
$ rpki-client -vvf rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/3230332e3137352e3132342e302f32342d3234203d3e20313339393532.roa
File: 3230332e3137352e3132342e302f32342d3234203d3e20313339393532.roa (raw, json)
Hash identifier: ZSw4Uq5kBtHJtMaE8rKzgmI2s1rhms6m5RdJe1in6/8=
Subject key identifier: 64:62:4E:40:BB:9E:99:90:8E:26:5F:79:F9:DA:62:B8:64:FA:07:6E
Certificate issuer: /CN=BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42
Certificate serial: 126B9A910A31B5B66097BFD9E3760122D595D70B
Authority key identifier: BC:2F:FB:53:46:9C:81:8C:FF:E7:C5:1F:3A:A4:AA:B5:5C:E3:2C:42
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/3230332e3137352e3132342e302f32342d3234203d3e20313339393532.roa
Signing time: Sun 03 May 2026 02:33:17 +0000
ROA not before: Sun 03 May 2026 02:28:17 +0000
ROA not after: Sun 02 May 2027 02:33:17 +0000
asID: 139952
IP address blocks: 203.175.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.crl
rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:34:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:6b:9a:91:0a:31:b5:b6:60:97:bf:d9:e3:76:01:22:d5:95:d7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42
Validity
Not Before: May 3 02:28:17 2026 GMT
Not After : May 2 02:33:17 2027 GMT
Subject: CN=64624E40BB9E99908E265F79F9DA62B864FA076E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e6:33:06:18:ad:16:c2:e3:f2:b3:cf:68:5e:
4d:26:89:b9:45:f5:ab:0b:b8:eb:a5:73:3f:1f:a6:
0d:e8:20:40:08:92:7e:38:d6:cc:85:74:fb:c7:2c:
7b:c6:1b:0c:8c:2a:7e:b4:30:a0:df:d2:47:b1:7f:
44:13:f2:77:b8:a4:de:ff:c7:6f:25:c7:76:29:d6:
b3:89:68:0f:e3:e9:48:4f:5d:12:27:7a:63:1a:58:
a4:bb:0e:21:54:09:87:5b:96:a4:e9:f9:42:71:04:
b7:a5:62:6d:82:24:a0:9b:60:c1:09:a7:90:5d:1e:
2b:37:ad:cc:d2:d4:3d:ab:a7:fa:a5:b9:d3:fe:ea:
06:f7:83:0b:e8:8a:37:6b:74:f5:04:91:8a:51:4d:
d8:e7:74:42:b5:00:2e:00:71:7f:f8:e8:6b:39:75:
e2:ee:5d:05:34:4e:ac:38:36:78:a3:39:7b:60:f1:
de:4f:d7:b2:50:f4:70:93:39:b4:01:93:52:d2:a0:
78:5a:16:0d:06:93:fc:aa:10:fa:e5:1d:03:4c:f8:
43:79:8c:21:66:38:a0:55:20:72:a7:87:41:e8:90:
75:c4:52:59:bf:2d:71:38:c9:cb:d2:9a:54:1b:81:
59:05:e7:68:a6:48:a9:14:8a:f9:26:fd:ac:fb:bc:
78:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:62:4E:40:BB:9E:99:90:8E:26:5F:79:F9:DA:62:B8:64:FA:07:6E
X509v3 Authority Key Identifier:
keyid:BC:2F:FB:53:46:9C:81:8C:FF:E7:C5:1F:3A:A4:AA:B5:5C:E3:2C:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/3230332e3137352e3132342e302f32342d3234203d3e20313339393532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.175.124.0/24
Signature Algorithm: sha256WithRSAEncryption
37:41:1f:07:14:e3:1d:3c:47:da:6e:50:70:ea:09:af:fd:37:
01:c1:6a:0c:9a:b8:09:5e:34:4c:fc:53:be:07:a3:b9:44:83:
eb:ab:d6:45:aa:47:52:4f:38:d4:d0:78:1d:2a:74:ca:4e:6b:
d7:51:7b:d4:ac:6d:a5:62:64:42:aa:5f:a0:0b:24:4e:9f:72:
ce:b5:f8:2b:4f:bf:e6:fa:bb:59:26:e0:b0:35:b2:8b:59:22:
fd:ae:ac:cf:f1:f5:49:5c:b2:c7:0a:91:74:f2:7c:23:83:b5:
25:b3:59:4a:b5:fb:97:05:86:17:59:1f:ad:86:21:c4:52:dc:
34:ac:48:f3:ba:7a:fa:1d:4e:64:cf:b6:8b:2b:8f:b3:d4:11:
79:ee:db:a5:19:d8:b5:96:bd:78:25:00:7a:57:f0:a0:77:75:
d3:20:72:d2:8c:9b:1b:59:c3:f8:c8:5e:74:74:33:e5:9e:a7:
2b:de:53:ac:27:86:69:89:25:77:02:f2:55:9a:0d:d4:b4:d9:
f7:db:4c:c9:ba:ff:4e:03:08:6b:ce:f2:02:b9:11:6f:fc:61:
74:99:eb:4a:3f:cc:b9:60:db:9b:42:ac:5c:e5:41:3f:61:68:
24:37:b3:c8:9a:09:f5:49:f0:6f:1d:8a:8a:d2:3a:4c:ec:18:
13:6e:92:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:36:29 2026 by rpki-client