
$ rpki-client -vvf rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3230322e3136322e3230322e302f32342d3234203d3e203233363739.roa
File: 3230322e3136322e3230322e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier: GjT9QT3oyW6G0K5kI+WCT/jUEuaQfgrzrPI0wxHvStc=
Subject key identifier: 73:45:1B:B2:F8:33:AE:90:67:83:C3:D8:E6:2D:E3:5C:82:1C:3C:87
Certificate issuer: /CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
Certificate serial: 3B4CC0D1C95B709386BF29F19951D30C54C7291F
Authority key identifier: D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3230322e3136322e3230322e302f32342d3234203d3e203233363739.roa
Signing time: Sun 03 May 2026 02:18:55 +0000
ROA not before: Sun 03 May 2026 02:13:55 +0000
ROA not after: Sun 02 May 2027 02:18:55 +0000
asID: 23679
IP address blocks: 202.162.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl
rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:11:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:4c:c0:d1:c9:5b:70:93:86:bf:29:f1:99:51:d3:0c:54:c7:29:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
Validity
Not Before: May 3 02:13:55 2026 GMT
Not After : May 2 02:18:55 2027 GMT
Subject: CN=73451BB2F833AE906783C3D8E62DE35C821C3C87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ce:fd:7a:8f:e0:1b:4b:2e:1b:c4:47:22:75:
d6:79:e5:0c:e9:65:69:5e:04:60:c8:76:a1:e7:0a:
a1:a5:e5:a4:f6:ce:dc:d6:58:1e:01:73:0e:87:96:
b9:39:63:ab:7e:f5:af:9f:ad:46:f2:64:0d:51:d6:
40:58:58:29:08:e9:b9:0b:f3:40:e5:06:27:fa:07:
f9:6a:31:da:1d:61:26:fd:07:0b:46:32:73:3b:d6:
11:7e:7b:91:60:71:08:0a:83:4e:e6:02:05:75:41:
a7:93:7d:8f:b0:7e:2c:8c:d3:8c:ff:7f:2a:82:b4:
bf:9a:95:29:c3:7a:c8:3e:94:ef:1c:4b:5d:fe:07:
d6:57:33:ec:82:8d:47:ec:98:26:65:92:3e:50:f2:
2c:60:5c:85:9e:0e:99:e5:53:43:90:5a:7d:0a:88:
e9:f8:62:24:dc:6e:40:ca:6a:90:ef:a4:8d:81:1c:
9c:1d:11:6e:5b:4b:96:8f:dc:5d:72:31:49:d0:90:
51:3a:09:7f:c9:55:5b:67:66:98:f3:e6:a6:b7:eb:
2c:5c:eb:a6:c0:fa:3e:08:70:6e:59:59:22:c5:7b:
c4:bc:10:4f:15:59:d5:b4:ce:ae:86:77:d1:8d:c0:
70:f0:ed:01:c6:d7:9e:cf:bf:64:01:b7:bf:09:7c:
0a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:45:1B:B2:F8:33:AE:90:67:83:C3:D8:E6:2D:E3:5C:82:1C:3C:87
X509v3 Authority Key Identifier:
keyid:D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3230322e3136322e3230322e302f32342d3234203d3e203233363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.162.202.0/24
Signature Algorithm: sha256WithRSAEncryption
58:91:a6:a9:c3:33:db:71:cd:71:f1:ef:15:01:23:c8:f3:e5:
15:d2:0b:3b:05:2b:0a:74:81:33:88:7c:da:66:3e:a2:44:f3:
5c:bc:a3:8c:4b:86:e5:4c:ca:f1:25:67:09:b7:bd:83:cf:94:
1e:c1:97:0b:10:be:6c:bd:9e:44:4b:b8:35:b9:27:eb:31:50:
85:31:2d:b6:b0:eb:65:ce:2d:a7:43:83:19:63:05:64:6c:95:
74:a1:95:da:ed:1e:21:9a:66:91:97:0e:93:e5:75:67:e5:3d:
85:f3:19:dd:c0:82:55:32:3c:92:35:9a:6e:5b:f3:6e:1f:33:
d4:90:ec:70:6b:d4:dd:1f:db:b6:f7:c3:16:0a:d3:1d:5f:37:
7c:fa:25:8a:9f:9d:2e:f1:2a:fc:58:18:10:17:c2:70:9b:14:
70:5b:e8:77:0e:b0:04:cf:d5:0a:60:a5:db:3f:00:09:40:0f:
48:0d:15:33:3d:ef:19:6a:5c:92:36:d7:96:81:a0:99:9a:bc:
fb:43:b6:ba:f0:25:71:ce:14:85:57:6c:f3:53:13:c0:57:4e:
5c:eb:39:02:4c:3e:01:4b:df:c1:98:e1:66:24:7e:90:1a:5a:
03:cf:37:0d:ec:f6:1f:d8:5e:72:bd:75:26:e7:ad:9d:76:d2:
77:c2:c2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:04:03 2026 by rpki-client