
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e32342e302f32312d3231203d3e203233393532.roa
File: 3230322e39332e32342e302f32312d3231203d3e203233393532.roa (raw, json)
Hash identifier: 3DKoXwBAcS+jAgG56so/w0LfTxjXkoMotMqExXI7Hkk=
Subject key identifier: 24:AC:C8:6D:19:85:E6:7D:53:9C:25:3E:40:7E:3A:A6:15:A8:FA:C5
Certificate issuer: /CN=C2A90AC36481A19EE414BB5ACAA800241E570A1F
Certificate serial: 673ABD5B0E1F51029C83FC735F1911D97ED0197A
Authority key identifier: C2:A9:0A:C3:64:81:A1:9E:E4:14:BB:5A:CA:A8:00:24:1E:57:0A:1F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e32342e302f32312d3231203d3e203233393532.roa
Signing time: Sun 03 May 2026 02:27:50 +0000
ROA not before: Sun 03 May 2026 02:22:50 +0000
ROA not after: Sun 02 May 2027 02:27:50 +0000
asID: 23952
IP address blocks: 202.93.24.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl
rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:3a:bd:5b:0e:1f:51:02:9c:83:fc:73:5f:19:11:d9:7e:d0:19:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2A90AC36481A19EE414BB5ACAA800241E570A1F
Validity
Not Before: May 3 02:22:50 2026 GMT
Not After : May 2 02:27:50 2027 GMT
Subject: CN=24ACC86D1985E67D539C253E407E3AA615A8FAC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:03:08:fa:15:f5:ea:3f:78:31:b2:39:6f:7b:
5d:b4:25:10:10:a1:37:df:18:2f:23:7a:38:e7:72:
2a:80:f3:7d:50:9c:f4:e4:1b:f3:51:17:1f:b9:82:
98:c6:9f:d7:ac:7d:3a:22:47:76:67:3e:51:91:2f:
f4:61:1d:5c:69:6a:b8:f2:08:08:f3:d4:8e:d4:29:
8b:73:2c:50:6a:6b:7d:a2:03:ab:00:9a:47:fe:57:
26:1e:42:4d:32:d9:81:4b:cf:c8:11:46:2c:e5:b9:
4c:97:44:13:aa:3e:15:a1:15:33:51:e5:2e:80:57:
1f:6c:9b:47:8c:1d:8f:88:14:5d:1a:fc:06:e7:58:
63:ea:22:bc:ce:a1:9d:84:51:64:f2:08:07:e2:d8:
62:94:cd:a5:3c:34:e8:e4:45:82:e0:a6:de:40:af:
34:09:6b:e0:ad:bf:58:d5:79:90:28:7c:4c:7f:ce:
c5:c2:3a:b7:e8:0b:21:3c:e8:ad:41:6f:c5:c9:f6:
54:c0:7f:47:77:25:06:86:61:90:97:42:06:51:ad:
d5:cc:7a:5f:13:b8:4a:64:71:03:98:b7:a4:38:9e:
1d:54:0e:02:29:86:06:70:f7:7b:3f:23:ec:98:76:
07:0f:53:87:9e:22:35:c3:28:32:0f:5a:12:16:77:
c1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AC:C8:6D:19:85:E6:7D:53:9C:25:3E:40:7E:3A:A6:15:A8:FA:C5
X509v3 Authority Key Identifier:
keyid:C2:A9:0A:C3:64:81:A1:9E:E4:14:BB:5A:CA:A8:00:24:1E:57:0A:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e32342e302f32312d3231203d3e203233393532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.93.24.0/21
Signature Algorithm: sha256WithRSAEncryption
28:4f:59:06:6d:fb:68:b8:a6:9d:65:f4:9b:57:fb:3e:38:44:
