
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3230322e3135322e3132382e302f31392d3234203d3e203233393531.roa
File: 3230322e3135322e3132382e302f31392d3234203d3e203233393531.roa (raw, json)
Hash identifier: DePOqwtS+Yy/vwnGCfzYifsz/IKHcq1iOiguiAW2xIk=
Subject key identifier: 35:25:FA:1A:8F:4C:3C:92:8F:26:25:89:DE:C2:D0:C8:FE:C3:BB:98
Certificate issuer: /CN=6682CFF7F80E4587133A4FFEFC163B1417741DC6
Certificate serial: 59157EA4DD6289B3C135449ED6C25280DEFFC071
Authority key identifier: 66:82:CF:F7:F8:0E:45:87:13:3A:4F:FE:FC:16:3B:14:17:74:1D:C6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6682CFF7F80E4587133A4FFEFC163B1417741DC6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3230322e3135322e3132382e302f31392d3234203d3e203233393531.roa
Signing time: Sun 03 May 2026 02:18:12 +0000
ROA not before: Sun 03 May 2026 02:13:12 +0000
ROA not after: Sun 02 May 2027 02:18:12 +0000
asID: 23951
IP address blocks: 202.152.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.crl
rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6682CFF7F80E4587133A4FFEFC163B1417741DC6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:15:7e:a4:dd:62:89:b3:c1:35:44:9e:d6:c2:52:80:de:ff:c0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6682CFF7F80E4587133A4FFEFC163B1417741DC6
Validity
Not Before: May 3 02:13:12 2026 GMT
Not After : May 2 02:18:12 2027 GMT
Subject: CN=3525FA1A8F4C3C928F262589DEC2D0C8FEC3BB98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f5:5e:74:87:37:cf:c2:07:67:98:b7:79:91:
a6:a8:1c:f0:8c:2d:28:78:32:8e:e2:ce:18:34:ac:
af:38:f0:21:bd:d7:89:a5:78:ee:41:36:35:fb:b8:
4e:c6:5f:74:18:3d:47:13:1f:78:e6:17:1f:5b:20:
ce:6e:ea:9b:f9:f8:76:18:05:3d:38:9e:ab:7b:b3:
32:aa:2d:31:da:43:70:16:47:1a:66:d2:84:8e:93:
55:ef:fb:48:3a:ef:04:0f:0a:0d:ee:f4:6c:3c:2a:
7a:d9:f1:ac:ed:7c:6c:23:6e:3e:ff:97:cf:85:83:
8e:fc:a8:e4:f2:c2:a6:9a:5b:21:5f:b2:08:ce:8a:
6c:38:14:c6:3a:94:d6:9a:bf:69:ba:48:eb:be:d7:
73:0d:c6:f5:8e:3d:d2:a3:b2:7c:ac:f1:65:56:21:
f8:de:7a:ec:69:83:f7:dd:12:d1:e4:fb:92:a5:a5:
ee:d9:41:64:77:e8:27:09:4a:50:03:c3:48:34:84:
91:ef:fb:f9:67:b0:64:04:d9:9e:8a:69:c4:ad:50:
2c:79:a2:e5:41:2d:b7:11:a1:27:8c:39:58:18:e1:
82:ae:8a:9e:be:f1:fb:08:ef:74:e3:78:7b:e5:4e:
4b:03:51:71:cd:c0:8c:5c:4a:58:b1:18:c0:c8:2c:
1c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:25:FA:1A:8F:4C:3C:92:8F:26:25:89:DE:C2:D0:C8:FE:C3:BB:98
X509v3 Authority Key Identifier:
keyid:66:82:CF:F7:F8:0E:45:87:13:3A:4F:FE:FC:16:3B:14:17:74:1D:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/6682CFF7F80E4587133A4FFEFC163B1417741DC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6682CFF7F80E4587133A4FFEFC163B1417741DC6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3230322e3135322e3132382e302f31392d3234203d3e203233393531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.152.128.0/19
Signature Algorithm: sha256WithRSAEncryption
82:42:56:90:55:fd:28:b2:fb:a3:f8:c5:1b:11:3f:28:b3:bf:
32:26:92:cb:40:40:97:e2:0c:7d:10:a7:06:5f:ee:1e:36:d2:
53:d7:1c:93:63:cd:f0:95:68:ca:6c:c8:f1:91:42:43:a0:94:
61:a5:72:34:b8:82:af:2c:0b:5a:56:8c:d0:9a:83:ac:35:b5:
6e:49:ce:d3:19:25:7b:d8:e5:c4:ee:1b:07:b9:18:e5:cf:4d:
b0:45:84:8e:0c:53:44:23:fe:d7:17:8b:62:92:ad:f3:ac:9d:
e5:12:a6:5e:a1:2c:96:cf:5f:1c:a9:7f:51:6d:93:59:25:95:
0c:26:36:a0:17:07:72:77:a2:d4:a5:cb:35:1d:3c:de:17:ed:
8f:08:aa:a3:68:92:02:db:29:e7:04:a3:c0:3d:1d:7b:8e:d6:
4e:fe:c0:9d:6d:39:2e:63:aa:6a:21:c0:8e:77:6e:33:6f:cd:
75:e8:c9:d6:a8:94:99:9e:be:f1:30:be:d1:cc:03:a8:76:f8:
d5:fe:aa:dd:9f:bf:39:c1:73:21:ef:56:32:ed:f8:c5:6d:b6:
26:05:93:3c:36:8c:c3:ee:e9:0d:68:15:1c:0c:00:e0:11:e4:
b2:22:2e:91:3c:d3:35:bb:35:93:be:c2:b2:8d:41:68:1b:46:
15:03:07:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:23:37 2026 by rpki-client