
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234302e302f32332d3233203d3e203338373738.roa
File: 3230322e39332e3234302e302f32332d3233203d3e203338373738.roa (raw, json)
Hash identifier: 2tjc/8qrga6+39EQjimW3zf16UfFL3aN5h4lRF828pQ=
Subject key identifier: 68:A0:7C:49:3F:39:40:28:1B:24:EA:0A:D7:98:7A:B9:D1:C5:7F:44
Certificate issuer: /CN=65DBBEC678177B7159AD901A4023BA57AA4096DC
Certificate serial: 70A91291DC8944D687412696B322FADE80A87EC8
Authority key identifier: 65:DB:BE:C6:78:17:7B:71:59:AD:90:1A:40:23:BA:57:AA:40:96:DC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234302e302f32332d3233203d3e203338373738.roa
Signing time: Sun 03 May 2026 02:35:45 +0000
ROA not before: Sun 03 May 2026 02:30:45 +0000
ROA not after: Sun 02 May 2027 02:35:45 +0000
asID: 38778
IP address blocks: 202.93.240.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.crl
rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:55:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:a9:12:91:dc:89:44:d6:87:41:26:96:b3:22:fa:de:80:a8:7e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65DBBEC678177B7159AD901A4023BA57AA4096DC
Validity
Not Before: May 3 02:30:45 2026 GMT
Not After : May 2 02:35:45 2027 GMT
Subject: CN=68A07C493F3940281B24EA0AD7987AB9D1C57F44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:43:a6:f3:9f:c3:46:13:dc:0b:4f:01:85:35:
35:80:a8:7a:f2:60:8d:c0:e7:cf:a7:c6:ad:f5:eb:
cc:d1:85:f3:c9:0c:30:e1:47:c2:fa:e4:3d:19:f7:
67:8d:4f:38:7a:03:08:75:f9:54:a2:33:61:78:73:
b9:8b:05:23:24:e8:f4:1a:0e:91:86:dc:99:cd:2e:
71:98:f6:91:80:4e:b4:de:2c:96:e3:d5:23:04:d7:
52:29:2f:f4:a7:e6:75:f7:b2:50:0e:b1:c9:e0:04:
20:c9:d6:3e:01:2c:7d:1b:bb:cf:08:20:04:5e:b3:
2c:23:39:01:f3:52:74:0f:38:d0:05:63:9a:6f:23:
7d:dc:f0:d5:05:9a:dc:c2:b1:45:c4:9d:90:52:8c:
9f:d0:cb:d9:ae:67:1b:af:af:b2:6e:ff:ee:fe:ea:
8d:50:bc:ce:e5:5f:61:da:50:a5:94:98:bd:c6:eb:
b7:70:1e:cf:9f:bc:9b:b2:2e:82:cb:18:9a:8e:b0:
31:75:86:d2:4c:77:39:12:25:9c:a9:65:1b:8f:82:
3d:10:9f:30:7f:3b:ab:69:e8:c9:a7:94:9a:03:53:
75:22:b5:a4:0a:de:a7:33:05:50:54:28:b2:31:f2:
19:dc:9c:b6:94:84:56:9b:24:b7:90:34:91:32:29:
7f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A0:7C:49:3F:39:40:28:1B:24:EA:0A:D7:98:7A:B9:D1:C5:7F:44
X509v3 Authority Key Identifier:
keyid:65:DB:BE:C6:78:17:7B:71:59:AD:90:1A:40:23:BA:57:AA:40:96:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/65DBBEC678177B7159AD901A4023BA57AA4096DC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65DBBEC678177B7159AD901A4023BA57AA4096DC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234302e302f32332d3233203d3e203338373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.93.240.0/23
Signature Algorithm: sha256WithRSAEncryption
40:ae:cf:ac:8c:b6:a6:1a:dd:07:a6:3f:4e:6c:02:b6:50:95:
60:e9:4f:23:d0:82:a8:e8:8f:8e:af:8e:9b:4f:71:e6:d1:db:
76:9a:a0:7f:ee:8b:30:38:5d:2e:f2:06:ec:20:45:9a:e5:47:
9f:9a:47:63:ae:4f:aa:8b:b7:a3:2b:06:e9:34:34:0f:ef:d6:
b2:a8:97:96:79:1e:ac:7c:c5:e9:82:8a:06:81:3d:ec:91:20:
1a:65:07:db:2c:91:b2:e2:df:4a:a4:b1:76:5d:32:f4:d3:b4:
2f:9a:1c:df:c8:2d:94:48:3e:1b:64:db:b5:ae:51:2f:8a:55:
72:09:2b:5a:35:16:3b:e0:ad:a6:06:ea:c5:a9:bd:1b:9b:1a:
50:70:14:1f:18:9d:77:56:2c:fb:28:39:25:13:6f:4a:23:2e:
a1:74:b7:5f:c6:4e:76:d6:f5:df:dc:d3:3b:aa:12:e5:8c:b6:
60:09:e2:78:58:43:bd:72:24:c4:91:5c:c9:59:37:e2:48:f5:
24:ff:13:88:d7:94:ea:3d:9e:f4:7b:74:9b:26:09:44:0e:c6:
3e:0c:34:cc:05:9c:9a:e5:6d:dc:fe:59:e1:45:8e:1f:c2:9f:
9a:f9:02:c8:94:a4:42:70:50:06:0d:00:e8:b0:fb:a5:a1:5d:
07:e8:22:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:11:14 2026 by rpki-client