
$ rpki-client -vvf rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32372e302f32342d3234203d3e203234353238.roa
File: 3230322e39312e32372e302f32342d3234203d3e203234353238.roa (raw, json)
Hash identifier: K/TdIZS/b961M+WBr5AdYVjyihtdzB52T4G83Wtnnt4=
Subject key identifier: CA:80:46:1B:FB:76:2C:98:50:21:21:1A:73:54:2A:E6:D6:E1:3E:3A
Certificate issuer: /CN=7229DFE2E0A3A570A93521601EB1A61FC0CEAE07
Certificate serial: 6F2C0940662B89E0EE66360C768A14565F07EBC9
Authority key identifier: 72:29:DF:E2:E0:A3:A5:70:A9:35:21:60:1E:B1:A6:1F:C0:CE:AE:07
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32372e302f32342d3234203d3e203234353238.roa
Signing time: Sun 03 May 2026 02:21:33 +0000
ROA not before: Sun 03 May 2026 02:16:33 +0000
ROA not after: Sun 02 May 2027 02:21:33 +0000
asID: 24528
IP address blocks: 202.91.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.crl
rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:13:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:2c:09:40:66:2b:89:e0:ee:66:36:0c:76:8a:14:56:5f:07:eb:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7229DFE2E0A3A570A93521601EB1A61FC0CEAE07
Validity
Not Before: May 3 02:16:33 2026 GMT
Not After : May 2 02:21:33 2027 GMT
Subject: CN=CA80461BFB762C985021211A73542AE6D6E13E3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b7:59:21:28:58:fe:cf:01:9a:9a:f9:ee:f8:
ae:f3:9d:8d:1d:09:0e:65:8d:1f:8a:67:fd:b6:06:
1d:59:7d:ca:c3:55:92:70:9b:47:bb:05:ac:1c:4c:
e4:b0:64:5e:dd:50:b8:52:db:98:09:21:78:0c:10:
b7:b6:6f:34:eb:6f:b2:96:5c:c3:03:3e:36:6e:8a:
f4:7b:e4:ca:f9:42:82:e1:ac:1d:c4:64:df:4a:41:
b4:a0:55:be:31:ae:ae:ea:1a:80:c6:14:0d:e3:73:
d4:20:45:71:80:5d:dc:34:9b:e4:ed:ad:5a:5c:95:
f2:1f:15:b5:2c:ee:b6:ad:dc:c5:fe:9f:26:99:f2:
91:0e:ab:5e:b0:dd:d4:af:d7:b8:65:ca:45:8b:b0:
f4:1d:88:8f:10:46:97:8d:5f:aa:b7:a3:b3:0a:d6:
a0:15:32:2e:2a:26:6d:6c:ad:5a:7a:76:30:8b:77:
31:72:d2:3b:c3:fd:b0:08:11:1f:14:0b:4f:d7:0d:
3b:84:a6:ca:1d:3e:f3:25:4d:a9:72:79:2d:d1:b1:
74:e2:2c:a5:10:50:77:ff:61:51:da:09:fc:ca:f6:
d9:fc:20:f8:f7:1b:b6:56:3f:13:d1:45:d9:ef:f1:
ec:ed:6b:e6:00:1f:e6:85:3f:73:81:5a:d4:22:5f:
76:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:80:46:1B:FB:76:2C:98:50:21:21:1A:73:54:2A:E6:D6:E1:3E:3A
X509v3 Authority Key Identifier:
keyid:72:29:DF:E2:E0:A3:A5:70:A9:35:21:60:1E:B1:A6:1F:C0:CE:AE:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32372e302f32342d3234203d3e203234353238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.91.27.0/24
Signature Algorithm: sha256WithRSAEncryption
51:22:3d:e0:db:68:49:9d:5f:5a:e6:92:bd:23:7e:2c:a4:a7:
dd:4a:37:97:09:2d:9c:c6:c3:5c:33:f0:e0:fa:62:c9:8e:9f:
b4:7a:43:23:8e:4f:0d:ac:bf:37:83:f3:07:0f:a4:7d:3e:ea:
c6:e3:10:34:c7:ff:b7:4d:54:33:3f:bd:71:00:0d:e5:37:89:
7e:52:29:d4:67:1e:d4:e3:06:47:24:28:a5:18:11:28:ee:8b:
84:49:a5:41:19:59:47:6e:e1:51:bd:ab:61:d5:78:e2:4e:27:
c1:39:98:12:7c:b6:8e:6f:fe:c6:18:8a:9e:50:1d:1a:fc:53:
44:8a:51:1d:78:48:2f:3d:c8:e5:68:c9:b8:b1:27:e9:fd:97:
aa:08:77:d5:c8:06:f8:f0:58:7c:5c:3a:2a:77:33:0e:6d:94:
f8:dd:f0:af:d7:1a:67:d1:fd:a8:f2:9e:66:ce:87:9a:99:e1:
c4:bb:80:1a:b2:23:46:60:2a:f8:56:b8:84:81:20:49:ae:28:
53:79:a2:0d:1c:db:4b:ff:e4:c3:87:89:a3:4a:6b:d3:74:28:
f2:c0:b8:15:ed:d8:16:f2:72:68:fd:df:48:76:1e:28:77:4e:
dd:90:c5:ae:4d:a1:4b:15:f1:4a:3f:06:83:9c:5d:a6:90:d3:
8f:d6:ee:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:42:05 2026 by rpki-client