
$ rpki-client -vvf rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e31352e302f32342d3234203d3e203234323034.roa
File: 3230332e38302e31352e302f32342d3234203d3e203234323034.roa (raw, json)
Hash identifier: nN8alNrnuAC96uGmiPX7P2NYnsdlkO57xsP55iMfUwk=
Subject key identifier: 7A:86:34:47:56:26:C2:90:01:52:C3:D7:D7:8A:FE:13:2B:26:D4:BF
Certificate issuer: /CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9
Certificate serial: 08FB65DF48E56096FBB75B4DA8C3AEDB7FBBF588
Authority key identifier: E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e31352e302f32342d3234203d3e203234323034.roa
Signing time: Sun 03 May 2026 02:33:06 +0000
ROA not before: Sun 03 May 2026 02:28:06 +0000
ROA not after: Sun 02 May 2027 02:33:06 +0000
asID: 24204
IP address blocks: 203.80.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl
rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:fb:65:df:48:e5:60:96:fb:b7:5b:4d:a8:c3:ae:db:7f:bb:f5:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9
Validity
Not Before: May 3 02:28:06 2026 GMT
Not After : May 2 02:33:06 2027 GMT
Subject: CN=7A8634475626C2900152C3D7D78AFE132B26D4BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:51:18:cd:0b:48:8c:9a:64:b3:3a:7a:a6:d7:
23:c0:55:4b:98:48:ce:ad:b0:10:d5:0c:ca:5e:d1:
a4:55:15:ec:26:72:3d:be:c5:b5:fe:46:80:54:de:
27:22:39:41:1e:79:86:e0:c3:ee:3d:1d:3b:2d:a4:
33:cc:44:f8:2d:5f:81:4e:f6:89:18:50:ee:a4:b1:
92:da:97:4b:b2:07:9e:ae:86:b9:4a:b5:cc:c7:ec:
11:6d:09:14:2b:8f:6a:ca:d3:64:16:98:96:49:81:
b7:38:4b:51:bc:75:98:9b:1f:bf:0a:2f:11:39:91:
f3:14:ad:62:9f:e2:86:03:d6:41:87:e7:f8:2b:dd:
16:6e:93:c6:d6:f5:7f:31:2b:3d:af:2f:5f:ca:70:
ef:5f:db:31:5e:dc:4b:23:f2:8e:f3:04:3e:7d:1e:
9e:68:b6:4b:89:40:b9:5e:c8:23:2a:fb:5a:79:af:
de:ca:d8:58:6d:95:70:87:41:c2:2f:4b:dc:78:a8:
39:74:36:24:e6:74:b1:b0:27:91:eb:07:24:89:ff:
47:28:12:fe:09:f3:57:de:9b:db:42:e8:2a:1f:98:
99:fc:fd:d5:07:4d:32:0e:2a:b9:48:74:a9:8c:29:
77:f4:99:b1:3d:31:7c:aa:aa:3c:b9:0d:71:b7:4d:
3e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:86:34:47:56:26:C2:90:01:52:C3:D7:D7:8A:FE:13:2B:26:D4:BF
X509v3 Authority Key Identifier:
keyid:E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/3230332e38302e31352e302f32342d3234203d3e203234323034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.80.15.0/24
Signature Algorithm: sha256WithRSAEncryption
61:3d:2f:10:c2:8e:cd:62:47:d0:12:e9:5e:00:07:6e:4b:42:
7e:c3:06:3b:07:55:12:ed:01:77:6d:e0:1b:45:9c:59:4e:b6:
