
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/3230332e3137312e3232312e302f32342d3234203d3e203435323938.roa
File: 3230332e3137312e3232312e302f32342d3234203d3e203435323938.roa (raw, json)
Hash identifier: MUcpE9ISijiu2jmaCVn/Sl4d64Wp2iYm3FrbZk8E76Q=
Subject key identifier: 61:30:5F:37:53:28:B8:7E:79:99:8E:F3:B6:97:57:C8:55:E7:E7:8A
Certificate issuer: /CN=ACF266E9010F46F691CC6A492EB1EAC623155D6B
Certificate serial: 4D0DFC149C366A473FF69E68ACBD4CD32780DD55
Authority key identifier: AC:F2:66:E9:01:0F:46:F6:91:CC:6A:49:2E:B1:EA:C6:23:15:5D:6B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACF266E9010F46F691CC6A492EB1EAC623155D6B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/3230332e3137312e3232312e302f32342d3234203d3e203435323938.roa
Signing time: Sun 03 May 2026 02:31:49 +0000
ROA not before: Sun 03 May 2026 02:26:49 +0000
ROA not after: Sun 02 May 2027 02:31:49 +0000
asID: 45298
IP address blocks: 203.171.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.crl
rsync://rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACF266E9010F46F691CC6A492EB1EAC623155D6B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:0d:fc:14:9c:36:6a:47:3f:f6:9e:68:ac:bd:4c:d3:27:80:dd:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ACF266E9010F46F691CC6A492EB1EAC623155D6B
Validity
Not Before: May 3 02:26:49 2026 GMT
Not After : May 2 02:31:49 2027 GMT
Subject: CN=61305F375328B87E79998EF3B69757C855E7E78A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:46:06:b4:c9:8c:5f:f5:8e:50:db:f9:43:74:
ec:6d:b8:30:f8:89:4f:de:9d:0a:e1:18:3c:4c:56:
7a:5e:5f:d9:30:0d:97:63:18:ec:4a:4f:af:7a:ee:
9e:9b:a6:e1:81:25:78:f4:62:fb:95:8b:42:6d:30:
a0:ff:45:0b:89:4f:86:d2:40:63:2a:db:f8:69:81:
c4:77:31:bf:fe:35:85:44:85:0c:42:ed:10:76:c7:
e7:a2:b8:07:e0:0a:6a:3c:5d:ae:36:6a:b3:19:c4:
bb:a7:c6:86:bc:d0:6c:70:8b:d6:e0:b9:bc:f9:48:
81:37:92:84:4a:52:20:ff:c2:22:60:aa:30:88:76:
2c:30:21:e1:54:31:de:ae:47:9d:a8:fd:da:ea:35:
33:38:21:b0:a1:a3:72:00:5b:99:68:20:f2:53:21:
06:e6:f0:43:ab:43:c7:d0:9b:ec:8e:03:06:45:9e:
fb:33:1f:0c:cc:6e:68:38:82:43:b6:48:41:da:16:
3c:ad:6a:44:e5:ca:ca:6d:f3:1f:08:a0:00:5b:b5:
5b:e4:08:a2:b3:29:99:2a:07:fe:bb:58:e0:70:9f:
10:c9:cf:5a:45:70:c2:43:ae:2a:a6:df:88:85:93:
1e:d0:98:27:fe:9f:f1:6d:81:a7:97:93:23:13:68:
a0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:30:5F:37:53:28:B8:7E:79:99:8E:F3:B6:97:57:C8:55:E7:E7:8A
X509v3 Authority Key Identifier:
keyid:AC:F2:66:E9:01:0F:46:F6:91:CC:6A:49:2E:B1:EA:C6:23:15:5D:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/ACF266E9010F46F691CC6A492EB1EAC623155D6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ACF266E9010F46F691CC6A492EB1EAC623155D6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bf2ad4f-a72a-46d1-bd7d-a560c31efcad/0/3230332e3137312e3232312e302f32342d3234203d3e203435323938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.171.221.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:5a:35:be:6f:f0:27:51:f0:99:bc:ba:c9:9d:5b:65:e8:a0:
02:40:05:55:b4:88:55:3d:4c:42:97:ae:ab:a8:d9:46:06:e1:
e2:d7:d1:e2:a5:b8:4b:f7:60:c9:1b:71:bd:1b:48:fd:10:e5:
aa:72:89:8e:34:f0:88:bd:d0:44:a5:be:bc:9f:79:4b:ce:2a:
79:b0:5a:ec:b1:95:23:55:da:3e:fe:32:03:4b:1f:67:6a:e9:
04:91:39:5a:30:54:96:8d:6b:2f:28:cf:68:6f:79:12:4e:8f:
19:f2:e8:4a:1b:69:3c:46:91:a2:e9:26:61:8a:f7:fd:1a:0d:
86:68:3d:3c:97:86:e8:23:31:5b:14:51:99:76:57:f6:b1:32:
86:05:79:ff:f5:50:cd:c3:c6:d0:08:73:de:21:ee:ae:de:da:
48:8b:0a:77:4c:8c:56:ee:0f:65:5c:3f:a9:9d:45:a1:8c:fd:
14:59:04:ee:13:79:eb:f5:c1:78:f9:84:10:07:23:6f:86:31:
c8:be:f5:b3:10:f6:9b:17:b2:0b:ba:e4:c4:e9:f3:1e:a3:33:
62:e5:f8:82:41:ae:cc:64:ae:34:32:a3:e4:b6:e2:0e:40:60:
e3:dc:5d:a7:27:aa:29:ca:39:19:80:cc:09:14:ff:ed:f2:ea:
94:02:5d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:35:19 2026 by rpki-client