
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34352e302f32342d3234203d3e203538343837.roa
File: 3230322e31302e34352e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier: Pq42kdvVdDx27B5bNAeqjUJLTlrLQKyMHAB5zlyHMPU=
Subject key identifier: 7C:DE:B6:F5:A6:E4:A8:BA:7C:AE:5F:99:BC:F6:8D:0C:AD:8F:AC:EE
Certificate issuer: /CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9
Certificate serial: 627D256067B52B6C588ACC61B30A3D6DEFD7171E
Authority key identifier: 91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34352e302f32342d3234203d3e203538343837.roa
Signing time: Sun 03 May 2026 02:22:53 +0000
ROA not before: Sun 03 May 2026 02:17:53 +0000
ROA not after: Sun 02 May 2027 02:22:53 +0000
asID: 58487
IP address blocks: 202.10.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl
rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:7d:25:60:67:b5:2b:6c:58:8a:cc:61:b3:0a:3d:6d:ef:d7:17:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9
Validity
Not Before: May 3 02:17:53 2026 GMT
Not After : May 2 02:22:53 2027 GMT
Subject: CN=7CDEB6F5A6E4A8BA7CAE5F99BCF68D0CAD8FACEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:80:14:4d:55:d7:7b:98:81:03:87:17:25:4f:
1c:d3:11:60:55:e4:98:b0:ff:f6:f7:ca:87:93:0e:
f0:8a:97:48:5f:ea:29:89:3e:9c:8d:f3:49:9d:f6:
e6:e4:39:da:ab:68:e4:8d:08:11:87:a6:42:33:d4:
25:66:d3:70:f8:c0:19:a6:82:14:83:2d:3d:ff:69:
95:40:a9:8f:71:b6:9d:36:84:d8:77:3b:35:e4:fc:
d3:57:9c:90:21:e4:85:f5:e9:ce:ae:1c:33:fb:97:
c1:5c:00:f4:25:29:0f:7e:e2:41:92:33:33:03:19:
45:58:b0:91:30:44:3d:70:07:6a:d1:22:7a:bc:29:
70:02:64:81:1c:c9:6b:35:ce:cb:96:87:80:08:b2:
3c:bd:8a:af:e0:00:16:42:35:4f:9c:35:1c:87:be:
76:55:ca:a5:f4:26:84:60:98:be:66:69:cf:dc:b5:
54:8e:59:c3:c1:5e:65:02:cc:8d:88:77:04:dd:4d:
94:99:1b:ce:d0:c1:2b:99:53:59:61:e3:a9:57:b1:
37:f9:05:25:cb:1d:d8:8f:7d:74:05:76:80:12:1f:
73:05:9c:36:41:3f:69:cc:e3:1a:95:15:a5:58:cd:
1b:9c:f8:34:ad:0e:92:91:c8:a2:9f:cc:f6:6a:1f:
de:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DE:B6:F5:A6:E4:A8:BA:7C:AE:5F:99:BC:F6:8D:0C:AD:8F:AC:EE
X509v3 Authority Key Identifier:
keyid:91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34352e302f32342d3234203d3e203538343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.10.45.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:d1:4b:1c:3b:4e:78:7f:d5:ec:ed:b1:c0:9e:c2:db:c4:79:
b6:07:b5:61:b2:0e:ef:a4:b9:df:55:a1:13:fd:f3:66:ab:4b:
4d:3c:64:fb:70:f1:26:e5:a8:8e:f2:72:79:13:2b:b3:df:f1:
49:68:91:6d:02:4e:ba:41:6d:cb:3b:10:c0:3c:c3:c8:3d:7d:
2b:65:1a:00:3a:d7:84:bf:ea:50:68:1b:54:13:51:7c:0c:e6:
7d:78:f0:c2:65:66:be:be:02:2b:95:7f:a9:42:d9:5a:3c:1e:
1c:8a:26:38:a1:59:bb:65:aa:f5:29:05:16:38:fc:ae:35:dd:
e3:55:43:03:19:0e:b8:6e:23:47:01:c3:11:22:d6:16:6c:fa:
9d:fc:a4:9d:9e:56:e5:cd:a1:80:26:ce:43:b2:63:2a:dc:51:
36:d7:b0:c7:25:d2:39:0f:15:d6:f6:cf:96:55:b9:3a:3e:c6:
8b:cd:79:3e:8c:7f:cc:d1:b3:1f:33:cd:46:1d:d5:04:b8:2e:
9a:ef:ec:d1:d4:18:5d:9f:b6:3e:96:12:86:13:83:8e:36:9e:
91:81:87:82:40:04:23:a7:5f:67:22:b3:f7:31:1b:8e:db:7f:
a0:e7:22:4f:27:a3:2e:16:7e:cd:27:fe:b1:7e:2a:02:b0:de:
8c:a7:6d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:45:18 2026 by rpki-client