d8:87:4a:47:3e:39:f6:79:76:b0:c5:d5:c4:dc:75:87:7e:e3:
1f:c8:a9:06:1d:22:ea:4b:69:59:9b:d1:b2:b8:b4:da:62:3b:
db:27:bc:af:50:e1:4a:c5:71:c1:83:a8:73:6c:0b:d7:5c:e9:
77:4a:06:b1:86:b2:d6:ab:af:da:ba:13:d8:11:32:27:79:47:
12:85:39:96:5d:27:07:b6:76:42:b7:d7:f0:14:08:24:22:4e:
c9:1d:b0:1f:16:5e:bb:4c:14:1c:c4:4b:c9:4d:03:2c:43:cc:
9a:2f:cb:8e:3e:3f:16:70:20:06:39:08:6a:80:c5:db:3a:61:
51:65:6e:10:fb:f7:65:2f:4c:b8:6c:f6:32:39:1e:9c:b2:b0:
2a:de:c1:7f:34:2b:39:cf:f6:22:4d:d3:69:19:e2:c3:7f:4e:
f5:ab:95:0d:77:61:67:50:ee:62:98:28:b8:31:2e:a3:fb:64:
ba:3d:9c:4e:ae:7e:5a:a3:16:e3:f5:1e:c8:56:d6:87:e0:4a:
97:1a:8a:36:1f:33:bd:63:44:64:39:2f:5a:51:b1:42:52:c7:
9b:83:91:b6
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUCPtl30jlYJb7t1tNqMOu23+79YgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ1MDFFN0ZEQkM1NzE2MEM2REFGMEQzQkU5MkZCRDNC
MTMyNEFCOTAeFw0yNjA1MDMwMjI4MDZaFw0yNzA1MDIwMjMzMDZaMDMxMTAvBgNV
BAMTKDdBODYzNDQ3NTYyNkMyOTAwMTUyQzNEN0Q3OEFGRTEzMkIyNkQ0QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjURjNC0iMmmSzOnqm1yPAVUuY
SM6tsBDVDMpe0aRVFewmcj2+xbX+RoBU3iciOUEeeYbgw+49HTstpDPMRPgtX4FO
9okYUO6ksZLal0uyB56uhrlKtczH7BFtCRQrj2rK02QWmJZJgbc4S1G8dZibH78K
LxE5kfMUrWKf4oYD1kGH5/gr3RZuk8bW9X8xKz2vL1/KcO9f2zFe3Esj8o7zBD59
Hp5otkuJQLleyCMq+1p5r97K2FhtlXCHQcIvS9x4qDl0NiTmdLGwJ5HrBySJ/0co
Ev4J81fem9tC6CofmJn8/dUHTTIOKrlIdKmMKXf0mbE9MXyqqjy5DXG3TT4xAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUeoY0R1YmwpABUsPX14r+Eysm1L8wHwYDVR0j
BBgwFoAU5FAef9vFcWDG2vDTvpL707EySrkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTI0YTkxMDUtOGQyYS00YjM4LWE2YWUtMDVlYWQ2OTcxOWEzLzAvRTQ1MDFFN0ZE
QkM1NzE2MEM2REFGMEQzQkU5MkZCRDNCMTMyNEFCOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FNDUwMUU3RkRCQzU3MTYwQzZEQUYwRDNCRTkyRkJEM0IxMzI0
QUI5LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzUyNGE5MTA1LThkMmEtNGIzOC1h
NmFlLTA1ZWFkNjk3MTlhMy8wLzMyMzAzMzJlMzgzMDJlMzEzNTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMyMzQzMjMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADLUA8wDQYJKoZIhvcN
AQELBQADggEBAGE9LxDCjs1iR9AS6V4AB25LQn7DBjsHVRLtAXdt4BtFnFlOttiH
Skc+OfZ5drDF1cTcdYd+4x/IqQYdIupLaVmb0bK4tNpiO9snvK9Q4UrFccGDqHNs
C9dc6XdKBrGGstarr9q6E9gRMid5RxKFOZZdJwe2dkK31/AUCCQiTskdsB8WXrtM
FBzES8lNAyxDzJovy44+PxZwIAY5CGqAxds6YVFlbhD792UvTLhs9jI5HpyysCre
wX80KznP9iJN02kZ4sN/TvWrlQ13YWdQ7mKYKLgxLqP7ZLo9nE6uflqjFuP1HshW
1ofgSpcaijYfM71jRGQ5L1pRsUJSx5uDkbY=
-----END CERTIFICATE-----
Generated at Wed May 13 02:37:52 2026 by rpki-client