81:33:1d:06:55:c4:65:2c:80:ed:98:58:d0:86:
9b:49:7e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:09:38 2026 by rpki-client