
$ rpki-client -vvf rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3230392e302f32342d3234203d3e203338313432.roa
File: 3231302e35372e3230392e302f32342d3234203d3e203338313432.roa (raw, json)
Hash identifier: 5bkG3r6aOam2UYiAyDRHJLOMYGtAoc4TWZuSkWY6DW8=
Subject key identifier: 3E:72:69:DE:0B:BC:54:6F:1B:CB:27:63:60:AB:BF:09:A6:C6:C8:98
Certificate issuer: /CN=3D090A1BCE9471798EE6D079EEC0726ECA9A0187
Certificate serial: 1FABC77E6E3BF2876E80F11BACE99D8B18254F24
Authority key identifier: 3D:09:0A:1B:CE:94:71:79:8E:E6:D0:79:EE:C0:72:6E:CA:9A:01:87
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3230392e302f32342d3234203d3e203338313432.roa
Signing time: Sun 03 May 2026 02:37:37 +0000
ROA not before: Sun 03 May 2026 02:32:37 +0000
ROA not after: Sun 02 May 2027 02:37:37 +0000
asID: 38142
IP address blocks: 210.57.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.crl
rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:18:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:ab:c7:7e:6e:3b:f2:87:6e:80:f1:1b:ac:e9:9d:8b:18:25:4f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D090A1BCE9471798EE6D079EEC0726ECA9A0187
Validity
Not Before: May 3 02:32:37 2026 GMT
Not After : May 2 02:37:37 2027 GMT
Subject: CN=3E7269DE0BBC546F1BCB276360ABBF09A6C6C898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c0:db:e2:53:10:bb:d4:9a:a7:dd:da:b5:a3:
cb:4f:92:f3:79:20:92:d0:61:49:bd:92:30:37:db:
8e:5a:84:ba:39:6d:db:65:ea:02:47:9b:6e:78:bb:
f4:d4:a8:bb:67:73:46:45:bd:a2:6b:30:d8:84:ac:
19:f4:f5:3c:d7:2d:ee:9a:3f:c2:4d:ad:0e:2d:e8:
48:64:a5:d8:3a:83:ca:fe:37:0d:d7:8d:09:d1:05:
56:b6:e1:27:0c:32:45:66:39:68:a7:ad:a0:0d:50:
62:2e:ba:47:38:59:c7:8f:7c:d4:cb:1d:3f:79:fc:
fc:2c:92:a9:54:92:80:01:92:f7:b1:b9:27:da:8a:
cc:b4:b6:0a:c6:6a:33:d3:41:35:10:a8:e7:60:d4:
f5:53:16:84:10:e2:a8:26:49:03:df:98:27:89:0d:
af:b3:93:e6:88:52:be:4a:ce:82:30:c4:7a:7a:21:
68:26:8a:c9:3e:59:b9:a0:8d:06:b1:9f:13:de:1e:
37:d8:70:4c:1e:78:a7:e8:b6:aa:c8:81:3d:9a:66:
f3:00:78:c7:b9:4d:04:37:3b:b3:d0:2f:7e:66:6c:
f7:73:ee:8b:8c:d5:f7:ac:e1:9a:5e:67:14:29:9e:
9f:0c:1e:98:a1:b5:07:2b:18:15:6c:78:9d:f9:35:
9c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:72:69:DE:0B:BC:54:6F:1B:CB:27:63:60:AB:BF:09:A6:C6:C8:98
X509v3 Authority Key Identifier:
keyid:3D:09:0A:1B:CE:94:71:79:8E:E6:D0:79:EE:C0:72:6E:CA:9A:01:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3230392e302f32342d3234203d3e203338313432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.57.209.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:29:66:48:d2:33:e2:eb:b6:3a:77:05:69:2e:06:b6:bf:05:
8c:ea:4a:cd:d4:cc:a3:e6:8e:8c:d9:35:f9:bc:16:14:4d:bc:
1b:c1:4f:70:a0:55:7d:5f:ac:f1:70:2f:4e:ce:50:d5:19:10:
03:20:40:7b:75:84:d6:3c:95:67:a3:16:0e:32:a0:41:26:1d:
e2:3f:9a:16:2f:04:4b:32:d6:b7:19:d7:b0:fb:6e:9d:1d:05:
9d:5c:83:f0:c4:ff:d5:e1:f2:29:62:4a:9e:8a:24:a9:59:62:
28:32:5e:6c:b6:47:29:ff:1c:d8:d0:d0:2d:49:5a:24:7c:78:
1d:05:3c:07:90:e0:2a:37:df:66:0e:15:fe:b9:90:f3:eb:2a:
95:a7:ac:57:c2:3d:89:16:f2:a2:65:5e:f1:77:2a:89:a2:d0:
83:dd:9d:ad:6f:e1:27:49:17:80:cd:4a:62:a8:fc:0e:b3:3b:
08:48:1b:7e:86:32:45:d8:a3:c9:16:47:03:ef:3c:cf:6f:91:
22:33:58:12:f3:af:b2:48:e0:72:d6:6b:d2:a8:12:8a:6f:74:
49:bf:a4:8c:b5:59:93:d3:83:61:a2:ba:04:51:97:ac:7c:73:
39:8a:57:d8:99:6a:7c:9c:8f:6e:11:99:fc:08:9a:22:7d:0c:
0b:9e:82:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:24:08 2026 by rpki-client