
$ rpki-client -vvf rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/3230322e3133332e372e302f32342d3234203d3e203234323030.roa
File: 3230322e3133332e372e302f32342d3234203d3e203234323030.roa (raw, json)
Hash identifier: +gg97NXHVYnGyTZICqnb0be/ZegxXSjwLJ69frhtl8g=
Subject key identifier: EA:18:CA:B0:13:2C:5E:2B:13:AA:E8:E1:CA:60:2D:DC:33:36:08:3A
Certificate issuer: /CN=008FD9C34C50033457705A2A8FA8AD31C58901DF
Certificate serial: 6000B7D0B031D2B66DCC977EF586AC8970B36ABD
Authority key identifier: 00:8F:D9:C3:4C:50:03:34:57:70:5A:2A:8F:A8:AD:31:C5:89:01:DF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/008FD9C34C50033457705A2A8FA8AD31C58901DF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/3230322e3133332e372e302f32342d3234203d3e203234323030.roa
Signing time: Sun 03 May 2026 02:38:50 +0000
ROA not before: Sun 03 May 2026 02:33:50 +0000
ROA not after: Sun 02 May 2027 02:38:50 +0000
asID: 24200
IP address blocks: 202.133.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.crl
rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/008FD9C34C50033457705A2A8FA8AD31C58901DF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:00:b7:d0:b0:31:d2:b6:6d:cc:97:7e:f5:86:ac:89:70:b3:6a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=008FD9C34C50033457705A2A8FA8AD31C58901DF
Validity
Not Before: May 3 02:33:50 2026 GMT
Not After : May 2 02:38:50 2027 GMT
Subject: CN=EA18CAB0132C5E2B13AAE8E1CA602DDC3336083A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:85:bb:28:0f:bc:ab:2f:5b:4e:78:3a:b7:
a8:68:eb:2c:ee:b0:16:5f:9d:e4:eb:93:78:cb:7e:
95:1b:b2:a1:ac:af:9e:22:5f:75:50:69:99:33:f2:
a0:06:47:b1:cb:ae:17:4a:cc:db:cc:6e:58:83:c9:
7d:8c:cc:4b:db:e0:15:46:9e:f1:98:b1:e4:b8:64:
9e:fd:ea:9e:ce:6d:41:be:a8:b8:e9:34:a3:4c:99:
94:ec:27:1d:4f:3d:3b:79:07:e1:fc:12:69:c6:87:
06:21:19:55:6a:fb:54:cd:05:ed:7d:f6:7f:24:19:
c6:da:b0:fc:c6:fc:d8:28:aa:8b:00:3e:2e:8a:56:
70:33:14:7c:e0:2e:62:c2:75:fa:33:f5:71:e6:de:
12:61:83:df:62:c3:e0:77:23:c1:f9:f9:c6:00:89:
e8:7e:3e:f3:67:9f:23:a3:3e:97:53:44:4f:6b:e4:
35:f1:7a:a4:56:5a:6a:18:9f:45:b8:9b:55:d1:4d:
25:3b:86:6d:21:38:79:11:2f:48:b7:6d:8d:0d:a1:
b4:79:9b:47:93:b6:08:cd:0e:a9:43:c8:16:cc:db:
3b:5f:b2:49:9e:1d:1d:96:8a:f6:bf:0b:7a:54:bc:
3d:cd:cd:0c:f8:d9:e1:5d:18:80:9a:3e:e1:9c:12:
02:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:18:CA:B0:13:2C:5E:2B:13:AA:E8:E1:CA:60:2D:DC:33:36:08:3A
X509v3 Authority Key Identifier:
keyid:00:8F:D9:C3:4C:50:03:34:57:70:5A:2A:8F:A8:AD:31:C5:89:01:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/008FD9C34C50033457705A2A8FA8AD31C58901DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/008FD9C34C50033457705A2A8FA8AD31C58901DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/3230322e3133332e372e302f32342d3234203d3e203234323030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.133.7.0/24
Signature Algorithm: sha256WithRSAEncryption
69:23:89:d3:23:24:3d:af:66:97:08:b8:27:a4:c8:8f:fa:ae:
c0:6c:16:d8:8b:f9:1f:9d:8e:ca:d9:43:ea:3f:ea:47:95:4b:
67:2d:94:4c:e4:e0:1c:fa:c2:85:e0:21:8c:2c:4f:5a:92:c3:
ea:73:13:85:a5:d8:de:4e:ab:4a:97:e0:e6:38:0b:b5:c8:ae:
9e:97:da:25:24:17:c5:80:2e:b8:da:0f:3c:b0:d2:57:fb:aa:
40:d9:51:0c:54:31:c3:3a:ef:01:0e:18:73:58:74:a7:36:d8:
ea:da:a6:0b:4c:d8:a6:4b:8c:08:61:a3:b6:78:85:1a:39:f1:
53:36:3e:89:39:65:6b:6f:27:1c:d1:2c:5e:15:04:6b:f6:09:
49:7e:e5:52:81:1d:0b:2f:51:ff:73:3a:33:62:b7:4d:4a:19:
7c:4d:28:0a:8e:56:50:c9:fe:a4:f6:30:fb:70:4b:4e:85:76:
87:67:b3:1b:96:16:72:60:d5:4e:19:ab:8d:2e:07:23:28:32:
3e:5e:44:54:d3:69:d1:17:12:47:7d:95:f0:b6:f7:14:15:5f:
04:87:90:9d:b8:98:5a:e5:d6:97:04:56:a5:57:98:b9:51:d5:
33:67:26:62:d6:61:26:f4:1c:25:15:d4:08:8d:bf:4a:25:47:
d7:58:da:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:58:49 2026 by rpki-client