
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34342e302f32342d3234203d3e203538343837.roa
File: 3230322e31302e34342e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier: WKuOJrVVZlYWwTvTmiW45MtVMO0eJoMBeuJku53fqVY=
Subject key identifier: 9E:28:DC:33:94:FA:DE:B6:F7:5A:C1:93:C1:33:F1:26:C4:B0:3E:28
Certificate issuer: /CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9
Certificate serial: 74E91F8C751BE1BB7AD058960B00DCBB9C1A4C09
Authority key identifier: 91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34342e302f32342d3234203d3e203538343837.roa
Signing time: Sun 03 May 2026 02:22:46 +0000
ROA not before: Sun 03 May 2026 02:17:46 +0000
ROA not after: Sun 02 May 2027 02:22:46 +0000
asID: 58487
IP address blocks: 202.10.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl
rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:e9:1f:8c:75:1b:e1:bb:7a:d0:58:96:0b:00:dc:bb:9c:1a:4c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9
Validity
Not Before: May 3 02:17:46 2026 GMT
Not After : May 2 02:22:46 2027 GMT
Subject: CN=9E28DC3394FADEB6F75AC193C133F126C4B03E28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dc:3b:44:b1:8b:a5:31:ea:1c:9d:91:08:b5:
7f:4e:ee:aa:2f:10:c7:4d:43:97:c9:b0:0c:d4:4a:
7b:22:68:9b:02:96:67:79:a2:5e:bb:75:31:27:5f:
6e:6d:80:2c:a8:aa:ed:f3:c3:71:ff:80:23:e9:d3:
78:3b:72:08:47:62:67:08:d0:c7:6b:b1:4c:7f:bf:
4f:8b:3e:c0:c1:61:45:d4:05:3c:52:5f:3e:e4:f1:
12:42:2d:29:7f:e0:4e:06:94:d2:4a:6c:a5:ff:e2:
42:20:bd:29:cd:40:38:94:63:a9:9b:8a:b6:71:9a:
31:9c:3a:a6:a9:b3:15:08:e9:34:4b:5c:54:6f:d8:
e8:7f:fb:a5:b6:42:90:4f:4a:64:2a:f1:d9:d6:89:
c0:31:14:74:95:20:3c:99:83:b7:d0:2c:dc:ce:b6:
51:74:b2:d5:08:b1:8f:71:3e:61:89:19:cd:97:a1:
46:3d:a3:6d:68:9c:e7:7a:c5:0e:26:00:68:a5:5d:
51:ea:4e:0c:fe:f9:5d:94:42:fa:8b:69:a6:36:7f:
38:fd:db:f3:35:b6:87:b8:73:a7:ae:92:99:f6:d4:
9e:ea:af:ee:f9:2d:58:d2:96:c3:f9:ad:49:cd:3d:
da:b6:7b:1c:e7:05:da:b3:49:c5:f3:bb:4a:9f:9a:
63:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:28:DC:33:94:FA:DE:B6:F7:5A:C1:93:C1:33:F1:26:C4:B0:3E:28
X509v3 Authority Key Identifier:
keyid:91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34342e302f32342d3234203d3e203538343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.10.44.0/24
Signature Algorithm: sha256WithRSAEncryption
43:dc:b1:bd:70:06:2a:06:8b:b1:6d:fc:b2:4f:80:ac:77:3c:
3f:81:ca:ee:ed:d7:d2:8e:59:89:fb:61:af:df:c6:f1:2f:7e:
7c:c2:ef:86:58:de:49:2b:5d:fc:92:91:d3:6c:b8:7a:54:e7:
