
$ rpki-client -vvf rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/3230332e3134352e36322e302f32342d3234203d3e203436303233.roa
File: 3230332e3134352e36322e302f32342d3234203d3e203436303233.roa (raw, json)
Hash identifier: kr2x2jAHoOVd23uTDgYpT8+IZPKj2iayb++8bFwe1Jc=
Subject key identifier: E4:9C:D2:FC:D7:0C:D5:15:5F:F4:95:69:97:B9:52:21:DB:AF:0D:93
Certificate issuer: /CN=0171EAA218774432ABC9A9D090D868F4943C2BC9
Certificate serial: 2085D6D091DA3EC0E089352943C33A4075C17C0F
Authority key identifier: 01:71:EA:A2:18:77:44:32:AB:C9:A9:D0:90:D8:68:F4:94:3C:2B:C9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0171EAA218774432ABC9A9D090D868F4943C2BC9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/3230332e3134352e36322e302f32342d3234203d3e203436303233.roa
Signing time: Sun 03 May 2026 02:24:52 +0000
ROA not before: Sun 03 May 2026 02:19:52 +0000
ROA not after: Sun 02 May 2027 02:24:52 +0000
asID: 46023
IP address blocks: 203.145.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.crl
rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0171EAA218774432ABC9A9D090D868F4943C2BC9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:85:d6:d0:91:da:3e:c0:e0:89:35:29:43:c3:3a:40:75:c1:7c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0171EAA218774432ABC9A9D090D868F4943C2BC9
Validity
Not Before: May 3 02:19:52 2026 GMT
Not After : May 2 02:24:52 2027 GMT
Subject: CN=E49CD2FCD70CD5155FF4956997B95221DBAF0D93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e1:5d:bc:0c:1b:0d:46:ce:4d:bc:b1:1f:e8:
cc:10:70:fe:72:f0:44:ec:f8:74:32:cd:b4:48:e4:
dd:89:a5:48:81:39:77:2e:71:14:c9:d3:b5:c1:31:
9d:bc:e5:1c:75:e8:3c:a3:b6:87:f2:43:03:e5:54:
93:a4:cc:75:61:51:16:ef:99:fd:a5:90:98:0c:58:
9a:34:b8:6a:f5:90:d9:7e:31:f7:53:d7:7c:6f:e1:
09:19:a6:e0:d9:01:58:63:d1:8c:f0:65:84:8a:13:
b0:7a:99:d9:28:ba:0a:f8:22:9a:18:f4:19:c2:f2:
6f:da:af:2a:1d:27:29:18:ca:c1:04:f4:39:de:ff:
03:90:70:fa:f6:a7:a2:73:d1:fd:6a:f1:2d:96:7f:
98:03:80:81:62:d0:86:3a:24:55:3d:d0:b1:df:90:
1f:0d:4c:12:5c:2d:fe:e1:81:79:95:d2:e0:eb:32:
fa:f0:5a:63:74:e4:9f:03:20:e5:80:a1:5f:2a:98:
2f:65:37:91:3f:63:09:af:dc:fb:b3:aa:cf:52:da:
12:18:3d:b0:80:40:89:fe:8d:81:fc:e4:3b:2c:28:
60:57:d3:7a:5c:62:00:c3:af:d9:72:62:7b:27:9f:
e7:de:3e:6f:c0:e0:6d:92:d0:5b:0a:9a:eb:73:60:
21:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9C:D2:FC:D7:0C:D5:15:5F:F4:95:69:97:B9:52:21:DB:AF:0D:93
X509v3 Authority Key Identifier:
keyid:01:71:EA:A2:18:77:44:32:AB:C9:A9:D0:90:D8:68:F4:94:3C:2B:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/0171EAA218774432ABC9A9D090D868F4943C2BC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0171EAA218774432ABC9A9D090D868F4943C2BC9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/3230332e3134352e36322e302f32342d3234203d3e203436303233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.145.62.0/24
