
$ rpki-client -vvf rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/3230322e3133332e362e302f32342d3234203d3e203234323030.roa
File: 3230322e3133332e362e302f32342d3234203d3e203234323030.roa (raw, json)
Hash identifier: Xc9Z6aCULt4h5E7uCljF8rbSvL2mpzVI9I3SrwLMdKA=
Subject key identifier: 5B:39:60:44:FC:D9:A7:FC:8E:E6:72:01:B4:5C:F6:CF:70:DD:A3:4F
Certificate issuer: /CN=008FD9C34C50033457705A2A8FA8AD31C58901DF
Certificate serial: 0A0A7EB65E2D36702761FF9BCA4CCC6FD6888710
Authority key identifier: 00:8F:D9:C3:4C:50:03:34:57:70:5A:2A:8F:A8:AD:31:C5:89:01:DF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/008FD9C34C50033457705A2A8FA8AD31C58901DF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/3230322e3133332e362e302f32342d3234203d3e203234323030.roa
Signing time: Sun 03 May 2026 02:38:52 +0000
ROA not before: Sun 03 May 2026 02:33:52 +0000
ROA not after: Sun 02 May 2027 02:38:52 +0000
asID: 24200
IP address blocks: 202.133.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.crl
rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/008FD9C34C50033457705A2A8FA8AD31C58901DF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:0a:7e:b6:5e:2d:36:70:27:61:ff:9b:ca:4c:cc:6f:d6:88:87:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=008FD9C34C50033457705A2A8FA8AD31C58901DF
Validity
Not Before: May 3 02:33:52 2026 GMT
Not After : May 2 02:38:52 2027 GMT
Subject: CN=5B396044FCD9A7FC8EE67201B45CF6CF70DDA34F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:09:ce:c0:19:72:19:3f:dc:72:c2:3a:a6:b3:
4e:99:bd:28:79:b3:ca:21:e2:74:65:ec:e8:bc:f7:
81:7c:7d:b9:34:e0:2c:e5:c6:6f:33:8a:d0:34:f5:
05:ce:d4:9d:d3:05:3c:88:ec:e0:dd:22:78:d4:18:
59:1d:cd:1b:13:d0:03:64:9b:8f:28:19:74:8c:2c:
6d:2b:84:09:ba:9f:17:a2:c7:f4:4d:eb:8d:e9:0c:
6a:d3:dd:a9:7c:7c:92:74:21:1b:64:df:73:dd:cc:
46:d4:9b:56:d6:fb:b7:37:68:c1:d6:25:25:60:45:
eb:74:c3:a3:49:97:1e:9d:b7:6e:c4:52:31:db:f8:
03:db:49:31:6c:b0:3a:70:78:5f:be:55:c6:99:ed:
ee:73:5e:0c:29:ca:19:21:6a:8b:a1:36:bc:6f:75:
6a:d7:09:ec:51:dc:fa:26:38:1d:cb:d1:99:7e:9c:
93:88:d7:20:8e:50:16:3b:5a:1e:db:da:a6:87:16:
8a:45:aa:5e:dc:a5:89:12:cf:72:4a:7d:54:16:77:
e4:6b:8b:01:d2:9f:6d:d1:1f:d4:f7:3f:93:39:b7:
bf:df:80:0d:af:bf:eb:82:f5:0e:c3:ac:14:67:ed:
40:cf:4e:0b:69:23:13:bf:ac:60:cb:6c:d9:43:59:
9a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:39:60:44:FC:D9:A7:FC:8E:E6:72:01:B4:5C:F6:CF:70:DD:A3:4F
X509v3 Authority Key Identifier:
keyid:00:8F:D9:C3:4C:50:03:34:57:70:5A:2A:8F:A8:AD:31:C5:89:01:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/008FD9C34C50033457705A2A8FA8AD31C58901DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/3230322e3133332e362e302f32342d3234203d3e203234323030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.133.6.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:68:be:c0:f3:21:13:6b:b4:67:7d:d6:9d:b7:e4:e9:3d:ff:
e6:d6:56:1a:fa:52:1c:09:01:55:94:99:91:a6:ee:68:49:30:
52:0d:56:01:ab:51:c1:eb:a9:df:69:bb:a1:10:8d:27:11:56:
eb:d4:21:f1:63:3f:27:4d:3c:21:d6:c5:94:6c:26:6f:61:12:
e7:db:a2:b4:4b:2b:d8:19:1e:a4:ab:54:09:e5:90:2b:02:9c:
51:f3:ef:be:d6:ff:2c:0a:24:b7:7a:1a:99:98:a8:19:6c:23:
11:f7:f5:3f:c4:31:eb:c6:2f:9a:3c:9c:33:94:0b:64:0a:cc:
25:6e:1f:0f:42:2c:18:f0:37:31:cc:6f:1e:00:de:e0:38:70:
f7:2f:28:bc:6a:c4:3c:fc:96:a4:11:1c:27:a5:ac:48:9d:18:
20:69:10:b7:09:5b:e4:a3:fa:26:43:03:55:79:12:ea:c5:1d:
1b:58:ce:1b:f1:16:b3:89:63:57:b6:43:d9:e9:be:a6:4d:6e:
51:cb:fb:4d:af:30:1a:a8:0e:99:b4:0e:ad:bc:54:2a:a9:bf:
3b:9d:b5:09:7a:13:1a:62:a4:20:62:dd:fc:91:26:7a:47:a7:
66:31:5f:f8:19:c6:d5:bf:cd:2b:56:d1:0a:bd:9a:39:a2:b7:
5d:ec:94:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:22:47 2026 by rpki-client