74:f0:74:d6:a0:49:9e:9c:ca:80:d2:07:e3:a0:90:91:60:40:
7b:b8:48:5a:85:f3:df:20:59:b2:5f:b3:f5:30:a5:cc:37:c5:
4b:95:5e:e6:1f:a2:78:f5:bb:f6:fa:20:83:e9:ab:c6:33:8f:
b3:28:58:58:10:64:6d:44:2a:d3:53:69:2d:6d:af:16:a6:9b:
43:74:da:cf:1c:6c:b9:da:fc:8d:c6:5a:51:4b:26:f0:0d:c2:
d0:bd:8c:ac:9a:03:b6:e3:b5:e8:f4:c3:ac:05:53:e1:70:99:
7e:a9:3c:67:85:85:76:44:3c:13:36:15:67:20:50:f5:b5:fb:
17:c7:87:14:40:a8:53:35:cf:fc:84:b6:bb:13:6c:13:92:2b:
40:08:6e:69:6b:14:98:41:b5:b9:23:89:93:d4:2d:34:64:ae:
14:41:04:9e:03:9d:a0:6a:44:70:70:60:ac:87:f0:80:80:5c:
50:6e:9a:dc:6f:72:a4:6a:fd:f0:61:67:8e:bf:44:2a:2f:cd:
04:7a:58:a0
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUdOkfjHUb4bt60FiWCwDcu5waTAkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFEOEI4QkY0NjdGRThFQUMxOTNERjREMjYzQzg3RjVB
OTEyNTlBOTAeFw0yNjA1MDMwMjE3NDZaFw0yNzA1MDIwMjIyNDZaMDMxMTAvBgNV
BAMTKDlFMjhEQzMzOTRGQURFQjZGNzVBQzE5M0MxMzNGMTI2QzRCMDNFMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH3DtEsYulMeocnZEItX9O7qov
EMdNQ5fJsAzUSnsiaJsClmd5ol67dTEnX25tgCyoqu3zw3H/gCPp03g7cghHYmcI
0MdrsUx/v0+LPsDBYUXUBTxSXz7k8RJCLSl/4E4GlNJKbKX/4kIgvSnNQDiUY6mb
irZxmjGcOqapsxUI6TRLXFRv2Oh/+6W2QpBPSmQq8dnWicAxFHSVIDyZg7fQLNzO
tlF0stUIsY9xPmGJGc2XoUY9o21onOd6xQ4mAGilXVHqTgz++V2UQvqLaaY2fzj9
2/M1toe4c6eukpn21J7qr+75LVjSlsP5rUnNPdq2exznBdqzScXzu0qfmmMVAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUnijcM5T63rb3WsGTwTPxJsSwPigwHwYDVR0j
BBgwFoAUkdi4v0Z/6OrBk99NJjyH9akSWakwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MmQ4ZjA2MGYtZTRiMy00YTRlLTk3ZmQtZjYxYWIxN2RlZWVkLzAvOTFEOEI4QkY0
NjdGRThFQUMxOTNERjREMjYzQzg3RjVBOTEyNTlBOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MUQ4QjhCRjQ2N0ZFOEVBQzE5M0RGNEQyNjNDODdGNUE5MTI1
OUE5LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJkOGYwNjBmLWU0YjMtNGE0ZS05
N2ZkLWY2MWFiMTdkZWVlZC8wLzMyMzAzMjJlMzEzMDJlMzQzNDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM1MzgzNDM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKCiwwDQYJKoZIhvcN
AQELBQADggEBAEPcsb1wBioGi7Ft/LJPgKx3PD+Byu7t19KOWYn7Ya/fxvEvfnzC
74ZY3kkrXfySkdNsuHpU53TwdNagSZ6cyoDSB+OgkJFgQHu4SFqF898gWbJfs/Uw
pcw3xUuVXuYfonj1u/b6IIPpq8Yzj7MoWFgQZG1EKtNTaS1trxamm0N02s8cbLna
/I3GWlFLJvANwtC9jKyaA7bjtej0w6wFU+FwmX6pPGeFhXZEPBM2FWcgUPW1+xfH
hxRAqFM1z/yEtrsTbBOSK0AIbmlrFJhBtbkjiZPULTRkrhRBBJ4DnaBqRHBwYKyH
8ICAXFBumtxvcqRq/fBhZ46/RCovzQR6WKA=
-----END CERTIFICATE-----
Generated at Wed May 13 00:45:15 2026 by rpki-client