
$ rpki-client -vvf rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/3230332e3134352e35382e302f32332d3234203d3e20313432333735.roa
File: 3230332e3134352e35382e302f32332d3234203d3e20313432333735.roa (raw, json)
Hash identifier: prMxe0nmDe/VDC0+RGajULsFBb7iapYsATrUpS7D5Qc=
Subject key identifier: 98:4C:4D:81:E0:13:8F:E7:6B:9E:AF:BD:82:82:94:34:5D:5F:75:3F
Certificate issuer: /CN=DA8936DE23BD068FFF8B9D5B0392E00097BA0728
Certificate serial: 3E0E18470822C99331E56C25CFBEF4483F984C53
Authority key identifier: DA:89:36:DE:23:BD:06:8F:FF:8B:9D:5B:03:92:E0:00:97:BA:07:28
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/3230332e3134352e35382e302f32332d3234203d3e20313432333735.roa
Signing time: Sun 03 May 2026 02:25:29 +0000
ROA not before: Sun 03 May 2026 02:20:29 +0000
ROA not after: Sun 02 May 2027 02:25:29 +0000
asID: 142375
IP address blocks: 203.145.58.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.crl
rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:0e:18:47:08:22:c9:93:31:e5:6c:25:cf:be:f4:48:3f:98:4c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA8936DE23BD068FFF8B9D5B0392E00097BA0728
Validity
Not Before: May 3 02:20:29 2026 GMT
Not After : May 2 02:25:29 2027 GMT
Subject: CN=984C4D81E0138FE76B9EAFBD828294345D5F753F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0b:3e:20:76:66:b2:d4:20:32:3e:4d:24:b6:
69:fb:e0:3c:10:54:a3:88:20:6a:3b:0c:21:b6:e1:
c2:7c:27:ec:a8:21:1b:56:e2:3a:bd:da:10:41:67:
8c:a4:8a:bc:fa:49:2d:0c:40:cd:30:43:1e:52:e5:
a9:52:a8:b6:b0:ed:7b:33:eb:3f:c1:09:be:b5:09:
d9:52:12:67:00:12:c2:b7:6b:a8:50:86:54:07:f0:
fc:7b:f3:46:ef:2a:12:c7:d8:3a:f9:5b:78:ed:93:
08:ca:25:4d:cb:9e:b4:b8:e0:f4:2a:7b:a1:ad:5e:
4c:63:8f:09:79:4e:84:0e:61:fd:d2:7d:fe:66:45:
e3:5a:64:ce:92:3f:05:19:61:85:51:b6:46:c9:e9:
47:f3:88:00:d8:82:e7:17:90:3a:8b:2b:47:ea:37:
b5:e6:0a:06:b7:c8:8b:1c:40:19:7a:cd:e9:2a:28:
c8:a3:66:40:06:1a:35:3b:ae:ff:d9:77:47:59:b6:
06:6e:57:d8:62:07:7b:61:12:3e:da:6c:44:78:8a:
54:ed:ce:1b:44:be:54:81:8c:cd:dc:44:1a:03:53:
f8:dd:de:75:d6:6d:e7:15:97:49:85:03:09:14:6f:
0a:a1:0d:1a:c0:d5:d8:16:ce:14:66:5b:19:b3:80:
0f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4C:4D:81:E0:13:8F:E7:6B:9E:AF:BD:82:82:94:34:5D:5F:75:3F
X509v3 Authority Key Identifier:
keyid:DA:89:36:DE:23:BD:06:8F:FF:8B:9D:5B:03:92:E0:00:97:BA:07:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DA8936DE23BD068FFF8B9D5B0392E00097BA0728.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/3230332e3134352e35382e302f32332d3234203d3e20313432333735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.145.58.0/23
Signature Algorithm: sha256WithRSAEncryption
69:c2:b0:d3:bf:df:fc:cd:ea:a5:31:9e:35:ea:9f:31:f5:06:
1d:cf:b0:4d:71:c2:5f:b4:d4:5c:b0:35:95:36:e3:d3:16:79:
fc:4c:fe:3e:03:d7:05:50:8a:60:6f:db:3a:ff:8c:20:e5:a1:
08:38:5f:af:ca:7a:35:de:9a:8c:e5:a4:62:6b:2b:a8:fb:2c:
dc:18:c7:2b:60:ee:f6:ba:4e:60:d3:ef:cb:b2:32:32:34:92:
88:17:51:20:2c:6c:96:b1:79:4b:fd:5a:67:c9:1d:3c:d4:9d:
74:4d:61:89:fc:59:40:59:b3:12:12:5f:21:2f:04:14:7c:57:
c5:40:11:3c:a4:e0:d5:98:65:27:1a:b6:32:de:1a:f4:b3:e1:
e0:27:4e:bb:27:9d:18:40:e9:2e:4b:ec:f8:76:dd:2e:df:c2:
8a:05:f8:39:79:02:b0:20:70:0f:55:7f:57:98:ad:49:6b:1b:
49:29:40:4d:e4:f8:57:54:3a:e6:70:28:6e:f1:ca:bf:c7:5b:
a7:bb:a0:20:b0:a6:97:a7:c4:f9:ee:cd:93:fe:f4:5d:17:0c:
a1:87:0c:71:fe:0f:6b:ca:1d:b0:16:9a:f3:ee:40:95:f0:43:
e4:44:a5:2b:69:43:8d:85:a8:ed:c0:d1:e0:c9:a1:c0:e6:af:
27:4c:db:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:58:06 2026 by rpki-client