
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33342e302f32332d3233203d3e203538343837.roa
File: 3230322e31302e33342e302f32332d3233203d3e203538343837.roa (raw, json)
Hash identifier: NFc2WVD68KvDyLGSXGxgzJXnsXBUY7x8VG9AIvZ5nuk=
Subject key identifier: 89:6B:E6:AA:52:67:CB:A6:8D:46:42:DB:57:9F:EC:7A:4D:2E:E7:29
Certificate issuer: /CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9
Certificate serial: 1A9DF166A7EE291F9C5A88A821F725E75A21D44F
Authority key identifier: 91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33342e302f32332d3233203d3e203538343837.roa
Signing time: Sun 03 May 2026 02:22:57 +0000
ROA not before: Sun 03 May 2026 02:17:57 +0000
ROA not after: Sun 02 May 2027 02:22:57 +0000
asID: 58487
IP address blocks: 202.10.34.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl
rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:9d:f1:66:a7:ee:29:1f:9c:5a:88:a8:21:f7:25:e7:5a:21:d4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9
Validity
Not Before: May 3 02:17:57 2026 GMT
Not After : May 2 02:22:57 2027 GMT
Subject: CN=896BE6AA5267CBA68D4642DB579FEC7A4D2EE729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:56:2c:95:30:6f:0d:8c:53:97:6f:c4:31:31:
67:cf:a1:11:16:80:1a:d0:80:26:9a:b8:17:f0:bd:
72:90:97:4e:9d:26:e8:98:4f:57:d5:55:0f:2b:e7:
9f:01:49:2f:51:33:5b:5a:40:6e:9b:69:5e:c9:0b:
90:43:d0:99:75:a1:f1:bb:f3:4d:d9:59:fa:1e:77:
6a:5e:9d:a6:fb:5a:95:b5:2f:fe:ef:d3:4e:da:3f:
46:9b:c5:19:24:66:d0:9a:c4:76:e9:42:f2:e2:01:
b2:00:e4:5e:8d:75:49:c9:73:3a:73:11:4d:27:8e:
da:1d:3d:24:bf:78:08:e0:98:a3:60:21:b3:29:e6:
72:c0:3f:43:9a:aa:34:fb:40:8e:e8:bc:14:61:e6:
3a:83:a9:ef:4d:97:d8:55:ca:f1:4f:6f:14:6f:31:
13:2b:59:5b:2e:bb:e5:d3:4b:64:dc:d2:01:9b:98:
7d:1d:0c:28:02:11:e0:f5:de:5b:24:e2:54:fb:7a:
a7:54:1a:76:6f:08:ed:22:92:c9:c4:c2:61:f4:31:
7e:ab:94:87:15:81:f6:9c:61:1b:fd:67:d3:5a:5b:
37:3c:d5:68:91:cf:11:33:a3:86:5b:a1:8e:53:14:
78:48:3c:af:08:b4:de:f3:ea:40:72:f5:8a:ed:4b:
0f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6B:E6:AA:52:67:CB:A6:8D:46:42:DB:57:9F:EC:7A:4D:2E:E7:29
X509v3 Authority Key Identifier:
keyid:91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33342e302f32332d3233203d3e203538343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.10.34.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:e7:a8:c3:a3:85:37:c5:7d:0e:c1:77:13:02:15:94:ef:b5:
69:a5:b4:cc:38:a5:4a:44:d1:f4:15:cc:1e:82:ba:3f:c1:0d:
94:4c:13:c4:10:ff:61:e8:bd:3a:6a:d0:39:7b:22:bc:82:cd:
