
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e32372e302f32342d3234203d3e203233393532.roa
File: 3230322e39332e32372e302f32342d3234203d3e203233393532.roa (raw, json)
Hash identifier: XriecMPCY4alQrxwYsfldyREke/eGKRNr/vElamRFhc=
Subject key identifier: 90:32:05:01:55:B6:EB:FB:00:E4:7B:D4:B3:93:5E:CC:6F:A0:08:4F
Certificate issuer: /CN=C2A90AC36481A19EE414BB5ACAA800241E570A1F
Certificate serial: 66746E472A3F43FC5BDEE0210151950912654133
Authority key identifier: C2:A9:0A:C3:64:81:A1:9E:E4:14:BB:5A:CA:A8:00:24:1E:57:0A:1F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e32372e302f32342d3234203d3e203233393532.roa
Signing time: Sun 03 May 2026 02:27:50 +0000
ROA not before: Sun 03 May 2026 02:22:50 +0000
ROA not after: Sun 02 May 2027 02:27:50 +0000
asID: 23952
IP address blocks: 202.93.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl
rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:74:6e:47:2a:3f:43:fc:5b:de:e0:21:01:51:95:09:12:65:41:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2A90AC36481A19EE414BB5ACAA800241E570A1F
Validity
Not Before: May 3 02:22:50 2026 GMT
Not After : May 2 02:27:50 2027 GMT
Subject: CN=9032050155B6EBFB00E47BD4B3935ECC6FA0084F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:1f:52:a4:ec:41:1a:99:92:4e:5e:a6:d4:
f6:ad:71:13:3c:e1:03:6f:1d:db:be:64:64:d0:2e:
c1:f3:d5:74:75:f9:da:52:d6:71:21:f0:33:53:0d:
eb:de:69:79:1f:6e:a0:96:4e:53:fd:11:f9:53:ba:
04:74:d3:c9:02:b3:3c:4c:03:b6:a7:17:ee:2e:66:
7c:c5:a6:45:9a:47:66:ef:ef:1e:5c:1e:f2:e8:33:
d7:fb:21:46:b5:8c:ca:23:34:cd:69:a4:76:bd:67:
55:a2:7d:60:b5:8f:7b:71:36:85:55:00:c5:2e:18:
b7:8d:d5:7f:6a:15:14:c7:7f:e3:84:88:99:ba:55:
2a:e9:29:1b:23:b1:a5:0f:1f:4e:4a:66:a9:20:e2:
d3:24:66:55:5e:70:7b:d4:75:ff:78:0f:8f:6a:1c:
9a:bd:91:42:d6:0d:a0:0b:55:11:00:5c:c2:e8:99:
d7:7b:73:59:a8:e3:94:9c:ba:5a:37:81:07:e8:86:
77:ad:b5:c7:a6:fc:fd:69:39:51:8f:16:16:c0:91:
bb:10:52:b7:c0:44:60:0d:46:ef:d8:98:23:5d:aa:
4f:3c:32:a6:01:17:d6:07:3a:f8:91:bf:96:b0:cb:
7b:40:b5:ca:db:7e:c1:3a:60:db:80:7e:bf:32:57:
ec:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:32:05:01:55:B6:EB:FB:00:E4:7B:D4:B3:93:5E:CC:6F:A0:08:4F
X509v3 Authority Key Identifier:
keyid:C2:A9:0A:C3:64:81:A1:9E:E4:14:BB:5A:CA:A8:00:24:1E:57:0A:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e32372e302f32342d3234203d3e203233393532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.93.27.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:86:d4:3a:42:2f:96:d0:86:67:dd:06:56:d0:07:90:6e:31:
f1:20:32:66:db:0a:bd:4a:c5:6e:ea:15:f3:03:0b:0d:8a:8f:
4b:6f:97:36:b0:42:e6:88:d3:94:f0:01:5e:d9:22:0e:58:ad:
89:80:f9:0f:55:32:7e:8e:37:9a:05:b3:48:f8:40:08:5c:6a:
7a:58:55:98:ea:a7:ec:fb:0b:df:fa:f4:9b:5b:a8:17:aa:de:
74:25:18:8d:0f:c0:53:c9:24:57:5b:57:01:03:40:58:41:40:
c6:0a:58:cc:15:7f:4e:90:19:65:d2:c7:12:3f:ac:73:75:e1:
d3:6e:64:cf:0c:90:68:2c:3b:1f:e9:cc:1a:4d:e0:ef:0f:e4:
6a:45:9a:8f:c7:fe:33:14:c6:e6:24:81:a1:82:7f:ce:7b:14:
b2:8f:30:8f:d3:43:49:10:f1:e7:e9:77:8e:f1:da:bd:04:51:
34:b8:d4:52:b0:46:de:87:41:8a:e3:73:8d:2a:ff:b7:fb:0f:
9a:62:03:63:6f:3b:ee:77:31:c7:89:28:c1:87:40:01:95:5b:
cf:78:89:4e:da:d4:24:f9:7d:0f:4a:d0:a0:2c:32:94:95:f5:
6c:d0:2d:c7:44:97:d0:0f:48:35:a8:d2:e7:20:4b:73:7c:53:
9c:c7:f7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:54:43 2026 by rpki-client