11:05:cf:a6:de:d8:30:31:1a:8b:88:9f:8b:77:19:3e:02:66:
49:46:f4:c6:d8:68:f8:8a:ec:c1:4a:b9:73:be:d0:0b:dc:80:
40:63:5c:71:5c:13:15:ed:16:44:d2:79:33:51:48:0a:b3:c2:
78:8f:f6:47:98:2c:07:15:67:96:a4:6e:bd:86:a1:94:07:cc:
e0:ad:31:71:ac:75:a2:13:84:26:86:6b:72:68:32:36:7d:c6:
ba:88:14:fa:2b:cc:58:ab:ee:55:d0:5b:e3:e5:e8:ce:be:39:
10:31:94:4a:81:84:59:f6:b1:47:f0:cf:26:0d:2b:fa:87:9e:
80:20:af:6e:26:56:bb:2b:1f:16:ef:c8:cd:43:2a:1f:f1:d2:
cf:ca:2a:54:a1:09:9d:ba:a7:99:76:da:40:e2:95:fa:47:bd:
aa:4d:7a:56:d2:7e:92:18:06:aa:85:c2:31:51:e4:8b:c9:45:
2c:fa:61:1e:fb:52:5a:b1:45:fe:a0:bd:ab:f4:40:f9:ed:60:
0b:be:31:16:0c:6c:05:5a:5a:dc:96:ca:74:28:22:8a:0e:44:
00:9c:94:4e:1d:1a:7d:44:2a:07:e7:15:5a:4f:2b:f8:1b:d1:
7d:2e:35:76
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUZzq9Ww4fUQKcg/xzXxkR2X7QGXowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJBOTBBQzM2NDgxQTE5RUU0MTRCQjVBQ0FBODAwMjQx
RTU3MEExRjAeFw0yNjA1MDMwMjIyNTBaFw0yNzA1MDIwMjI3NTBaMDMxMTAvBgNV
BAMTKDI0QUNDODZEMTk4NUU2N0Q1MzlDMjUzRTQwN0UzQUE2MTVBOEZBQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiAwj6FfXqP3gxsjlve120JRAQ
oTffGC8jejjnciqA831QnPTkG/NRFx+5gpjGn9esfToiR3ZnPlGRL/RhHVxparjy
CAjz1I7UKYtzLFBqa32iA6sAmkf+VyYeQk0y2YFLz8gRRizluUyXRBOqPhWhFTNR
5S6AVx9sm0eMHY+IFF0a/AbnWGPqIrzOoZ2EUWTyCAfi2GKUzaU8NOjkRYLgpt5A
rzQJa+Ctv1jVeZAofEx/zsXCOrfoCyE86K1Bb8XJ9lTAf0d3JQaGYZCXQgZRrdXM
el8TuEpkcQOYt6Q4nh1UDgIphgZw93s/I+yYdgcPU4eeIjXDKDIPWhIWd8FZAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUJKzIbRmF5n1TnCU+QH46phWo+sUwHwYDVR0j
BBgwFoAUwqkKw2SBoZ7kFLtayqgAJB5XCh8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2M4YWIzZTAtY2E2OC00MmY2LTk4ZjYtNjU0YTI1MmE4NjQ4LzAvQzJBOTBBQzM2
NDgxQTE5RUU0MTRCQjVBQ0FBODAwMjQxRTU3MEExRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DMkE5MEFDMzY0ODFBMTlFRTQxNEJCNUFDQUE4MDAyNDFFNTcw
QTFGLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNjOGFiM2UwLWNhNjgtNDJmNi05
OGY2LTY1NGEyNTJhODY0OC8wLzMyMzAzMjJlMzkzMzJlMzIzNDJlMzAyZjMyMzEy
ZDMyMzEyMDNkM2UyMDMyMzMzOTM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPKXRgwDQYJKoZIhvcN
AQELBQADggEBAChPWQZt+2i4pp1l9JtX+z44RBEFz6be2DAxGouIn4t3GT4CZklG
9MbYaPiK7MFKuXO+0AvcgEBjXHFcExXtFkTSeTNRSAqzwniP9keYLAcVZ5akbr2G
oZQHzOCtMXGsdaIThCaGa3JoMjZ9xrqIFPorzFir7lXQW+Pl6M6+ORAxlEqBhFn2
sUfwzyYNK/qHnoAgr24mVrsrHxbvyM1DKh/x0s/KKlShCZ26p5l22kDilfpHvapN
elbSfpIYBqqFwjFR5IvJRSz6YR77UlqxRf6gvav0QPntYAu+MRYMbAVaWtyWynQo
IooORACclE4dGn1EKgfnFVpPK/gb0X0uNXY=
-----END CERTIFICATE-----
Generated at Wed May 13 02:13:39 2026 by rpki-client