
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231342e302f32342d3234203d3e203138333933.roa
File: 3230332e37372e3231342e302f32342d3234203d3e203138333933.roa (raw, json)
Hash identifier: 0AX527EylIA9pLoipxIcKBiir8OzbZCVFIMEG9usE3g=
Subject key identifier: 56:8B:DC:EC:D2:DE:32:30:D0:B0:9D:4F:C6:6A:B0:FB:38:AE:F8:CC
Certificate issuer: /CN=866AFE6346388B98BA78E4A5133074656D9B7AD1
Certificate serial: 521FBD3832801A0B4772F8C4CF515DBB48CEFC97
Authority key identifier: 86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231342e302f32342d3234203d3e203138333933.roa
Signing time: Sun 03 May 2026 02:18:08 +0000
ROA not before: Sun 03 May 2026 02:13:08 +0000
ROA not after: Sun 02 May 2027 02:18:08 +0000
asID: 18393
IP address blocks: 203.77.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl
rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:54:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:1f:bd:38:32:80:1a:0b:47:72:f8:c4:cf:51:5d:bb:48:ce:fc:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866AFE6346388B98BA78E4A5133074656D9B7AD1
Validity
Not Before: May 3 02:13:08 2026 GMT
Not After : May 2 02:18:08 2027 GMT
Subject: CN=568BDCECD2DE3230D0B09D4FC66AB0FB38AEF8CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a7:d6:d4:47:05:93:2a:73:21:8f:9d:c2:19:
1f:c0:98:b1:98:76:a2:5b:28:f8:a0:8a:cf:0c:e5:
26:81:88:56:83:c6:57:ae:2f:f0:16:9f:c3:02:05:
de:4b:7d:e0:ee:5d:df:49:46:68:b7:b9:45:43:7f:
1f:9e:05:6b:9b:13:c6:c9:99:75:a8:e6:4d:c2:96:
97:9f:41:84:29:16:df:b1:49:df:7a:31:a1:92:28:
07:63:4f:83:36:83:ab:5a:8b:c6:88:91:7e:00:26:
14:36:1d:71:94:7f:ab:29:fc:5c:ed:44:54:d7:ed:
61:7b:d1:ad:cb:7f:f4:b4:fb:e0:98:56:b8:d0:bb:
a4:ac:f3:4a:00:ca:fa:5a:44:18:5b:6c:eb:0f:11:
34:f6:86:46:46:32:57:2a:7c:51:57:4a:44:15:d8:
cc:93:01:32:ff:99:fc:11:c1:e4:7f:67:5d:54:62:
ba:72:10:ae:a7:b6:ec:cf:6e:1b:8b:7f:4a:b3:77:
bf:be:d9:55:33:4c:91:be:c0:09:2a:72:a9:10:3f:
db:68:06:81:0d:54:dd:84:e2:0a:c7:6e:39:1d:6b:
6e:3e:dd:78:e7:98:a6:fa:7d:16:56:07:9f:94:29:
42:f1:84:1f:6e:e7:1c:77:f1:ca:d1:e9:be:7e:04:
1e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8B:DC:EC:D2:DE:32:30:D0:B0:9D:4F:C6:6A:B0:FB:38:AE:F8:CC
X509v3 Authority Key Identifier:
keyid:86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3231342e302f32342d3234203d3e203138333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.77.214.0/24
Signature Algorithm: sha256WithRSAEncryption
56:d3:d7:80:c8:a2:fc:0d:dc:26:4b:d0:f7:51:f0:b9:f0:1e:
01:ca:31:94:0f:dc:25:1a:02:b4:dd:29:a4:17:dc:39:cd:a9:
