
$ rpki-client -vvf rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e31342e302f32342d3234203d3e203234323034.roa
File: 3230332e38302e31342e302f32342d3234203d3e203234323034.roa (raw, json)
Hash identifier: 4fpWKKYBY0nnGQkJs0R+bmSKgdPRaMES9zE1728pF2E=
Subject key identifier: 10:69:C6:0E:8C:F2:F4:A1:D5:24:B8:FA:21:2B:5D:38:5F:EB:C9:64
Certificate issuer: /CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9
Certificate serial: 39C9059E3A509251BF2954CF9A4667B0077A3680
Authority key identifier: E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e31342e302f32342d3234203d3e203234323034.roa
Signing time: Sun 03 May 2026 02:33:07 +0000
ROA not before: Sun 03 May 2026 02:28:07 +0000
ROA not after: Sun 02 May 2027 02:33:07 +0000
asID: 24204
IP address blocks: 203.80.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl
rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:c9:05:9e:3a:50:92:51:bf:29:54:cf:9a:46:67:b0:07:7a:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9
Validity
Not Before: May 3 02:28:07 2026 GMT
Not After : May 2 02:33:07 2027 GMT
Subject: CN=1069C60E8CF2F4A1D524B8FA212B5D385FEBC964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1b:95:a1:18:b4:b4:c1:47:d2:fd:0e:f0:f8:
e1:dd:18:59:3a:34:22:2b:37:ec:40:97:96:45:19:
5a:fa:55:23:e1:83:c3:8b:bf:10:4c:5b:60:8a:05:
d2:68:ad:94:7b:39:46:b8:ca:b6:6f:0e:5a:92:1a:
1c:7e:cd:be:a3:d9:aa:a8:cb:a8:f8:66:63:a0:f7:
78:54:df:01:f1:84:ae:c6:f3:ce:5e:21:c4:1e:e3:
92:e4:8f:ee:81:24:6e:b9:9b:b0:60:4e:66:90:7b:
72:cd:53:45:b3:b6:3e:9f:e7:92:3c:43:c7:0b:17:
7c:2d:36:f9:93:46:b6:c3:89:90:cc:0f:da:5e:71:
30:c9:cf:91:3d:b7:ca:86:fc:ab:df:e7:7b:b4:df:
1b:6a:af:3e:ff:24:36:bc:46:11:df:14:0e:26:af:
05:c4:20:f3:50:76:34:e7:a6:c1:fe:d6:1a:4a:09:
f8:8d:d6:b7:94:12:3d:dc:89:a7:6d:82:5e:5b:42:
ea:1c:ed:dd:5b:be:de:aa:5d:c8:42:1f:3e:c9:0e:
0d:b3:f0:ef:e2:6a:06:e9:82:84:ea:55:a5:f7:88:
cf:07:8b:03:3f:63:80:d1:4a:c5:b4:d8:1b:3e:96:
d3:b5:9f:06:3e:79:6f:b0:62:ac:4f:9f:dc:e1:b2:
a4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:69:C6:0E:8C:F2:F4:A1:D5:24:B8:FA:21:2B:5D:38:5F:EB:C9:64
X509v3 Authority Key Identifier:
keyid:E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e31342e302f32342d3234203d3e203234323034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.80.14.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:df:5a:00:06:56:a8:9f:38:c1:7f:bc:12:9a:4e:b6:6b:01:
3a:ee:09:fe:d7:5b:a6:67:0f:d4:2f:ae:87:39:67:6b:43:81:
d4:7e:95:b9:c5:85:0e:6c:d0:05:99:7a:fb:36:a3:e2:8d:1b:
9d:7b:55:6e:82:24:23:fd:a9:57:e6:bb:a9:59:f0:2d:80:6e:
5a:f2:e6:26:b2:c9:a4:64:b2:de:f4:7f:04:54:a2:ec:c4:41:
6c:ee:4e:c4:ab:d8:83:a2:ff:20:27:94:b1:5b:69:ed:be:92:
09:73:a9:70:bb:25:87:cf:8c:2c:17:64:8e:a4:b6:6c:43:9b:
57:24:52:11:40:5c:eb:a3:dd:11:95:1a:03:98:f3:e0:93:39:
28:e0:ee:5d:fd:63:35:1b:f0:cf:8b:a7:57:15:1e:15:f6:41:
9c:13:8b:ef:80:63:2d:91:c9:fe:82:ed:d8:5c:d0:51:ed:e7:
a7:63:a8:06:be:01:89:99:db:da:b7:1b:bf:72:ad:73:d3:f3:
07:bd:f1:24:e9:81:9c:76:a6:ae:0b:35:47:56:2b:68:4a:28:
f8:3d:af:ff:6f:5f:57:dc:7c:1c:28:54:5e:36:2c:9b:43:d8:
37:20:71:57:83:d6:08:62:0e:4f:6c:24:78:68:b7:f1:17:94:
f9:10:d9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:14:00 2026 by rpki-client