
$ rpki-client -vvf rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/3230332e3134352e36322e302f32332d3234203d3e203436303233.roa
File: 3230332e3134352e36322e302f32332d3234203d3e203436303233.roa (raw, json)
Hash identifier: bfwByw1OryUOPM+r8Xth/6t7HmBI225IaP1YDRFG3v0=
Subject key identifier: 56:8B:12:EA:DB:92:94:8E:0E:2B:D7:4F:50:EB:EA:80:A7:D1:D8:CE
Certificate issuer: /CN=0171EAA218774432ABC9A9D090D868F4943C2BC9
Certificate serial: 7A13400D70CD9488D0DA19A87413ED0315E132DD
Authority key identifier: 01:71:EA:A2:18:77:44:32:AB:C9:A9:D0:90:D8:68:F4:94:3C:2B:C9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0171EAA218774432ABC9A9D090D868F4943C2BC9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/3230332e3134352e36322e302f32332d3234203d3e203436303233.roa
Signing time: Sun 03 May 2026 02:24:51 +0000
ROA not before: Sun 03 May 2026 02:19:51 +0000
ROA not after: Sun 02 May 2027 02:24:51 +0000
asID: 46023
IP address blocks: 203.145.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.crl
rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0171EAA218774432ABC9A9D090D868F4943C2BC9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:13:40:0d:70:cd:94:88:d0:da:19:a8:74:13:ed:03:15:e1:32:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0171EAA218774432ABC9A9D090D868F4943C2BC9
Validity
Not Before: May 3 02:19:51 2026 GMT
Not After : May 2 02:24:51 2027 GMT
Subject: CN=568B12EADB92948E0E2BD74F50EBEA80A7D1D8CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e9:c6:a7:7c:4e:88:51:69:86:27:7a:1f:bd:
01:be:28:d3:33:f5:60:cf:3a:67:87:dc:99:6c:6e:
f1:de:79:d2:7f:28:a9:ed:32:7b:f6:52:96:d0:48:
f1:b7:6a:49:68:e2:87:8c:35:9c:d4:47:94:45:95:
7d:12:03:83:e0:d4:10:be:27:26:0d:cd:6f:79:76:
bf:ef:3a:70:75:03:26:63:e1:3d:5d:68:9e:65:a5:
73:4c:44:cc:35:ed:f1:e5:0d:ac:42:82:36:9a:b3:
ef:09:db:be:79:b7:1b:86:2e:e0:02:51:5f:48:69:
85:19:b5:cd:69:67:96:d0:e5:f3:08:4f:98:f6:1b:
d3:36:2a:26:43:b2:77:b0:3c:75:90:ff:ea:f4:68:
db:3d:2d:34:45:d6:2f:0b:10:43:c3:c3:ef:62:89:
21:e8:87:37:e3:c7:e1:df:66:f4:74:db:77:68:8f:
75:00:eb:cb:b7:26:6e:b0:4d:33:b5:d9:95:10:47:
a2:44:02:34:f2:a1:68:44:33:2e:72:f4:ad:e5:35:
32:e9:f8:1d:51:e4:2a:e1:48:4c:0e:4c:6f:9a:76:
72:d0:49:3f:bd:e2:62:e7:f2:51:bc:93:1e:06:34:
c7:f0:6d:d7:32:c2:e2:58:3a:e0:3f:f4:a4:15:0a:
e7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8B:12:EA:DB:92:94:8E:0E:2B:D7:4F:50:EB:EA:80:A7:D1:D8:CE
X509v3 Authority Key Identifier:
keyid:01:71:EA:A2:18:77:44:32:AB:C9:A9:D0:90:D8:68:F4:94:3C:2B:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0171EAA218774432ABC9A9D090D868F4943C2BC9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/3230332e3134352e36322e302f32332d3234203d3e203436303233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.145.62.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:e7:82:c2:14:77:3e:be:b4:94:c0:59:53:8c:f1:68:c2:cb:
04:ed:df:b4:2e:84:29:51:4e:da:90:b4:63:89:3e:2c:6f:bb:
c7:37:19:8b:95:62:a7:34:68:6e:5a:fa:73:89:a9:9e:d6:9e:
36:3b:4b:61:3e:9f:8c:96:4e:0f:61:fb:74:73:78:2b:9e:15:
61:b2:42:91:32:29:73:62:bf:11:bc:70:4c:3b:d0:93:6f:8b:
46:ad:7f:f2:ac:2d:d4:27:fe:d3:0c:20:d1:68:47:2e:aa:9d:
24:66:df:08:a1:e1:3f:25:09:48:b2:84:3e:00:74:99:a4:a6:
96:31:8c:80:97:7a:0a:c0:1f:dd:eb:dd:17:82:2d:14:4f:03:
91:5a:78:de:8b:0e:3f:d2:62:dc:5a:19:64:70:0e:ba:95:0e:
8a:8a:e5:c6:c7:8e:2d:98:d7:c6:47:12:c6:d1:6b:3c:9a:f7:
59:ae:f7:e9:e8:03:72:c3:b2:c0:01:81:0c:89:bc:36:00:0c:
80:6c:d1:29:64:a3:83:d4:a3:66:f2:91:1e:a3:b7:2d:2b:4e:
90:9b:a4:db:c6:68:33:8c:5e:37:59:3b:1e:d2:ce:a7:9a:e7:
46:98:7d:1e:13:05:52:f4:55:64:06:70:47:b6:40:e7:4e:35:
ed:71:bd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:57:52 2026 by rpki-client