
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3230322e35322e3134302e302f32332d3233203d3e203436303631.roa
File: 3230322e35322e3134302e302f32332d3233203d3e203436303631.roa (raw, json)
Hash identifier: sfhfAHrl757lamU4yGIl09WzhCGt6COimj3NHeX2Rnc=
Subject key identifier: D2:9D:D2:14:3F:41:2F:9E:2C:43:BB:FF:C0:E4:C9:9F:AC:29:08:AD
Certificate issuer: /CN=0A0669792883BF7DDDEB82AD6214E0FA907313E2
Certificate serial: 3244CEB8AFFEC75D9342509A53E9134E13CA2C73
Authority key identifier: 0A:06:69:79:28:83:BF:7D:DD:EB:82:AD:62:14:E0:FA:90:73:13:E2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0669792883BF7DDDEB82AD6214E0FA907313E2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3230322e35322e3134302e302f32332d3233203d3e203436303631.roa
Signing time: Sun 03 May 2026 02:22:19 +0000
ROA not before: Sun 03 May 2026 02:17:19 +0000
ROA not after: Sun 02 May 2027 02:22:19 +0000
asID: 46061
IP address blocks: 202.52.140.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.crl
rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0669792883BF7DDDEB82AD6214E0FA907313E2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:44:ce:b8:af:fe:c7:5d:93:42:50:9a:53:e9:13:4e:13:ca:2c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A0669792883BF7DDDEB82AD6214E0FA907313E2
Validity
Not Before: May 3 02:17:19 2026 GMT
Not After : May 2 02:22:19 2027 GMT
Subject: CN=D29DD2143F412F9E2C43BBFFC0E4C99FAC2908AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d0:86:8f:2f:97:aa:68:fd:e1:42:f9:97:8c:
a8:81:72:2c:80:d4:08:d0:61:4d:35:d3:0c:1a:a1:
3c:b1:1e:cf:93:7c:00:8d:50:47:d5:bb:b9:bc:3c:
7a:c3:20:9b:1c:73:d9:f1:da:e6:c6:b4:ab:d5:31:
66:3a:c9:8d:05:a8:8b:2c:83:ed:16:98:82:19:7e:
63:98:8a:07:97:18:5d:53:8f:c5:db:30:64:f2:b3:
a5:f0:17:e0:7c:39:ae:98:0c:02:58:26:9d:06:ff:
5c:7c:57:62:99:96:61:11:03:c7:39:e1:05:0d:e3:
17:45:fa:9d:5f:a6:af:9a:59:4d:60:88:e6:0e:7e:
c9:78:34:6e:39:2b:26:58:2c:94:ca:39:12:7b:70:
a3:8c:b2:bc:1e:f7:c3:ce:08:2b:84:89:50:1b:5a:
0a:cd:b5:7a:cd:6a:ae:29:e1:bb:df:7b:64:74:bc:
24:54:c7:12:1a:0c:8b:49:2c:78:76:b3:1f:d8:e3:
d0:31:f8:4e:01:d6:c8:f9:4a:a9:5a:cb:af:6d:59:
71:44:73:bc:69:51:2f:73:2f:bf:74:e7:6c:7e:f2:
17:d6:bd:52:ea:6c:98:f7:19:79:48:ab:3f:e3:74:
cc:0e:e1:96:d0:ab:92:aa:bf:97:0a:cf:53:28:fd:
ca:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9D:D2:14:3F:41:2F:9E:2C:43:BB:FF:C0:E4:C9:9F:AC:29:08:AD
X509v3 Authority Key Identifier:
keyid:0A:06:69:79:28:83:BF:7D:DD:EB:82:AD:62:14:E0:FA:90:73:13:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/0A0669792883BF7DDDEB82AD6214E0FA907313E2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A0669792883BF7DDDEB82AD6214E0FA907313E2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3230322e35322e3134302e302f32332d3233203d3e203436303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.52.140.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:2b:b2:43:78:50:e9:fa:89:0f:f7:c6:73:89:30:9c:b4:48:
b2:af:fb:44:1a:b4:6f:64:8f:7b:13:3f:a9:11:9b:10:f2:d3:
6a:2b:3d:eb:fb:0e:5b:4b:5c:ee:77:6b:f2:dc:a4:ba:7f:d8:
8d:bd:63:07:55:8f:d4:d3:27:30:f5:25:93:7e:07:75:2c:da:
68:2c:7b:b7:11:cc:73:80:81:3f:6f:8a:be:24:a3:ff:be:60:
0b:6d:ea:d7:1a:6b:2e:81:83:54:5c:f1:9f:aa:bf:52:90:a2:
61:dd:e9:45:cf:4a:5f:ac:6d:11:a6:38:ee:77:84:54:13:b6:
76:7e:ae:d9:e8:dd:59:29:29:1a:68:a0:57:59:e5:a5:5f:c6:
f4:70:72:51:d2:b0:2e:14:b2:74:79:8f:d2:e6:de:52:10:13:
5b:da:59:90:d5:8d:20:a0:f7:2a:fe:88:53:9a:a3:c9:cc:80:
9f:5d:4d:30:5d:74:ea:e7:0d:32:b5:95:8f:ca:f2:6d:1f:3d:
ad:36:c4:76:fb:e3:0c:73:c0:62:9a:c4:6d:5f:5b:5c:4d:87:
50:c0:d2:18:a2:0c:0a:40:37:83:fb:b9:4c:3e:a0:aa:c4:18:
cd:c4:33:47:c3:39:b9:cc:e3:2f:39:47:19:9f:36:85:ff:86:
e0:cb:83:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:00:04 2026 by rpki-client