
$ rpki-client -vvf rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/3230322e35302e3230312e302f32342d3234203d3e203535363936.roa
File: 3230322e35302e3230312e302f32342d3234203d3e203535363936.roa (raw, json)
Hash identifier: 9g/ng/5n6hJoQNhHnUHUl6+xhhnGERFtgslQ205VyPU=
Subject key identifier: 59:AA:EB:53:62:FB:9A:C9:00:9C:84:2E:16:F3:39:DF:B4:AE:EA:8D
Certificate issuer: /CN=8FFAA6656CAEB189705F03C7B4148624E4A80597
Certificate serial: 7318945A2E5410B63C0CB0AF8283380E207F3A14
Authority key identifier: 8F:FA:A6:65:6C:AE:B1:89:70:5F:03:C7:B4:14:86:24:E4:A8:05:97
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/3230322e35302e3230312e302f32342d3234203d3e203535363936.roa
Signing time: Sun 03 May 2026 02:33:14 +0000
ROA not before: Sun 03 May 2026 02:28:14 +0000
ROA not after: Sun 02 May 2027 02:33:14 +0000
asID: 55696
IP address blocks: 202.50.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.crl
rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 08:33:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:18:94:5a:2e:54:10:b6:3c:0c:b0:af:82:83:38:0e:20:7f:3a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FFAA6656CAEB189705F03C7B4148624E4A80597
Validity
Not Before: May 3 02:28:14 2026 GMT
Not After : May 2 02:33:14 2027 GMT
Subject: CN=59AAEB5362FB9AC9009C842E16F339DFB4AEEA8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:90:a5:5b:bc:22:8f:37:6e:0a:59:60:5b:ce:
71:b3:e7:4d:54:46:5f:1b:85:38:71:ac:c8:d9:0c:
e8:73:c3:94:1f:9e:31:9e:ec:2f:66:26:a2:72:2f:
06:8f:68:c9:f8:63:b2:6f:c0:88:b4:af:73:77:27:
0e:02:34:47:ab:81:02:f3:60:22:f1:eb:97:30:6b:
36:c5:75:38:42:1b:65:20:40:47:76:92:e0:dd:79:
8e:6a:fc:a6:e7:f1:e1:e2:9f:c0:7e:b8:fe:0c:e8:
62:89:17:bb:cc:55:0e:b7:69:75:c3:59:f0:72:6a:
25:3c:1f:54:63:2f:e1:7a:eb:b3:af:22:91:3c:4f:
86:83:9a:ef:0e:67:cb:f0:25:9b:92:0b:36:e6:a7:
4a:62:8b:9d:ab:46:5e:5f:52:ea:5f:2e:5a:61:6e:
c6:1e:9f:b6:89:a8:3e:1b:3b:ca:dc:5f:cf:b5:f6:
35:05:7c:50:15:2c:8a:7a:27:66:83:83:41:46:9a:
bc:1a:a7:53:f4:29:72:95:8d:02:7d:d2:db:af:ce:
26:fc:bc:4d:e9:fa:44:89:db:29:97:10:26:cc:e8:
9f:12:dc:4f:3d:e8:16:b6:fe:5c:c1:3a:be:a1:ff:
00:0b:bd:d4:73:0a:b5:c8:2f:85:5b:4f:ac:1c:ac:
ef:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AA:EB:53:62:FB:9A:C9:00:9C:84:2E:16:F3:39:DF:B4:AE:EA:8D
X509v3 Authority Key Identifier:
keyid:8F:FA:A6:65:6C:AE:B1:89:70:5F:03:C7:B4:14:86:24:E4:A8:05:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/8FFAA6656CAEB189705F03C7B4148624E4A80597.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8FFAA6656CAEB189705F03C7B4148624E4A80597.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/3230322e35302e3230312e302f32342d3234203d3e203535363936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.50.201.0/24
Signature Algorithm: sha256WithRSAEncryption
89:6b:0a:10:64:27:7c:da:0c:bb:a2:2a:16:cf:c1:e2:e3:42:
be:33:f6:87:b5:91:a3:16:8d:ff:48:33:4b:b9:48:09:65:df:
28:90:26:0b:5c:80:63:0a:72:f2:c5:45:d3:a5:48:34:93:a3:
83:d2:b7:4a:9d:1a:79:40:56:2e:99:61:89:f0:1e:2a:58:9d:
7b:6c:c8:12:a9:56:4c:fa:12:68:09:b8:f9:50:48:b3:be:96:
99:ad:28:a2:22:72:0c:73:67:fa:6b:ca:ac:c8:48:76:9d:59:
8f:9b:1b:f2:e9:26:d6:da:58:55:15:3e:2a:77:42:3a:17:d4:
9f:f7:da:bb:8c:9c:18:46:60:48:7a:92:fd:84:ed:00:a6:d2:
59:e4:86:19:20:a9:51:d3:e0:39:dc:89:4b:e2:36:07:1d:12:
91:77:a2:fe:75:16:12:7d:d2:d4:72:c8:44:c7:2c:ec:03:4f:
52:26:f2:ec:e7:9b:de:65:61:6c:e1:bb:39:5d:4f:7e:a3:2a:
f6:98:30:8e:d4:9d:cc:8d:f1:56:ad:f0:1d:ac:7f:b1:e2:66:
95:b4:bc:c0:9e:9f:e9:3d:c7:58:d9:8c:f7:87:3e:a8:61:e7:
b6:c2:19:b0:16:cc:16:cc:ef:ff:9f:8d:f0:e3:bd:99:cf:74:
69:cb:86:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:25:36 2026 by rpki-client