
$ rpki-client -vvf rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231302e302f32342d3234203d3e203338313432.roa
File: 3231302e35372e3231302e302f32342d3234203d3e203338313432.roa (raw, json)
Hash identifier: P12FJNsFFyWSsRexfHM3kWn+2VKYuVhwIEq6slsbCcg=
Subject key identifier: 2B:A2:ED:D2:77:53:90:BC:1B:34:6E:12:7C:55:F1:5C:4B:80:51:28
Certificate issuer: /CN=3D090A1BCE9471798EE6D079EEC0726ECA9A0187
Certificate serial: 7DE27D8ED7E27F4379D24303383C47D3DF797511
Authority key identifier: 3D:09:0A:1B:CE:94:71:79:8E:E6:D0:79:EE:C0:72:6E:CA:9A:01:87
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231302e302f32342d3234203d3e203338313432.roa
Signing time: Sun 03 May 2026 02:37:40 +0000
ROA not before: Sun 03 May 2026 02:32:40 +0000
ROA not after: Sun 02 May 2027 02:37:40 +0000
asID: 38142
IP address blocks: 210.57.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.crl
rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:18:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:e2:7d:8e:d7:e2:7f:43:79:d2:43:03:38:3c:47:d3:df:79:75:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D090A1BCE9471798EE6D079EEC0726ECA9A0187
Validity
Not Before: May 3 02:32:40 2026 GMT
Not After : May 2 02:37:40 2027 GMT
Subject: CN=2BA2EDD2775390BC1B346E127C55F15C4B805128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:59:ce:96:9f:2c:c7:75:29:c0:0e:1f:87:cc:
a6:64:ba:20:11:c8:1f:db:51:fd:7a:16:51:05:4b:
f0:e7:55:48:ab:91:f3:fe:d7:9e:b4:36:66:05:b2:
cc:c8:79:a3:27:25:bc:c0:40:81:eb:f4:a6:58:74:
7a:60:f0:26:db:50:93:48:be:c5:b3:da:fa:06:af:
d7:20:e0:95:4b:78:83:25:16:2c:be:d1:f7:bb:98:
08:64:7a:a2:aa:5b:b6:4f:99:03:49:3f:82:2a:7d:
3e:10:57:80:50:91:ac:a5:69:f5:c4:45:bf:03:fc:
c4:3e:c5:61:3c:43:c0:ce:13:c3:4d:db:e1:d9:31:
1a:be:c0:36:19:a8:ac:6b:c6:4b:f4:7c:19:3e:07:
62:7d:e4:46:dd:27:98:fb:a9:01:b4:07:22:a9:23:
92:56:4b:5d:2f:9b:f2:74:5d:08:36:b2:56:20:c2:
74:7b:43:3c:ed:c2:70:b3:6a:e2:6e:f1:a2:94:c9:
be:80:25:2c:30:b5:a3:5b:3f:54:62:a7:e2:30:e3:
57:cf:5d:45:3f:45:a1:e7:f1:b2:18:68:59:fb:27:
68:c6:83:8b:c1:8b:30:9d:9f:a5:aa:dd:db:94:ee:
62:1a:e2:51:22:49:b6:8a:94:58:26:be:7a:f7:70:
64:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A2:ED:D2:77:53:90:BC:1B:34:6E:12:7C:55:F1:5C:4B:80:51:28
X509v3 Authority Key Identifier:
keyid:3D:09:0A:1B:CE:94:71:79:8E:E6:D0:79:EE:C0:72:6E:CA:9A:01:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231302e302f32342d3234203d3e203338313432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.57.210.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:ea:f7:1e:83:35:0f:28:77:d5:31:88:99:3a:24:81:fb:bb:
41:5a:f3:5c:f8:e9:00:ed:a3:92:b3:c1:61:5c:82:49:24:86:
6f:ae:4e:e4:53:9c:35:b5:8c:08:3a:c5:17:df:fb:15:04:62:
61:c4:3b:cd:ca:28:5d:93:c5:9a:f8:7d:b7:33:c1:77:01:9e:
72:f7:54:45:f3:5e:8a:83:ae:c3:e5:6b:6b:32:bd:be:c9:a3:
33:d0:96:03:3c:42:8a:f7:71:c3:14:88:9d:ad:55:b7:51:c5:
c1:aa:75:12:f2:22:0b:e7:1a:9d:c4:d3:e4:42:8a:3c:7a:cc:
74:b1:46:41:49:5b:f3:7d:1c:be:81:49:f1:4a:60:1d:44:28:
c2:80:4b:1f:4b:18:da:d7:82:83:54:b8:5f:2d:a5:7d:98:1e:
ef:b0:e4:6b:a7:8f:07:d7:54:c0:c2:88:36:2f:8a:6d:c8:a2:
45:74:3c:49:df:91:82:aa:67:c7:55:4d:fc:e6:9f:ba:38:fc:
ab:01:44:28:9c:ef:c8:f9:94:ea:64:ad:66:c8:b9:a0:da:a6:
07:84:e6:88:36:10:07:5e:b6:96:03:d4:21:48:5b:e5:0f:9f:
a8:1e:4e:e7:83:6d:ab:29:b2:8e:75:65:1a:0c:59:9f:01:b8:
96:6b:28:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:24:51 2026 by rpki-client