
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33392e302f32342d3234203d3e203538343837.roa
File: 3230322e31302e33392e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier: FMOzKFepxalJiA9R7ziV+8N8e6PtElsKQhGhROCbxF4=
Subject key identifier: E2:DA:DB:F6:94:AA:58:D6:54:12:64:F6:F8:DC:23:19:3C:FF:7A:33
Certificate issuer: /CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9
Certificate serial: 4CFAA509E1F5966541CBF6C223BCC0A47A716692
Authority key identifier: 91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33392e302f32342d3234203d3e203538343837.roa
Signing time: Sun 03 May 2026 02:22:57 +0000
ROA not before: Sun 03 May 2026 02:17:57 +0000
ROA not after: Sun 02 May 2027 02:22:57 +0000
asID: 58487
IP address blocks: 202.10.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl
rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:fa:a5:09:e1:f5:96:65:41:cb:f6:c2:23:bc:c0:a4:7a:71:66:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9
Validity
Not Before: May 3 02:17:57 2026 GMT
Not After : May 2 02:22:57 2027 GMT
Subject: CN=E2DADBF694AA58D6541264F6F8DC23193CFF7A33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e2:4f:4f:3a:4a:88:67:a8:98:fd:8c:41:27:
63:84:7b:29:a2:42:b3:96:05:f7:cb:7b:9f:16:a5:
ce:a2:f1:bf:fd:99:7c:1e:ab:f9:93:e0:f9:84:44:
6b:dd:db:7c:73:50:7f:41:ec:89:97:da:c7:a2:b0:
12:97:80:97:96:8f:8d:9c:e1:66:0b:2a:54:62:6d:
9f:d3:47:1f:43:8c:53:e1:01:f0:ce:aa:c3:96:3b:
e7:95:a0:d0:1b:d5:85:2c:c6:ad:05:97:db:e7:2e:
7a:8c:37:68:b6:fa:5e:b2:80:cc:b1:b8:fb:e3:00:
2b:b9:6a:90:34:fb:99:8c:af:f9:34:64:ef:4f:17:
05:d5:f7:bb:56:b9:ec:68:67:58:93:54:18:dc:c2:
85:8a:7f:ac:f4:f9:36:12:d3:e4:2e:bc:97:ab:d0:
a0:d6:c6:6f:75:1f:10:af:d9:86:fc:5b:f2:ea:f6:
ee:25:cc:11:8f:e9:00:75:56:dd:38:69:49:4e:31:
f6:cc:65:52:7c:2a:90:46:1f:55:69:d4:ca:44:5b:
c6:11:b2:83:77:48:7e:ab:7b:58:bc:67:53:7f:9d:
92:a4:7f:43:7a:38:10:fe:5e:f5:a8:c3:ea:95:9b:
41:ff:cb:6e:cf:a1:f6:0c:8f:b8:9b:16:f4:ae:ea:
e6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DA:DB:F6:94:AA:58:D6:54:12:64:F6:F8:DC:23:19:3C:FF:7A:33
X509v3 Authority Key Identifier:
keyid:91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33392e302f32342d3234203d3e203538343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.10.39.0/24
Signature Algorithm: sha256WithRSAEncryption
35:ce:6e:fd:4a:b2:48:3b:1c:ed:1d:29:a4:35:25:e5:09:ed:
74:0c:29:76:ec:d6:f8:b4:e9:6c:1f:6b:ad:53:e3:ce:d1:74:
84:48:c6:9d:52:20:b9:20:a6:67:fb:de:91:6c:4c:f9:c9:7b:
55:68:5c:c7:d4:c4:2c:04:61:6e:78:38:c2:57:ed:a7:64:40:
2c:8e:e5:6e:23:22:82:d2:20:58:b2:5a:46:44:40:32:bd:cd:
6a:8c:66:ca:47:be:9e:44:2f:ed:35:d6:ce:1b:85:64:dd:6e:
1d:d2:66:2c:ee:6c:b5:1d:df:db:3e:33:19:bc:3a:d5:49:79:
c0:f2:2b:d8:e5:dc:95:a4:84:33:c7:37:79:5c:a4:59:07:f9:
9a:d8:ff:3e:07:4a:3e:d3:fb:7b:34:84:2d:e3:90:8d:1b:90:
2b:a4:37:4d:b7:7a:d5:9f:96:61:d3:55:14:f2:34:8f:db:4f:
7a:f2:31:84:d2:f3:41:24:df:63:88:43:cf:15:8f:79:ad:74:
d0:b0:40:0e:98:75:dd:94:08:cb:d1:a8:00:df:be:d5:2b:a2:
6f:ab:e5:f7:46:8f:de:b1:75:f1:9b:d5:82:b8:e5:c3:fa:23:
e1:5d:7d:31:3e:85:93:89:7e:83:74:1b:af:f1:6d:68:60:f5:
61:6f:84:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:21:39 2026 by rpki-client