
$ rpki-client -vvf rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e31302e302f32342d3234203d3e203234323034.roa
File: 3230332e38302e31302e302f32342d3234203d3e203234323034.roa (raw, json)
Hash identifier: 1WqLfIO26zKRMIVkfVN7TnPFzjNdo3+29X6uUFeeV7A=
Subject key identifier: 08:CF:E9:B6:10:C7:79:AD:4C:D6:42:39:EA:C0:4E:CF:98:5A:BE:19
Certificate issuer: /CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9
Certificate serial: 52636F885BBF4B69398CDB1A107439D2439A3BD5
Authority key identifier: E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e31302e302f32342d3234203d3e203234323034.roa
Signing time: Sun 03 May 2026 02:33:06 +0000
ROA not before: Sun 03 May 2026 02:28:06 +0000
ROA not after: Sun 02 May 2027 02:33:06 +0000
asID: 24204
IP address blocks: 203.80.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl
rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:63:6f:88:5b:bf:4b:69:39:8c:db:1a:10:74:39:d2:43:9a:3b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9
Validity
Not Before: May 3 02:28:06 2026 GMT
Not After : May 2 02:33:06 2027 GMT
Subject: CN=08CFE9B610C779AD4CD64239EAC04ECF985ABE19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:69:88:5c:96:11:87:36:92:18:7d:a5:82:05:
dc:a2:1c:f0:14:f0:f7:00:ec:49:9f:9d:9e:34:4f:
65:88:cf:93:38:90:95:80:69:92:66:73:3d:5c:6a:
7f:f3:0b:24:f8:5c:99:79:1d:3c:51:65:05:74:41:
2a:2e:45:9d:d4:56:96:bd:52:9d:f1:86:6e:58:5f:
a5:92:27:d6:27:65:17:72:49:d1:94:e6:65:0e:83:
03:15:9a:d6:99:5c:23:52:a2:b2:17:28:4e:f5:71:
b3:84:3f:71:b9:44:38:e0:ff:8d:f9:b0:88:24:bf:
aa:4a:a4:0d:90:4a:e8:8b:6f:bb:48:3d:25:3e:3c:
be:0d:6b:2a:2b:a0:87:17:b2:2b:77:35:42:97:62:
b9:ca:fe:d8:7e:6b:eb:37:d7:0b:62:7d:fb:b7:1b:
bc:34:67:8e:09:f9:4d:fe:64:00:f7:3d:88:79:2e:
55:02:34:84:d3:1e:40:79:a2:2f:55:63:7f:b3:f2:
22:5b:c8:57:4b:19:4e:02:63:78:ef:fd:c6:5f:77:
ed:af:e9:ec:fd:16:f2:27:02:40:be:8e:65:13:b5:
e9:97:bb:56:24:79:12:f9:9b:82:90:e2:0a:36:df:
da:b4:4a:0a:63:39:36:b5:bf:45:28:ac:b4:88:34:
ef:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CF:E9:B6:10:C7:79:AD:4C:D6:42:39:EA:C0:4E:CF:98:5A:BE:19
X509v3 Authority Key Identifier:
keyid:E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e31302e302f32342d3234203d3e203234323034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.80.10.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:17:5d:bd:dc:fc:db:54:ab:d0:12:3b:64:b5:d9:15:a2:98:
70:82:cb:d0:35:85:06:03:15:cd:89:6f:5f:b0:05:5b:78:03:
49:20:6d:04:1f:a3:83:80:89:03:a4:20:8f:0a:fb:3d:2b:30:
86:46:dd:d5:e8:cb:d3:0e:91:f2:2e:69:b5:7a:42:12:f6:95:
d4:87:ad:87:8e:a6:6d:74:f7:7a:1e:47:60:f5:81:85:60:9a:
1a:40:ae:8f:a5:d9:11:3f:b2:13:cd:e6:ae:72:bf:5e:cc:d9:
f7:84:da:7d:35:5d:27:1e:b8:bf:7e:13:fb:49:22:f9:14:13:
e9:9c:ce:cd:6e:f9:ad:ef:ea:2f:6d:97:e7:55:9e:8b:b8:7e:
34:16:84:a4:61:c8:51:90:2d:20:66:d0:19:92:73:bb:1c:84:
9d:44:88:e2:d0:6b:bd:4c:29:bb:87:5c:fb:d4:97:28:25:bb:
29:53:4d:7c:70:33:ce:7a:1d:b5:8b:ce:18:e8:43:69:8b:c2:
97:ae:69:17:e2:75:24:e1:e2:fa:54:3d:1f:ee:9e:a1:55:be:
6a:4a:e4:af:94:09:6d:77:fe:bb:21:4c:0b:9a:97:a8:bd:5e:
9b:b8:ef:83:33:f8:a1:4d:be:35:36:56:0a:a0:71:94:fc:73:
75:74:0d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:12:27 2026 by rpki-client