Signature Algorithm: sha256WithRSAEncryption
41:9a:b4:cb:f7:78:23:a8:05:86:42:72:a5:1b:51:59:a9:2f:
b5:ca:fd:54:ff:52:8d:06:84:a8:15:ed:5e:85:54:05:73:0c:
1b:6a:50:73:be:e1:4c:f8:b1:1b:38:d1:7f:f5:7e:c6:e8:d5:
bb:f5:75:32:cd:c2:b0:34:1e:b8:36:8e:e9:08:92:6b:8b:18:
f2:10:d2:b6:06:47:af:f8:71:b3:ec:4d:a1:55:0b:3d:42:fe:
c5:ff:75:30:77:cc:ee:76:52:0c:bb:b7:43:b8:76:49:60:6f:
00:11:8c:d9:b5:c6:ed:4d:b8:ff:46:96:e1:9a:79:b7:cb:31:
99:e6:b6:e2:52:0e:4c:f1:66:16:7a:85:b7:a1:f5:4f:41:18:
44:67:be:8c:0d:bb:42:ed:15:26:ed:b6:5d:ef:f4:c2:8a:ad:
c0:5c:7c:07:44:0d:4b:c4:f2:34:12:73:a0:c2:eb:99:95:37:
12:84:c1:9b:7d:fd:7a:91:fc:ea:45:68:bd:10:83:6c:39:77:
99:a6:3f:00:19:a9:46:82:2d:13:d4:a9:47:ac:69:3b:ed:94:
33:14:d6:fe:30:c3:ce:60:4c:d5:c8:1d:d3:1f:04:94:b6:2b:
61:22:10:69:5f:20:dd:0c:7e:04:47:b3:33:6c:16:69:ef:21:
f8:4c:24:91
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUIIXW0JHaPsDgiTUpQ8M6QHXBfA8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE3MUVBQTIxODc3NDQzMkFCQzlBOUQwOTBEODY4RjQ5
NDNDMkJDOTAeFw0yNjA1MDMwMjE5NTJaFw0yNzA1MDIwMjI0NTJaMDMxMTAvBgNV
BAMTKEU0OUNEMkZDRDcwQ0Q1MTU1RkY0OTU2OTk3Qjk1MjIxREJBRjBEOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC34V28DBsNRs5NvLEf6MwQcP5y
8ETs+HQyzbRI5N2JpUiBOXcucRTJ07XBMZ285Rx16DyjtofyQwPlVJOkzHVhURbv
mf2lkJgMWJo0uGr1kNl+MfdT13xv4QkZpuDZAVhj0YzwZYSKE7B6mdkougr4IpoY
9BnC8m/aryodJykYysEE9Dne/wOQcPr2p6Jz0f1q8S2Wf5gDgIFi0IY6JFU90LHf
kB8NTBJcLf7hgXmV0uDrMvrwWmN05J8DIOWAoV8qmC9lN5E/Ywmv3Puzqs9S2hIY
PbCAQIn+jYH85DssKGBX03pcYgDDr9lyYnsnn+fePm/A4G2S0FsKmutzYCFBAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU5JzS/NcM1RVf9JVpl7lSIduvDZMwHwYDVR0j
BBgwFoAUAXHqohh3RDKryanQkNho9JQ8K8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzNkZGE5MjMtZWEzNi00NTZiLWJhZmUtNDBlNmI2MmY1MGM1LzAvMDE3MUVBQTIx
ODc3NDQzMkFCQzlBOUQwOTBEODY4RjQ5NDNDMkJDOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wMTcxRUFBMjE4Nzc0NDMyQUJDOUE5RDA5MEQ4NjhGNDk0M0My
QkM5LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzMzZGRhOTIzLWVhMzYtNDU2Yi1i
YWZlLTQwZTZiNjJmNTBjNS8wLzMyMzAzMzJlMzEzNDM1MmUzNjMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMuRPjANBgkqhkiG
9w0BAQsFAAOCAQEAQZq0y/d4I6gFhkJypRtRWakvtcr9VP9SjQaEqBXtXoVUBXMM
G2pQc77hTPixGzjRf/V+xujVu/V1Ms3CsDQeuDaO6QiSa4sY8hDStgZHr/hxs+xN
oVULPUL+xf91MHfM7nZSDLu3Q7h2SWBvABGM2bXG7U24/0aW4Zp5t8sxmea24lIO
TPFmFnqFt6H1T0EYRGe+jA27Qu0VJu22Xe/0woqtwFx8B0QNS8TyNBJzoMLrmZU3
EoTBm339epH86kVovRCDbDl3maY/ABmpRoItE9SpR6xpO+2UMxTW/jDDzmBM1cgd
0x8ElLYrYSIQaV8g3Qx+BEezM2wWae8h+EwkkQ==
-----END CERTIFICATE-----
Generated at Wed May 13 06:48:38 2026 by rpki-client