
$ rpki-client -vvf rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e35352e302f32342d3234203d3e203338313435.roa
File: 3230322e3138302e35352e302f32342d3234203d3e203338313435.roa (raw, json)
Hash identifier: gH4fTqHdjFyudloTTJxqIEFeKPy7NwCuESwBsulqtH0=
Subject key identifier: 8E:1F:F0:9C:56:B2:84:F9:82:5D:AE:FE:15:51:EB:C1:42:9C:C1:3D
Certificate issuer: /CN=FAF852347432F9918D1450C78A1EC83C3599937A
Certificate serial: 5EF7393C56DCDA553A84A87B2394C79733F4D287
Authority key identifier: FA:F8:52:34:74:32:F9:91:8D:14:50:C7:8A:1E:C8:3C:35:99:93:7A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e35352e302f32342d3234203d3e203338313435.roa
Signing time: Sun 03 May 2026 02:34:35 +0000
ROA not before: Sun 03 May 2026 02:29:35 +0000
ROA not after: Sun 02 May 2027 02:34:35 +0000
asID: 38145
IP address blocks: 202.180.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.crl
rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:f7:39:3c:56:dc:da:55:3a:84:a8:7b:23:94:c7:97:33:f4:d2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FAF852347432F9918D1450C78A1EC83C3599937A
Validity
Not Before: May 3 02:29:35 2026 GMT
Not After : May 2 02:34:35 2027 GMT
Subject: CN=8E1FF09C56B284F9825DAEFE1551EBC1429CC13D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bf:b8:06:63:ee:32:9f:1c:78:82:a0:dd:99:
9f:1d:ea:59:b0:3a:a4:44:fb:a5:6f:6d:71:6d:90:
35:39:ce:f7:da:37:23:f5:2f:1c:e4:35:77:84:b7:
f6:e5:01:85:9d:77:c9:4b:62:e1:b4:63:1b:2e:80:
a2:97:f4:02:4a:13:f8:21:6b:a6:ee:b3:08:d8:b7:
52:26:9b:4f:e8:70:1f:fa:11:86:44:a7:89:3c:94:
46:3a:fa:56:8e:e6:5a:74:ec:45:3c:50:4d:65:8c:
bb:92:cf:64:cd:8f:1b:17:94:2d:cd:dc:34:42:c9:
f1:44:3c:33:6c:b7:ba:f6:89:61:e9:8d:f1:55:c3:
1e:95:1b:96:72:81:90:d1:5e:e9:40:dd:93:ac:a9:
df:43:a7:ed:a3:8e:3f:4c:51:7a:d7:3c:67:b6:18:
5c:83:c4:62:1c:89:71:75:2b:b0:49:f2:fd:bd:23:
eb:b2:ec:5c:55:61:bb:d2:4f:ee:2a:be:9e:44:c4:
c3:ec:37:f9:c9:57:34:41:b7:5b:b3:df:61:71:ad:
5d:c7:6e:c0:68:9a:be:a7:aa:df:72:29:16:07:fa:
c6:36:c3:5e:91:70:96:61:cd:37:2e:01:8c:04:f1:
ad:05:95:61:f6:2e:67:07:ea:de:a4:e7:8f:6f:3c:
e6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1F:F0:9C:56:B2:84:F9:82:5D:AE:FE:15:51:EB:C1:42:9C:C1:3D
X509v3 Authority Key Identifier:
keyid:FA:F8:52:34:74:32:F9:91:8D:14:50:C7:8A:1E:C8:3C:35:99:93:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/FAF852347432F9918D1450C78A1EC83C3599937A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FAF852347432F9918D1450C78A1EC83C3599937A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e35352e302f32342d3234203d3e203338313435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.180.55.0/24
