
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e33312e302f32342d3234203d3e203233393532.roa
File: 3230322e39332e33312e302f32342d3234203d3e203233393532.roa (raw, json)
Hash identifier: d+9UVCD8niS1faGA61UPoVHLJY0k2w63v+pVMpLKKfc=
Subject key identifier: AD:24:19:79:AC:5F:3B:44:A6:8B:0C:82:2D:D9:E8:53:64:96:96:6C
Certificate issuer: /CN=C2A90AC36481A19EE414BB5ACAA800241E570A1F
Certificate serial: 4EE6F9548CDB8C55B24BC197C859D2475D2F915D
Authority key identifier: C2:A9:0A:C3:64:81:A1:9E:E4:14:BB:5A:CA:A8:00:24:1E:57:0A:1F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e33312e302f32342d3234203d3e203233393532.roa
Signing time: Sun 03 May 2026 02:27:49 +0000
ROA not before: Sun 03 May 2026 02:22:49 +0000
ROA not after: Sun 02 May 2027 02:27:49 +0000
asID: 23952
IP address blocks: 202.93.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl
rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:e6:f9:54:8c:db:8c:55:b2:4b:c1:97:c8:59:d2:47:5d:2f:91:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2A90AC36481A19EE414BB5ACAA800241E570A1F
Validity
Not Before: May 3 02:22:49 2026 GMT
Not After : May 2 02:27:49 2027 GMT
Subject: CN=AD241979AC5F3B44A68B0C822DD9E8536496966C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:48:d5:33:1b:4e:b3:13:cf:47:b7:53:58:a7:
c9:e2:f9:1b:63:94:b1:cd:2d:86:a6:5a:2a:b4:5a:
ca:de:d2:74:53:56:c2:6d:a9:e7:bc:d2:60:cf:7a:
5a:77:58:54:3d:ae:1a:c2:0d:47:65:5e:87:58:8c:
71:83:c2:9c:2e:fe:3c:27:fb:cf:22:4c:0b:f8:c9:
02:f3:8d:06:cf:2a:4d:b4:c5:86:29:c3:eb:52:30:
e6:13:6e:00:10:d9:c3:7b:a9:69:62:23:88:b5:b2:
42:1f:45:1e:73:e0:68:9a:27:52:19:28:03:b9:60:
96:d2:d4:25:64:a4:b1:28:d6:0d:62:81:86:e9:6b:
f8:db:25:88:1c:d9:47:e5:62:50:1e:6f:e5:2f:83:
04:95:b7:51:d3:31:e8:e2:bf:af:22:03:8a:8a:ad:
5c:4a:b6:59:68:f7:7d:5c:98:20:d5:93:b9:6f:a9:
61:59:c9:d2:d5:7c:ee:45:ba:53:48:1a:a4:44:d6:
ad:ca:0b:72:54:6a:ac:2b:47:81:e9:f4:d4:72:e4:
ec:5c:dd:15:d3:7b:e3:07:05:b6:cd:eb:8b:ea:95:
97:66:7e:67:3d:07:b8:61:4a:5d:80:06:59:e5:2c:
d8:08:7b:97:01:3b:f8:e5:6e:d1:88:b4:45:82:df:
81:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:24:19:79:AC:5F:3B:44:A6:8B:0C:82:2D:D9:E8:53:64:96:96:6C
X509v3 Authority Key Identifier:
keyid:C2:A9:0A:C3:64:81:A1:9E:E4:14:BB:5A:CA:A8:00:24:1E:57:0A:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/C2A90AC36481A19EE414BB5ACAA800241E570A1F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2A90AC36481A19EE414BB5ACAA800241E570A1F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/3230322e39332e33312e302f32342d3234203d3e203233393532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.93.31.0/24
Signature Algorithm: sha256WithRSAEncryption
94:7b:5b:d4:5d:97:98:44:30:5f:82:3a:a4:8d:e1:38:16:b0:
91:60:7f:01:58:1a:91:9e:56:fd:66:c2:fa:a4:59:9f:4b:0c:
53:5d:c5:80:32:86:9f:4c:c9:f1:08:bb:96:a0:34:ed:3c:39:
9f:fe:5d:36:75:6a:5f:12:f5:51:70:d0:69:67:12:69:f6:e2:
23:51:ab:59:ee:11:ed:ed:99:bf:27:79:ac:86:af:07:22:a3:
a6:76:d0:6c:88:6c:e9:d0:1f:f8:41:f2:e9:e4:e0:21:53:52:
67:a3:13:70:25:2f:51:04:91:39:3d:09:4d:b5:a7:3e:9d:0a:
d6:0c:9e:4a:e4:43:ea:33:05:fc:48:9e:b0:68:44:3d:84:16:
a8:ed:d1:0f:9e:66:00:32:fd:83:d2:22:01:29:af:02:4b:45:
c9:a1:5f:3e:23:2c:42:11:45:c4:93:32:d0:e8:e5:c1:cc:d3:
cf:69:37:aa:27:8e:27:22:a0:c8:ea:1d:c5:41:52:04:55:2b:
32:4f:bf:99:1b:80:93:f7:60:bf:85:85:88:53:7b:50:7d:c6:
65:c4:8e:87:ba:85:e7:e2:c9:87:50:5e:07:0f:75:d6:b8:1f:
fe:45:5b:20:60:bf:6f:5a:8e:e3:b4:12:8e:2a:2c:57:d2:3c:
ca:28:ec:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:19:15 2026 by rpki-client