
$ rpki-client -vvf rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231382e302f32342d3234203d3e203338313432.roa
File: 3231302e35372e3231382e302f32342d3234203d3e203338313432.roa (raw, json)
Hash identifier: FPgfsxknLRU1LHc9BebuH01+tHe4lP7NUuhwY6WPhmk=
Subject key identifier: 1A:FF:B6:A0:64:F4:A2:51:99:B2:FF:08:52:C0:41:5E:4F:ED:10:F6
Certificate issuer: /CN=3D090A1BCE9471798EE6D079EEC0726ECA9A0187
Certificate serial: 2C877AFE441311C9881C21183CC87B528A140107
Authority key identifier: 3D:09:0A:1B:CE:94:71:79:8E:E6:D0:79:EE:C0:72:6E:CA:9A:01:87
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231382e302f32342d3234203d3e203338313432.roa
Signing time: Sun 03 May 2026 02:37:39 +0000
ROA not before: Sun 03 May 2026 02:32:39 +0000
ROA not after: Sun 02 May 2027 02:37:39 +0000
asID: 38142
IP address blocks: 210.57.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.crl
rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:18:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:87:7a:fe:44:13:11:c9:88:1c:21:18:3c:c8:7b:52:8a:14:01:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D090A1BCE9471798EE6D079EEC0726ECA9A0187
Validity
Not Before: May 3 02:32:39 2026 GMT
Not After : May 2 02:37:39 2027 GMT
Subject: CN=1AFFB6A064F4A25199B2FF0852C0415E4FED10F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:54:90:c6:8f:80:89:2a:80:d8:4f:7a:98:2e:
aa:99:b2:e7:31:8e:38:d0:28:64:69:ba:88:de:8d:
84:f1:02:6a:76:c3:f8:1a:06:a9:a3:98:75:f2:cf:
69:83:85:d6:b0:3f:2c:89:87:cc:20:4e:90:c7:3c:
2f:b4:55:3d:1a:5d:f2:c6:12:bc:47:b4:62:ac:08:
f7:ad:6d:0f:1a:bc:6e:20:59:90:c5:a1:33:78:48:
90:f2:2f:44:e3:cb:97:d5:ed:19:dc:a2:c0:f0:60:
2c:76:4d:00:b5:d1:b5:3c:7d:b8:5c:11:3d:ab:0c:
9c:23:1f:56:b4:09:40:21:39:37:68:38:00:36:97:
c6:c0:38:3b:98:32:08:8e:16:d0:fc:89:0b:1a:43:
9b:09:b0:6d:16:cc:3a:00:e9:94:4f:76:9b:48:83:
0b:37:81:85:5c:55:5e:e7:67:eb:98:3d:75:5c:6f:
95:3a:f3:0d:68:11:39:f3:69:44:a9:42:67:ae:50:
2e:e0:1f:ef:b3:93:19:e6:11:47:2d:42:6e:8b:66:
8e:58:6a:5e:c9:59:7e:79:12:c2:3b:0b:52:c4:a8:
a3:e3:18:66:2a:d7:89:a9:7b:53:46:4f:a5:14:14:
c0:82:8f:36:23:8b:6c:a8:84:29:a3:0d:73:28:45:
72:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FF:B6:A0:64:F4:A2:51:99:B2:FF:08:52:C0:41:5E:4F:ED:10:F6
X509v3 Authority Key Identifier:
keyid:3D:09:0A:1B:CE:94:71:79:8E:E6:D0:79:EE:C0:72:6E:CA:9A:01:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D090A1BCE9471798EE6D079EEC0726ECA9A0187.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3231382e302f32342d3234203d3e203338313432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.57.218.0/24
Signature Algorithm: sha256WithRSAEncryption
45:ed:eb:ed:cb:c3:7f:ec:67:1d:3d:2c:3d:c9:5c:4e:44:c2:
b5:ad:c2:01:34:02:93:ba:35:4d:73:e3:02:08:e8:86:d8:1b:
55:f4:1d:44:81:c3:da:e7:fc:5f:22:20:69:92:48:1d:45:f1:
82:91:73:4f:b3:f7:c2:48:e7:10:4d:17:30:8f:cc:1a:4b:f8:
d4:b5:62:a9:e2:3c:10:f2:5d:94:64:86:4f:4c:be:77:55:7d:
c8:89:53:76:1a:32:bd:93:c6:12:f3:11:c7:7e:fb:c9:27:b6:
35:0e:7c:c8:ae:da:c5:9d:4b:85:fd:d4:29:49:da:4f:37:a7:
12:ff:63:dc:67:e7:5d:24:91:ed:6e:ef:30:34:a1:04:28:d2:
aa:36:1c:37:4f:e7:63:32:22:43:fe:50:47:f8:ca:8e:bc:7c:
a2:b2:7d:76:13:86:87:d6:d5:4a:df:dd:c6:fd:c0:1f:71:92:
d3:03:db:a6:58:e7:a5:db:0a:66:60:f2:20:71:0a:2d:05:b7:
d3:2c:9f:cf:2c:bd:fd:eb:1b:8c:0d:b7:b2:70:5c:e1:51:67:
7a:5c:ab:ac:49:a6:fa:f3:4c:12:de:98:47:c4:06:7e:fa:8e:
ea:ca:18:14:e0:0b:8c:9f:0a:f0:e7:be:18:b7:ff:bb:f3:cc:
17:20:48:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:03:26 2026 by rpki-client