f1:3f:10:4f:72:1b:a8:b5:0e:f1:52:05:94:19:8a:d4:28:ce:
de:6a:15:77:c5:67:bc:ad:a6:9c:50:56:bd:f6:ff:86:d6:c6:
88:4c:ba:34:87:53:f6:14:1d:63:ce:28:dc:5a:24:7c:03:fd:
d5:35:88:e5:78:3b:27:d6:86:c8:ee:47:be:d4:a8:dd:7f:25:
d4:77:fa:0b:57:ce:30:95:07:97:f9:e6:b3:6b:7a:40:e5:4e:
94:cb:6d:0e:a1:ba:0e:7c:10:17:30:53:fb:bc:30:22:d3:8c:
2c:c8:21:de:44:f8:28:3a:63:b4:44:4c:be:18:87:99:76:50:
93:e0:b8:05:18:02:5b:32:82:4f:f7:8f:90:4f:e0:42:25:17:
c9:97:7e:fe:2e:df:59:32:41:c7:a8:23:5b:b4:69:d0:22:f8:
11:45:73:d1:55:44:24:0f:6c:ac:ae:12:f7:c2:e8:38:a1:38:
30:c9:ff:83:d7:c2:28:c1:47:d2:55:37:fb:75:a0:db:f0:ef:
fc:39:b0:22
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUGp3xZqfuKR+cWoioIfcl51oh1E8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFEOEI4QkY0NjdGRThFQUMxOTNERjREMjYzQzg3RjVB
OTEyNTlBOTAeFw0yNjA1MDMwMjE3NTdaFw0yNzA1MDIwMjIyNTdaMDMxMTAvBgNV
BAMTKDg5NkJFNkFBNTI2N0NCQTY4RDQ2NDJEQjU3OUZFQzdBNEQyRUU3MjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ViyVMG8NjFOXb8QxMWfPoREW
gBrQgCaauBfwvXKQl06dJuiYT1fVVQ8r558BSS9RM1taQG6baV7JC5BD0Jl1ofG7
803ZWfoed2penab7WpW1L/7v007aP0abxRkkZtCaxHbpQvLiAbIA5F6NdUnJczpz
EU0njtodPSS/eAjgmKNgIbMp5nLAP0OaqjT7QI7ovBRh5jqDqe9Nl9hVyvFPbxRv
MRMrWVsuu+XTS2Tc0gGbmH0dDCgCEeD13lsk4lT7eqdUGnZvCO0iksnEwmH0MX6r
lIcVgfacYRv9Z9NaWzc81WiRzxEzo4ZboY5TFHhIPK8ItN7z6kBy9YrtSw8PAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUiWvmqlJny6aNRkLbV5/sek0u5ykwHwYDVR0j
BBgwFoAUkdi4v0Z/6OrBk99NJjyH9akSWakwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MmQ4ZjA2MGYtZTRiMy00YTRlLTk3ZmQtZjYxYWIxN2RlZWVkLzAvOTFEOEI4QkY0
NjdGRThFQUMxOTNERjREMjYzQzg3RjVBOTEyNTlBOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MUQ4QjhCRjQ2N0ZFOEVBQzE5M0RGNEQyNjNDODdGNUE5MTI1
OUE5LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJkOGYwNjBmLWU0YjMtNGE0ZS05
N2ZkLWY2MWFiMTdkZWVlZC8wLzMyMzAzMjJlMzEzMDJlMzMzNDJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDM1MzgzNDM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHKCiIwDQYJKoZIhvcN
AQELBQADggEBAB3nqMOjhTfFfQ7BdxMCFZTvtWmltMw4pUpE0fQVzB6Cuj/BDZRM
E8QQ/2HovTpq0Dl7IryCzfE/EE9yG6i1DvFSBZQZitQozt5qFXfFZ7ytppxQVr32
/4bWxohMujSHU/YUHWPOKNxaJHwD/dU1iOV4OyfWhsjuR77UqN1/JdR3+gtXzjCV
B5f55rNrekDlTpTLbQ6hug58EBcwU/u8MCLTjCzIId5E+Cg6Y7RETL4Yh5l2UJPg
uAUYAlsygk/3j5BP4EIlF8mXfv4u31kyQceoI1u0adAi+BFFc9FVRCQPbKyuEvfC
6DihODDJ/4PXwijBR9JVN/t1oNvw7/w5sCI=
-----END CERTIFICATE-----
Generated at Tue May 12 22:56:42 2026 by rpki-client