
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/3230322e35362e3136342e302f32322d3234203d3e203435333035.roa
File: 3230322e35362e3136342e302f32322d3234203d3e203435333035.roa (raw, json)
Hash identifier: WeFmDyNsHJ6btvYfzDFQoJzW4vr0tmZoF+30o64Nsw4=
Subject key identifier: 5C:5D:80:A1:8D:B2:FD:85:DF:39:A6:1F:64:46:91:39:CF:F9:83:81
Certificate issuer: /CN=5843958BB240779320D7F0C2B674ACF5EF6122BC
Certificate serial: 07A8148C9A142D44885852B12A0182F7216638C3
Authority key identifier: 58:43:95:8B:B2:40:77:93:20:D7:F0:C2:B6:74:AC:F5:EF:61:22:BC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/3230322e35362e3136342e302f32322d3234203d3e203435333035.roa
Signing time: Sun 03 May 2026 02:23:02 +0000
ROA not before: Sun 03 May 2026 02:18:02 +0000
ROA not after: Sun 02 May 2027 02:23:02 +0000
asID: 45305
IP address blocks: 202.56.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.crl
rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:a8:14:8c:9a:14:2d:44:88:58:52:b1:2a:01:82:f7:21:66:38:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5843958BB240779320D7F0C2B674ACF5EF6122BC
Validity
Not Before: May 3 02:18:02 2026 GMT
Not After : May 2 02:23:02 2027 GMT
Subject: CN=5C5D80A18DB2FD85DF39A61F64469139CFF98381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:aa:55:fb:76:7f:c5:2d:b4:17:42:79:82:5d:
3b:20:ad:d4:db:3c:78:f7:68:69:cd:51:fa:32:18:
38:8f:e4:e7:55:e0:78:60:49:cc:37:be:ef:29:c4:
81:00:04:8c:c9:c5:59:2d:ef:fa:1a:a3:5e:8a:73:
d1:54:23:4a:fa:13:cd:35:a8:e0:69:0e:0f:86:c1:
2c:4c:55:0f:ee:8f:19:34:25:72:71:88:ef:f2:ea:
e2:69:5f:4e:3f:d5:dd:21:1e:23:bc:9b:23:68:da:
3d:91:38:9b:76:99:bb:9e:cb:4f:17:75:f6:66:d4:
0c:7f:97:a2:d8:da:56:54:79:03:48:e9:f0:24:04:
6c:c8:f9:9f:f0:03:68:3b:0a:60:7c:70:a0:a4:43:
98:2a:9f:d1:5d:5a:1d:22:2c:99:dd:4c:1b:4b:09:
57:c2:67:3f:d3:62:9b:98:7e:7a:d4:ae:51:9d:15:
1c:83:d8:50:a5:43:b8:c3:5e:58:c0:ac:b8:2a:3d:
74:68:2c:44:ef:90:7c:d2:f3:e8:3a:d5:9a:8c:a4:
7b:36:c8:1c:22:93:1e:17:ed:c7:bc:d6:69:fa:83:
58:53:85:63:8c:00:3b:98:8a:8e:f5:00:45:a9:9a:
c6:e8:3c:01:c6:7f:9d:61:9d:2a:06:0e:6d:de:0c:
57:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5D:80:A1:8D:B2:FD:85:DF:39:A6:1F:64:46:91:39:CF:F9:83:81
X509v3 Authority Key Identifier:
keyid:58:43:95:8B:B2:40:77:93:20:D7:F0:C2:B6:74:AC:F5:EF:61:22:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/5843958BB240779320D7F0C2B674ACF5EF6122BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5843958BB240779320D7F0C2B674ACF5EF6122BC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/3230322e35362e3136342e302f32322d3234203d3e203435333035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.56.164.0/22
Signature Algorithm: sha256WithRSAEncryption
13:75:14:7d:f6:1b:2d:5c:02:b3:2d:74:dd:5b:ec:de:47:1e:
aa:b2:1a:8e:65:b8:87:76:7a:ea:b2:d6:46:db:f5:2d:fe:ae:
87:c8:c7:08:96:58:0c:2c:ac:42:4c:c2:04:a4:f8:fb:da:7d:
bd:ab:73:e9:15:7e:22:28:80:6f:d4:93:e4:98:26:5a:4c:aa:
26:b6:99:6b:33:01:10:63:a2:d5:33:2f:18:d1:60:b6:12:24:
c9:db:30:12:23:99:9f:20:70:3f:d9:14:36:26:2e:eb:0a:10:
b0:e6:bc:e3:1e:27:38:85:be:eb:89:b4:e6:76:26:be:cc:f7:
4a:fa:78:0d:d9:a6:32:34:54:c5:f8:b5:f2:4d:f5:ae:df:0f:
7a:5d:46:ce:62:c6:d7:31:ae:bf:67:5d:a8:7c:3a:fc:c0:a2:
9b:58:7f:0d:2e:2b:fc:46:e8:0f:ea:41:dd:7e:fa:f6:a2:58:
40:d3:db:4a:09:6c:b8:49:60:32:57:39:84:16:04:ac:4d:51:
14:a4:7d:99:b2:9a:b9:24:dc:e3:47:10:82:50:c4:2d:ff:d8:
79:73:dd:b5:e3:7b:80:00:2f:a4:16:36:ec:56:f5:92:06:dd:
f6:7f:71:47:2f:fc:96:54:79:a9:2a:96:d9:5c:5d:eb:45:e0:
79:2e:db:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:48:09 2026 by rpki-client