
$ rpki-client -vvf rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/3230322e35302e3230302e302f32342d3234203d3e203535363936.roa
File: 3230322e35302e3230302e302f32342d3234203d3e203535363936.roa (raw, json)
Hash identifier: j7IknYgKj7dl1bu8AJ/aQ/eLpW5VQAB5YDLHEEVUQxU=
Subject key identifier: 60:78:D0:EA:76:FC:B3:BC:78:E1:57:F0:5F:AE:CF:83:73:20:C3:21
Certificate issuer: /CN=8FFAA6656CAEB189705F03C7B4148624E4A80597
Certificate serial: 34596BDB2D0CC318930B9137D42B39C39463F103
Authority key identifier: 8F:FA:A6:65:6C:AE:B1:89:70:5F:03:C7:B4:14:86:24:E4:A8:05:97
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/3230322e35302e3230302e302f32342d3234203d3e203535363936.roa
Signing time: Sun 03 May 2026 02:33:13 +0000
ROA not before: Sun 03 May 2026 02:28:13 +0000
ROA not after: Sun 02 May 2027 02:33:13 +0000
asID: 55696
IP address blocks: 202.50.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.crl
rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 08:33:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:59:6b:db:2d:0c:c3:18:93:0b:91:37:d4:2b:39:c3:94:63:f1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FFAA6656CAEB189705F03C7B4148624E4A80597
Validity
Not Before: May 3 02:28:13 2026 GMT
Not After : May 2 02:33:13 2027 GMT
Subject: CN=6078D0EA76FCB3BC78E157F05FAECF837320C321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d7:63:be:fe:19:56:59:23:f8:43:71:5e:ad:
ff:cf:f9:ea:b2:00:ab:47:98:15:8a:ae:b0:62:ec:
6d:71:26:31:f4:c2:3d:9e:ce:dd:62:64:50:2d:e7:
f3:03:e8:9f:e6:28:14:6b:ec:54:00:ee:b5:f7:dc:
8b:7e:d5:e3:f1:d4:e3:a5:0d:28:89:da:79:3b:30:
60:ba:f2:f2:f6:3c:92:9d:ac:a5:87:3d:d7:6e:fd:
2f:cf:ed:66:d0:3d:95:8e:bf:c1:3c:2f:97:68:96:
42:fb:4e:2e:d8:00:d7:07:7a:66:aa:0f:45:11:a4:
7b:bc:73:89:d0:a8:5f:f0:a6:1b:ff:57:8e:4c:8c:
78:8c:3d:af:c4:7a:86:14:69:4a:57:7e:be:94:f9:
e0:7a:3d:b2:cd:49:65:61:26:f0:af:e1:1e:c2:15:
d4:bf:4d:e5:0c:ed:e4:f8:34:76:f9:f5:e9:3c:28:
b1:32:f0:6b:6b:3a:61:88:46:f9:f6:a5:88:d8:e2:
ef:f1:49:db:fb:98:d5:fa:fc:54:e1:18:db:c2:c9:
69:9a:52:bc:3a:24:22:87:a7:d3:e9:62:0f:32:10:
3b:04:19:ab:d3:dd:00:bc:1d:ac:d7:fb:47:fa:f2:
73:0a:4f:b1:73:29:4f:78:2c:fb:35:c7:df:37:b6:
3b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:78:D0:EA:76:FC:B3:BC:78:E1:57:F0:5F:AE:CF:83:73:20:C3:21
X509v3 Authority Key Identifier:
keyid:8F:FA:A6:65:6C:AE:B1:89:70:5F:03:C7:B4:14:86:24:E4:A8:05:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/3230322e35302e3230302e302f32342d3234203d3e203535363936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.50.200.0/24
Signature Algorithm: sha256WithRSAEncryption
68:e0:b8:5a:7d:1b:49:8a:7a:c6:86:8f:a3:16:4b:74:59:cc:
01:ea:8f:4c:2f:36:d9:a5:cc:56:8f:4c:d6:30:9b:89:07:c7:
dd:ec:f8:21:08:e1:94:67:3a:e2:14:65:2e:62:02:cc:c0:32:
c8:35:cc:8a:5a:10:a6:88:da:b5:40:a3:45:02:3e:b0:21:81:
b4:03:5f:b2:ba:ae:bd:1d:39:d7:4c:73:39:5e:06:e1:a2:41:
c4:37:eb:97:84:f9:31:25:92:a3:b3:ed:a7:7a:dc:50:44:95:
4a:7d:49:51:48:7f:f2:a8:5d:a7:56:1d:b5:e1:af:13:0b:41:
ea:71:eb:26:b5:d8:02:1c:af:d6:45:00:7a:ec:8b:b1:0a:26:
67:25:c5:e8:10:83:30:b3:75:9a:78:2e:1f:c9:03:42:8e:70:
fb:da:3a:1b:f0:42:17:34:a1:72:ca:43:2a:77:41:b6:55:51:
18:7b:b6:3d:15:1f:a9:f0:1c:b3:c1:7f:a3:14:41:a1:0f:b6:
f4:83:26:a6:eb:3e:4d:1c:c3:31:00:76:b5:1a:00:c4:12:87:
f4:38:a4:5c:56:9f:4a:26:1c:a5:da:7e:c5:68:d1:2f:27:19:
a1:96:30:18:d4:9a:ad:4c:78:92:e3:35:4d:63:39:c2:bf:fd:
0b:ef:6a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:42:03 2026 by rpki-client