
$ rpki-client -vvf rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e35322e302f32342d3234203d3e203338313435.roa
File: 3230322e3138302e35322e302f32342d3234203d3e203338313435.roa (raw, json)
Hash identifier: 4kPeZPIaVd50PyfpSxYtdnKHsDhL4JraPag6YFEXjyY=
Subject key identifier: 75:55:BC:73:DE:78:90:C7:49:92:BE:77:88:24:89:D3:2F:36:8B:05
Certificate issuer: /CN=FAF852347432F9918D1450C78A1EC83C3599937A
Certificate serial: 144FCC46578046D9734B5450D552F807032BED18
Authority key identifier: FA:F8:52:34:74:32:F9:91:8D:14:50:C7:8A:1E:C8:3C:35:99:93:7A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e35322e302f32342d3234203d3e203338313435.roa
Signing time: Sun 03 May 2026 02:34:35 +0000
ROA not before: Sun 03 May 2026 02:29:35 +0000
ROA not after: Sun 02 May 2027 02:34:35 +0000
asID: 38145
IP address blocks: 202.180.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.crl
rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:4f:cc:46:57:80:46:d9:73:4b:54:50:d5:52:f8:07:03:2b:ed:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FAF852347432F9918D1450C78A1EC83C3599937A
Validity
Not Before: May 3 02:29:35 2026 GMT
Not After : May 2 02:34:35 2027 GMT
Subject: CN=7555BC73DE7890C74992BE77882489D32F368B05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:de:be:bc:9d:fe:e3:e6:64:e3:fa:3f:d1:57:
65:24:15:92:9f:e3:9c:33:01:d2:67:9b:1c:d8:ee:
8e:c3:48:fe:98:7f:db:3f:78:6e:03:0e:6c:f7:04:
64:ec:65:2d:d1:ce:c9:78:18:ff:3c:f8:70:a2:10:
7b:40:31:c8:cd:d3:84:22:73:94:ca:07:4c:a0:5a:
49:5b:98:50:a3:99:c3:e8:15:6e:c6:d1:94:02:98:
96:a6:9b:49:80:31:d2:ba:ae:b7:2d:40:9c:a6:98:
54:53:89:8d:bf:76:30:7b:0d:91:b0:2b:7d:52:3d:
3d:cd:93:34:04:76:3d:bc:b4:b9:50:d6:de:92:45:
87:1f:28:35:d5:54:24:ec:d8:0a:b6:e9:9a:c7:5c:
82:e7:be:57:ef:43:1e:ab:56:15:fc:4d:46:98:34:
bd:d9:24:8e:28:7d:bc:62:b7:f9:4f:bd:bf:34:86:
d3:e5:43:0a:38:55:9d:a7:6d:16:f8:60:42:94:ce:
e9:42:84:c7:d4:57:13:af:5f:53:a5:f1:9c:15:1c:
04:2a:59:9e:95:34:eb:ed:a5:81:f1:33:50:67:61:
6c:78:b7:fa:68:24:0c:0f:a4:dc:1b:e2:96:6d:dc:
90:41:d4:a0:c2:40:ca:d5:f9:04:b7:e0:16:6b:db:
38:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:55:BC:73:DE:78:90:C7:49:92:BE:77:88:24:89:D3:2F:36:8B:05
X509v3 Authority Key Identifier:
keyid:FA:F8:52:34:74:32:F9:91:8D:14:50:C7:8A:1E:C8:3C:35:99:93:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e35322e302f32342d3234203d3e203338313435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.180.52.0/24
Signature Algorithm: sha256WithRSAEncryption
96:94:85:63:2f:50:ee:27:43:5c:a8:4d:d3:37:3a:96:81:1c:
53:41:40:4d:dc:ed:de:26:2c:70:76:61:67:f1:33:46:62:3d:
5c:6c:1e:6d:78:b3:8a:51:52:e7:d0:4d:f7:8c:48:1f:96:c6:
df:23:3f:30:bc:93:0a:72:02:43:e3:49:d7:bb:a9:46:d5:e2:
c5:53:fd:86:93:4d:f1:23:b3:f0:9a:4f:e1:6e:0b:ed:bf:7b:
a3:89:5f:9a:35:e3:4f:a2:f4:cb:35:8d:da:26:f8:ce:e3:e0:
53:01:10:3b:2e:74:aa:d6:ae:1b:c0:87:1c:8c:66:c9:5b:09:
a9:1f:00:ca:7d:80:3d:a9:55:de:24:82:6e:45:90:40:dc:a1:
15:97:92:81:21:bc:86:b0:9f:f6:6c:d0:3a:ed:f3:bf:f3:04:
f3:6d:ac:a5:39:b3:92:f9:96:68:3b:99:bb:bb:92:0f:1a:40:
ce:d7:cf:23:1c:fc:a6:71:ad:f5:79:ae:67:ad:bf:ad:1b:23:
77:36:cb:b3:10:f4:57:a9:7d:c2:06:09:91:72:17:60:46:66:
91:f4:91:73:4a:ee:75:8c:c3:f2:99:31:12:b8:f5:2d:33:ba:
0a:38:86:ee:50:f3:47:a2:f5:ff:2b:ad:4e:d7:a3:f0:1e:4a:
8d:69:8c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:26:27 2026 by rpki-client