
$ rpki-client -vvf rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231342e302f32342d3234203d3e203338313432.roa
File: 3231302e35372e3231342e302f32342d3234203d3e203338313432.roa (raw, json)
Hash identifier: J+zYKwZ+SXdC6vvuqB/51PHxQKuHMJSM0Dgp8PV/GWI=
Subject key identifier: CF:E1:19:74:AF:91:DD:B4:64:9D:A6:CD:A1:84:AA:42:81:3C:5E:4E
Certificate issuer: /CN=3D090A1BCE9471798EE6D079EEC0726ECA9A0187
Certificate serial: 4032EA5BF38C4332EC5B0D8721F848FC0CC941E6
Authority key identifier: 3D:09:0A:1B:CE:94:71:79:8E:E6:D0:79:EE:C0:72:6E:CA:9A:01:87
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231342e302f32342d3234203d3e203338313432.roa
Signing time: Sun 03 May 2026 02:37:36 +0000
ROA not before: Sun 03 May 2026 02:32:36 +0000
ROA not after: Sun 02 May 2027 02:37:36 +0000
asID: 38142
IP address blocks: 210.57.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.crl
rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:18:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:32:ea:5b:f3:8c:43:32:ec:5b:0d:87:21:f8:48:fc:0c:c9:41:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D090A1BCE9471798EE6D079EEC0726ECA9A0187
Validity
Not Before: May 3 02:32:36 2026 GMT
Not After : May 2 02:37:36 2027 GMT
Subject: CN=CFE11974AF91DDB4649DA6CDA184AA42813C5E4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ee:13:70:35:49:39:7d:b9:0c:d6:2b:bb:ca:
da:79:4c:97:d6:b8:8c:3a:24:45:87:ba:30:94:fd:
bb:f4:f3:ef:32:bf:db:60:38:72:aa:72:fc:2d:e6:
38:d8:e4:3b:aa:9e:31:55:e9:31:ca:d6:8d:dc:25:
41:9b:61:b3:c9:7b:62:5c:bc:87:34:ea:3e:de:98:
48:c8:21:39:b4:51:fc:02:75:f0:72:f2:fa:26:48:
66:6f:c0:6b:77:ac:3e:33:c7:46:ca:51:34:e5:08:
b7:31:b7:f4:e9:73:ec:59:94:e1:82:d9:0b:8c:fd:
f8:16:4a:78:e0:cf:28:ec:c7:90:b9:ad:b3:f8:d5:
fa:0a:a1:31:0a:c4:dc:d2:47:cb:b4:f9:39:70:ee:
19:8f:e1:c7:8b:d8:ec:42:03:86:4d:81:6c:b8:63:
ff:9e:79:80:44:d9:ec:65:ad:7b:6f:8e:c8:f5:21:
f1:21:bb:bd:ec:04:15:98:e0:5f:1d:e0:b4:a3:7f:
2f:4b:17:ba:32:e4:cc:b7:c6:31:3a:70:5f:c1:9a:
55:3b:fc:70:c1:d5:20:95:ad:84:17:06:8b:a5:17:
9e:d5:fd:3f:8a:7e:b6:ee:d2:52:1f:9d:13:9e:fa:
e2:08:3a:86:68:65:bc:1e:5e:ac:51:e2:55:1b:b8:
27:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E1:19:74:AF:91:DD:B4:64:9D:A6:CD:A1:84:AA:42:81:3C:5E:4E
X509v3 Authority Key Identifier:
keyid:3D:09:0A:1B:CE:94:71:79:8E:E6:D0:79:EE:C0:72:6E:CA:9A:01:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231342e302f32342d3234203d3e203338313432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.57.214.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:e8:e2:6d:e0:a6:29:a8:a4:f6:c3:4c:f7:f0:9f:77:87:2e:
8a:62:02:77:fc:df:4b:ef:15:18:89:44:1b:76:70:d2:ec:4f:
bf:d3:36:f2:ad:79:00:39:2a:33:80:aa:49:f0:72:82:d9:c3:
76:ab:fd:95:af:cf:83:13:bc:b6:24:87:8e:e5:ca:22:9c:0f:
6a:97:ea:58:a3:35:db:1f:3e:98:02:6e:d3:62:fd:eb:fc:cf:
76:05:8a:35:8d:5b:c8:cb:b4:a3:42:5f:37:c1:1f:13:a2:2f:
7b:4c:20:9d:d7:87:b3:2f:a4:eb:62:0d:86:43:9e:4c:18:0b:
a4:ec:22:65:e9:e6:56:b3:08:ec:f9:1d:73:e0:53:aa:30:ee:
62:b4:ff:05:44:58:3b:33:bf:e9:31:52:75:c3:62:b4:87:dd:
f5:51:e8:71:57:e1:19:5a:16:28:60:10:4a:65:78:35:83:cf:
f2:05:58:a3:84:5e:a2:db:b0:cd:eb:9e:8e:18:44:e7:f6:f7:
96:80:15:59:72:23:7d:31:e9:2d:3d:ed:4e:aa:0e:23:96:33:
22:a4:df:40:51:67:e8:ca:c5:e3:d7:34:19:43:99:43:70:32:
93:0d:9a:21:5f:2f:04:a7:ab:f1:d8:8e:46:0b:c3:3e:31:e5:
6c:c8:5b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:09:18 2026 by rpki-client