
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231312e302f32342d3234203d3e203138333933.roa
File: 3230332e37372e3231312e302f32342d3234203d3e203138333933.roa (raw, json)
Hash identifier: f8t2Nae54s3U7nW3j3F6RZh4pxVytwEO60A257IZyBQ=
Subject key identifier: DF:3E:02:55:F7:99:52:B2:54:45:89:00:C9:FE:E1:C8:0B:D2:9D:5B
Certificate issuer: /CN=866AFE6346388B98BA78E4A5133074656D9B7AD1
Certificate serial: 22FC1003DEA8B3035690EA760142A54FCCFFDE20
Authority key identifier: 86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231312e302f32342d3234203d3e203138333933.roa
Signing time: Sun 03 May 2026 02:18:05 +0000
ROA not before: Sun 03 May 2026 02:13:05 +0000
ROA not after: Sun 02 May 2027 02:18:05 +0000
asID: 18393
IP address blocks: 203.77.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl
rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:54:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:fc:10:03:de:a8:b3:03:56:90:ea:76:01:42:a5:4f:cc:ff:de:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866AFE6346388B98BA78E4A5133074656D9B7AD1
Validity
Not Before: May 3 02:13:05 2026 GMT
Not After : May 2 02:18:05 2027 GMT
Subject: CN=DF3E0255F79952B254458900C9FEE1C80BD29D5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:42:26:6c:82:b3:06:c7:78:cd:43:d1:05:88:
a8:07:fb:61:00:82:5b:04:01:af:cc:21:63:27:ec:
a5:40:72:4f:b7:6a:16:5c:17:4e:4d:23:7f:99:44:
02:54:ed:08:8c:f1:6c:e3:fd:61:7e:49:c3:fd:31:
62:77:f0:8a:0f:33:3c:93:3c:58:6e:ac:80:cc:2e:
03:16:21:63:e7:df:d5:76:f7:4b:98:07:cd:93:ff:
76:4c:53:63:b5:85:84:3c:85:af:03:13:c8:43:8a:
2f:88:9e:df:3c:51:1c:be:07:d3:9b:57:6e:4e:8e:
18:b3:11:08:3d:de:e0:b8:a7:8b:7e:0e:ec:ed:49:
9d:a4:4a:13:f7:de:c7:1c:fd:ed:c8:0f:2f:50:f4:
08:66:9b:57:8c:ea:4f:53:11:34:d8:dd:96:e6:16:
fb:d2:17:ac:e6:0b:34:08:1a:a1:e5:42:6a:8e:62:
fe:33:eb:15:07:34:af:63:42:63:fa:03:7c:64:e7:
50:70:98:58:46:0b:c1:a6:d2:bf:1e:bb:84:c2:f3:
bb:ab:d2:3a:0e:6c:29:60:85:46:49:4c:15:1d:d4:
8f:f3:8f:d7:f2:89:45:60:5c:ba:b0:33:7e:b3:ed:
fd:d8:55:da:4a:4c:05:56:a8:03:f8:61:57:26:60:
98:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3E:02:55:F7:99:52:B2:54:45:89:00:C9:FE:E1:C8:0B:D2:9D:5B
X509v3 Authority Key Identifier:
keyid:86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231312e302f32342d3234203d3e203138333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.77.211.0/24
Signature Algorithm: sha256WithRSAEncryption
39:ee:34:0c:ea:9b:70:10:02:cd:3e:fa:91:8f:e9:43:22:97:
02:02:93:df:67:33:b3:b2:97:fd:59:4e:0a:6f:01:c6:cf:b0:
a5:7c:31:e3:e3:58:be:65:dc:2e:fc:0f:4a:23:86:4d:ed:72:
80:06:33:d8:53:5f:73:c4:3e:9f:77:63:d1:dd:3b:cf:7f:6c:
14:07:01:06:fc:23:b7:46:f8:ec:4b:45:9d:b2:c5:97:26:04:
56:d3:5a:be:44:da:72:73:57:43:a1:7b:8c:12:45:9a:80:d2:
ef:c1:4f:0e:72:5b:09:1d:11:e1:a2:92:6e:fb:d6:b9:17:28:
dd:6b:da:ec:3f:98:b5:f2:f7:a4:c0:b2:26:02:7e:bb:ec:53:
a7:5e:6f:16:ab:4f:2e:1f:9e:bf:56:6d:fd:52:77:37:74:e8:
23:42:f9:56:f6:7c:d5:a9:04:81:0e:5a:d8:34:ba:27:9e:e8:
63:7f:88:bd:b0:ef:ab:b9:f5:e3:a0:55:13:d2:55:a0:af:f3:
97:26:65:d6:f6:fa:77:07:93:6b:37:d1:53:a7:b2:0f:c3:b6:
54:26:4c:bf:72:88:46:7d:e2:09:48:69:05:27:67:73:e7:6a:
a9:a9:23:3a:67:7c:d0:75:f3:ed:c3:84:9c:c1:57:8c:1e:81:
13:e5:4b:35
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUIvwQA96oswNWkOp2AUKlT8z/3iAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODY2QUZFNjM0NjM4OEI5OEJBNzhFNEE1MTMzMDc0NjU2
RDlCN0FEMTAeFw0yNjA1MDMwMjEzMDVaFw0yNzA1MDIwMjE4MDVaMDMxMTAvBgNV
BAMTKERGM0UwMjU1Rjc5OTUyQjI1NDQ1ODkwMEM5RkVFMUM4MEJEMjlENUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyQiZsgrMGx3jNQ9EFiKgH+2EA
glsEAa/MIWMn7KVAck+3ahZcF05NI3+ZRAJU7QiM8Wzj/WF+ScP9MWJ38IoPMzyT
PFhurIDMLgMWIWPn39V290uYB82T/3ZMU2O1hYQ8ha8DE8hDii+Int88URy+B9Ob
V25OjhizEQg93uC4p4t+DuztSZ2kShP33scc/e3IDy9Q9Ahmm1eM6k9TETTY3Zbm
FvvSF6zmCzQIGqHlQmqOYv4z6xUHNK9jQmP6A3xk51BwmFhGC8Gm0r8eu4TC87ur
0joObClghUZJTBUd1I/zj9fyiUVgXLqwM36z7f3YVdpKTAVWqAP4YVcmYJiDAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU3z4CVfeZUrJURYkAyf7hyAvSnVswHwYDVR0j
BBgwFoAUhmr+Y0Y4i5i6eOSlEzB0ZW2betEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MWUzMTU5ZjItMGNmMC00M2M2LWIyODItYzY5ZmJhMTNhMTRhLzAvODY2QUZFNjM0
NjM4OEI5OEJBNzhFNEE1MTMzMDc0NjU2RDlCN0FEMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84NjZBRkU2MzQ2Mzg4Qjk4QkE3OEU0QTUxMzMwNzQ2NTZEOUI3
QUQxLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFlMzE1OWYyLTBjZjAtNDNjNi1i
MjgyLWM2OWZiYTEzYTE0YS8wLzMyMzAzMzJlMzczNzJlMzIzMTMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzODMzMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMtN0zANBgkqhkiG
9w0BAQsFAAOCAQEAOe40DOqbcBACzT76kY/pQyKXAgKT32czs7KX/VlOCm8Bxs+w
pXwx4+NYvmXcLvwPSiOGTe1ygAYz2FNfc8Q+n3dj0d07z39sFAcBBvwjt0b47EtF
nbLFlyYEVtNavkTacnNXQ6F7jBJFmoDS78FPDnJbCR0R4aKSbvvWuRco3Wva7D+Y
tfL3pMCyJgJ+u+xTp15vFqtPLh+ev1Zt/VJ3N3ToI0L5VvZ81akEgQ5a2DS6J57o
Y3+IvbDvq7n146BVE9JVoK/zlyZl1vb6dweTazfRU6eyD8O2VCZMv3KIRn3iCUhp
BSdnc+dqqakjOmd80HXz7cOEnMFXjB6BE+VLNQ==
-----END CERTIFICATE-----
Generated at Wed May 13 04:03:05 2026 by rpki-client