Signature Algorithm: sha256WithRSAEncryption
36:79:88:b5:35:20:ef:d9:be:8d:3a:ed:17:11:07:49:9b:7a:
74:6d:3c:ed:c6:97:6e:5b:5f:cc:a7:d2:97:00:7a:2c:52:e1:
62:2c:81:fa:34:6b:e5:22:77:58:20:41:23:90:0f:a2:d0:da:
77:5d:43:4f:8e:f3:97:8a:2d:e8:34:e1:3d:cc:f5:5a:4c:49:
02:87:c3:a0:c8:b9:8e:87:38:5f:0e:9c:a3:28:91:d0:4c:e4:
6e:60:d3:72:f3:d8:88:12:5b:e7:f7:54:43:db:9f:ea:cd:a9:
b0:d3:3f:47:c5:b6:6e:9f:54:ff:d1:45:07:1a:cc:19:0e:dc:
95:33:56:e9:f7:29:6b:48:ac:e1:b1:9e:6a:d4:64:59:3a:74:
37:c9:28:20:e1:3d:c0:5e:82:37:87:f0:24:ed:c3:28:8b:49:
17:ea:5c:c7:fa:8d:53:c7:e1:40:8f:59:56:e7:9e:e5:f5:86:
d7:c2:c6:4e:ea:87:09:f9:47:da:34:b9:ab:b5:73:e0:4f:22:
1f:c7:18:9b:8f:24:9d:2a:69:44:fd:49:8c:99:10:8b:d5:5a:
c4:f3:b3:42:01:78:00:2b:e2:ac:c1:1f:2a:07:39:91:55:66:
6d:fd:f2:a7:60:9b:ac:c0:14:89:45:5d:a4:08:95:a8:1b:12:
ab:52:fb:f2
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUXvc5PFbc2lU6hKh7I5THlzP00ocwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkFGODUyMzQ3NDMyRjk5MThEMTQ1MEM3OEExRUM4M0Mz
NTk5OTM3QTAeFw0yNjA1MDMwMjI5MzVaFw0yNzA1MDIwMjM0MzVaMDMxMTAvBgNV
BAMTKDhFMUZGMDlDNTZCMjg0Rjk4MjVEQUVGRTE1NTFFQkMxNDI5Q0MxM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDov7gGY+4ynxx4gqDdmZ8d6lmw
OqRE+6VvbXFtkDU5zvfaNyP1LxzkNXeEt/blAYWdd8lLYuG0YxsugKKX9AJKE/gh
a6buswjYt1Imm0/ocB/6EYZEp4k8lEY6+laO5lp07EU8UE1ljLuSz2TNjxsXlC3N
3DRCyfFEPDNst7r2iWHpjfFVwx6VG5ZygZDRXulA3ZOsqd9Dp+2jjj9MUXrXPGe2
GFyDxGIciXF1K7BJ8v29I+uy7FxVYbvST+4qvp5ExMPsN/nJVzRBt1uz32FxrV3H
bsBomr6nqt9yKRYH+sY2w16RcJZhzTcuAYwE8a0FlWH2LmcH6t6k549vPOZnAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUjh/wnFayhPmCXa7+FVHrwUKcwT0wHwYDVR0j
BBgwFoAU+vhSNHQy+ZGNFFDHih7IPDWZk3owDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTc5ODRlM2EtNDhmOS00Y2RhLWJlNmMtNDAwNmMwOGY4ZmQyLzAvRkFGODUyMzQ3
NDMyRjk5MThEMTQ1MEM3OEExRUM4M0MzNTk5OTM3QS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GQUY4NTIzNDc0MzJGOTkxOEQxNDUwQzc4QTFFQzgzQzM1OTk5
MzdBLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzU3OTg0ZTNhLTQ4ZjktNGNkYS1i
ZTZjLTQwMDZjMDhmOGZkMi8wLzMyMzAzMjJlMzEzODMwMmUzNTM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODMxMzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMq0NzANBgkqhkiG
9w0BAQsFAAOCAQEANnmItTUg79m+jTrtFxEHSZt6dG087caXbltfzKfSlwB6LFLh
YiyB+jRr5SJ3WCBBI5APotDad11DT47zl4ot6DThPcz1WkxJAofDoMi5joc4Xw6c
oyiR0EzkbmDTcvPYiBJb5/dUQ9uf6s2psNM/R8W2bp9U/9FFBxrMGQ7clTNW6fcp
a0is4bGeatRkWTp0N8koIOE9wF6CN4fwJO3DKItJF+pcx/qNU8fhQI9ZVuee5fWG
18LGTuqHCflH2jS5q7Vz4E8iH8cYm48knSppRP1JjJkQi9VaxPOzQgF4ACvirMEf
Kgc5kVVmbf3yp2CbrMAUiUVdpAiVqBsSq1L78g==
-----END CERTIFICATE-----
Generated at Wed May 13 04:03:23 2026 by rpki-client