34:ae:a4:58:c0:ed:92:ec:d2:b9:df:d5:9f:54:e1:78:82:7d:
a6:22:9d:81:8a:3a:34:b9:45:0c:84:34:33:87:76:0e:a1:2f:
6a:f6:30:6e:d1:c6:ed:c7:b5:06:35:8b:e0:70:b1:e3:f6:1a:
68:bf:5f:fd:59:1c:4d:68:98:95:79:cb:bb:6d:81:e7:9d:fa:
32:a2:29:af:ea:ec:28:2b:05:5b:b7:60:30:a8:ab:d9:02:75:
08:6f:44:59:a1:91:47:d5:63:3e:82:9b:cc:31:49:9b:ed:c3:
f5:cb:09:06:dd:fc:a0:95:96:74:29:cf:bf:66:8c:94:b4:44:
57:64:2e:90:f7:13:38:1b:94:6d:97:e0:97:61:9c:25:4a:1a:
67:2a:bc:ba:29:79:fd:ca:b0:e5:3a:32:95:47:4f:f6:28:9a:
67:2b:c0:96:75:34:69:df:32:91:22:4c:d4:0f:64:f2:64:10:
60:4b:db:4c:15:04:ba:cc:ab:0b:c3:1e:68:13:fb:87:16:60:
05:23:7f:a6:bb:fc:b2:32:5c:41:f8:b0:61:33:e5:e2:f3:65:
d0:36:8c:92
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUUh+9ODKAGgtHcvjEz1Fdu0jO/JcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODY2QUZFNjM0NjM4OEI5OEJBNzhFNEE1MTMzMDc0NjU2
RDlCN0FEMTAeFw0yNjA1MDMwMjEzMDhaFw0yNzA1MDIwMjE4MDhaMDMxMTAvBgNV
BAMTKDU2OEJEQ0VDRDJERTMyMzBEMEIwOUQ0RkM2NkFCMEZCMzhBRUY4Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsp9bURwWTKnMhj53CGR/AmLGY
dqJbKPigis8M5SaBiFaDxleuL/AWn8MCBd5LfeDuXd9JRmi3uUVDfx+eBWubE8bJ
mXWo5k3ClpefQYQpFt+xSd96MaGSKAdjT4M2g6tai8aIkX4AJhQ2HXGUf6sp/Fzt
RFTX7WF70a3Lf/S0++CYVrjQu6Ss80oAyvpaRBhbbOsPETT2hkZGMlcqfFFXSkQV
2MyTATL/mfwRweR/Z11UYrpyEK6ntuzPbhuLf0qzd7++2VUzTJG+wAkqcqkQP9to
BoENVN2E4grHbjkda24+3XjnmKb6fRZWB5+UKULxhB9u5xx38crR6b5+BB5HAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUVovc7NLeMjDQsJ1Pxmqw+ziu+MwwHwYDVR0j
BBgwFoAUhmr+Y0Y4i5i6eOSlEzB0ZW2betEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MWUzMTU5ZjItMGNmMC00M2M2LWIyODItYzY5ZmJhMTNhMTRhLzAvODY2QUZFNjM0
NjM4OEI5OEJBNzhFNEE1MTMzMDc0NjU2RDlCN0FEMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84NjZBRkU2MzQ2Mzg4Qjk4QkE3OEU0QTUxMzMwNzQ2NTZEOUI3
QUQxLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFlMzE1OWYyLTBjZjAtNDNjNi1i
MjgyLWM2OWZiYTEzYTE0YS8wLzMyMzAzMzJlMzczNzJlMzIzMTM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzODMzMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMtN1jANBgkqhkiG
9w0BAQsFAAOCAQEAVtPXgMii/A3cJkvQ91HwufAeAcoxlA/cJRoCtN0ppBfcOc2p
NK6kWMDtkuzSud/Vn1TheIJ9piKdgYo6NLlFDIQ0M4d2DqEvavYwbtHG7ce1BjWL
4HCx4/YaaL9f/VkcTWiYlXnLu22B5536MqIpr+rsKCsFW7dgMKir2QJ1CG9EWaGR
R9VjPoKbzDFJm+3D9csJBt38oJWWdCnPv2aMlLREV2QukPcTOBuUbZfgl2GcJUoa
Zyq8uil5/cqw5ToylUdP9iiaZyvAlnU0ad8ykSJM1A9k8mQQYEvbTBUEusyrC8Me
aBP7hxZgBSN/prv8sjJcQfiwYTPl4vNl0DaMkg==
-----END CERTIFICATE-----
Generated at Wed May 13 04:03:57 2026 by rpki-client