
$ rpki-client -vvf rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32362e302f32342d3234203d3e203234353238.roa
File: 3230322e39312e32362e302f32342d3234203d3e203234353238.roa (raw, json)
Hash identifier: f3sbcSJJAXRFf4psPjs2YrJ+ZQorOa5bzyPsnXVoi58=
Subject key identifier: 23:6C:A6:0F:EB:2A:72:18:9A:09:27:7E:E2:F8:62:3E:D3:57:DD:6C
Certificate issuer: /CN=7229DFE2E0A3A570A93521601EB1A61FC0CEAE07
Certificate serial: 7AF8D63778D452FEF08CA37C91CBBF6E9186B7CE
Authority key identifier: 72:29:DF:E2:E0:A3:A5:70:A9:35:21:60:1E:B1:A6:1F:C0:CE:AE:07
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32362e302f32342d3234203d3e203234353238.roa
Signing time: Sun 03 May 2026 02:21:32 +0000
ROA not before: Sun 03 May 2026 02:16:32 +0000
ROA not after: Sun 02 May 2027 02:21:32 +0000
asID: 24528
IP address blocks: 202.91.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.crl
rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:13:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:f8:d6:37:78:d4:52:fe:f0:8c:a3:7c:91:cb:bf:6e:91:86:b7:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7229DFE2E0A3A570A93521601EB1A61FC0CEAE07
Validity
Not Before: May 3 02:16:32 2026 GMT
Not After : May 2 02:21:32 2027 GMT
Subject: CN=236CA60FEB2A72189A09277EE2F8623ED357DD6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f8:7b:c0:e7:9d:b1:7f:53:0c:f9:10:41:07:
a9:a6:63:6e:6e:3d:61:5a:29:f2:a7:c6:7a:7f:49:
0b:46:be:d6:f1:a2:f6:09:4c:4c:45:b0:81:4e:38:
f8:0b:c4:02:18:ef:f3:35:6e:1b:55:58:fb:8f:12:
f0:3b:4c:e4:36:41:aa:95:21:74:59:4a:fc:b2:92:
19:2a:2f:ff:e4:23:c8:db:68:da:1e:c4:e7:f2:51:
07:a3:db:91:e4:0c:48:df:e9:e0:5b:b3:bf:83:80:
16:22:54:69:93:dc:8b:9e:a0:f5:79:e1:d5:ab:11:
45:51:84:70:f0:ea:c0:2d:39:62:60:17:47:7a:e2:
09:68:77:74:63:71:b4:22:8c:d4:c6:07:48:ee:7c:
00:24:0a:cf:b3:98:77:1a:a1:93:0a:25:6a:d8:40:
3e:98:1b:a8:f9:0b:01:bf:b1:14:f5:3d:13:c5:b2:
42:55:d8:59:ce:c8:63:50:d1:07:cc:ee:69:8e:f9:
70:b4:ed:4a:22:2d:e6:0f:0b:36:e7:d8:e2:ac:fe:
60:90:4f:a1:86:e3:e7:03:ed:ae:1a:5a:91:a3:66:
36:10:e6:79:37:e0:37:77:b9:4f:2f:82:30:23:87:
97:d9:80:81:9b:f7:06:34:9d:35:39:9e:df:b9:38:
ec:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6C:A6:0F:EB:2A:72:18:9A:09:27:7E:E2:F8:62:3E:D3:57:DD:6C
X509v3 Authority Key Identifier:
keyid:72:29:DF:E2:E0:A3:A5:70:A9:35:21:60:1E:B1:A6:1F:C0:CE:AE:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32362e302f32342d3234203d3e203234353238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.91.26.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:dd:ff:31:a4:2a:8c:23:48:72:1e:39:00:d1:92:a0:6c:21:
48:9a:3b:7a:a2:ba:08:63:41:e5:e7:49:90:13:bf:8c:db:fe:
72:13:62:4b:3f:53:55:6d:48:8e:bf:2b:c8:c2:77:08:e2:24:
2b:2a:db:10:85:08:f9:dc:04:e7:1a:52:85:b4:ba:d1:95:c5:
ec:59:71:2d:8f:66:92:4c:4c:33:9f:b6:dc:9d:af:cc:98:41:
9d:04:43:cb:7f:d7:90:5c:65:3d:fa:60:2f:fa:5e:02:e0:ac:
d6:68:29:91:4c:4f:d0:a2:de:01:cb:56:b5:7b:cb:19:71:bb:
90:9f:4e:4b:19:fe:af:ea:4b:7d:56:1c:22:3b:cd:64:b7:4e:
83:53:a0:01:65:0e:57:1c:0f:86:38:f5:c6:14:3a:db:b6:5f:
2d:7e:03:64:56:bf:4c:58:12:84:09:da:6f:86:bf:b8:0d:1a:
2c:25:59:16:d1:10:09:dc:58:58:32:fa:e1:a2:27:d0:49:35:
1f:6c:3e:56:cc:bc:07:fc:f8:8f:25:16:0d:31:2d:1e:60:38:
9f:0d:cc:bd:23:a7:81:c0:22:d3:54:dd:02:07:ac:17:07:1a:
27:e4:5c:07:49:11:96:4a:5d:d2:3e:ac:84:3d:ac:e8:2c:fd:
6c:71:2c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:52:53 2026 by rpki-client