
$ rpki-client -vvf rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3230322e34332e37332e302f32342d3234203d3e203435323938.roa
File: 3230322e34332e37332e302f32342d3234203d3e203435323938.roa (raw, json)
Hash identifier: tVfRZp6f+AWfshFsgerAOwxwSTX5duGY0+gwqpeM1Nw=
Subject key identifier: 4B:AB:4C:73:6B:D9:E8:78:5B:FD:56:98:81:F2:0D:25:4A:AE:EA:B3
Certificate issuer: /CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0
Certificate serial: 36032D18160A97484DA00B8C89E4BFEBFA83B247
Authority key identifier: 4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3230322e34332e37332e302f32342d3234203d3e203435323938.roa
Signing time: Sun 03 May 2026 02:39:53 +0000
ROA not before: Sun 03 May 2026 02:34:53 +0000
ROA not after: Sun 02 May 2027 02:39:53 +0000
asID: 45298
IP address blocks: 202.43.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl
rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:03:2d:18:16:0a:97:48:4d:a0:0b:8c:89:e4:bf:eb:fa:83:b2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0
Validity
Not Before: May 3 02:34:53 2026 GMT
Not After : May 2 02:39:53 2027 GMT
Subject: CN=4BAB4C736BD9E8785BFD569881F20D254AAEEAB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1a:0e:75:03:4c:9d:84:20:5b:df:f5:4c:c6:
e3:79:3d:fd:89:41:04:5b:83:ed:d1:91:89:9e:76:
30:86:42:b5:5b:58:7c:f3:25:78:4d:70:0b:16:75:
a9:6b:db:33:b6:3b:01:dc:6b:62:5a:ab:ee:3e:83:
6a:76:63:3c:c4:54:22:75:70:ba:a4:d8:f1:f1:b5:
ba:ae:25:0e:7c:a6:0b:4f:d7:ff:77:4e:e6:7f:df:
61:65:71:a2:ec:bd:65:64:bc:7d:a5:91:0d:9c:e3:
20:c3:6a:ef:08:3e:24:fd:c4:98:e2:07:89:0b:6c:
a6:43:99:7c:ed:36:f1:50:6c:b0:c9:c9:7c:86:2f:
fc:22:56:79:4f:d5:06:01:c5:58:9e:7d:4c:be:e7:
45:35:f3:e0:3c:67:9d:52:89:16:11:9a:9d:fc:f1:
84:ad:3f:71:9b:b4:da:b2:78:0e:15:37:e4:0d:ec:
ab:a4:df:fa:44:25:11:21:c0:8f:ff:82:bf:f6:e0:
2c:58:4f:4d:5e:65:39:98:85:34:aa:20:62:06:2f:
81:a6:11:0f:d5:55:d8:fd:d6:63:49:4f:39:59:f6:
a9:29:ee:08:5f:71:75:86:d5:64:6c:2f:cc:6d:25:
7b:d2:c5:6f:67:b1:60:c4:0e:20:e8:9c:14:00:3d:
8b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AB:4C:73:6B:D9:E8:78:5B:FD:56:98:81:F2:0D:25:4A:AE:EA:B3
X509v3 Authority Key Identifier:
keyid:4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3230322e34332e37332e302f32342d3234203d3e203435323938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.43.73.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:9f:9c:20:1b:43:6b:93:85:7e:52:48:5f:ca:25:5f:3b:60:
c2:53:8a:97:60:41:7c:2b:3a:85:18:9d:0c:21:b8:d5:1f:9f:
43:c4:55:47:02:ca:0a:29:3b:4f:b8:22:d7:f4:45:74:77:64:
05:bc:47:bb:26:dd:3d:85:23:37:34:6e:be:80:02:bd:2a:a5:
e1:f7:38:76:01:e2:39:93:8b:d8:25:bf:f6:0b:7f:56:48:1d:
ce:2e:e3:26:7e:ec:9d:e3:2e:07:9c:3c:64:65:ce:27:21:46:
61:d9:50:97:10:6b:b6:a0:b4:74:0a:20:6e:32:4d:e9:56:9a:
e9:ac:59:6c:5a:68:3d:36:be:4b:61:9c:56:a6:91:14:92:aa:
2b:ee:59:20:72:d1:33:0e:3a:55:91:ad:69:b2:49:84:44:98:
fe:26:f4:a2:de:30:75:ee:d3:05:3b:5b:ae:95:b8:c3:28:78:
c0:35:39:07:52:a2:b4:0b:7d:73:4e:94:4f:b1:78:fb:fe:99:
e2:36:36:5c:e7:53:39:59:ba:1d:c7:96:9d:83:27:68:1e:54:
20:01:cb:8e:82:a1:d4:de:ec:ea:98:1f:ae:75:50:bc:a6:3c:
14:3c:54:34:e5:50:aa:f9:ef:da:13:d3:74:66:1c:be:fe:40:
50:9d:6a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:24:46 2026 by rpki-client