
$ rpki-client -vvf rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3230332e3230392e3139302e302f32342d3234203d3e203435323938.roa
File: 3230332e3230392e3139302e302f32342d3234203d3e203435323938.roa (raw, json)
Hash identifier: U1j1PVh1jjYl1ffk3i0kVbtGHOAWKo6Yh88QRntkuLM=
Subject key identifier: 95:C2:F5:CE:65:01:97:96:99:0E:6A:59:62:B1:C0:09:FF:74:53:59
Certificate issuer: /CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0
Certificate serial: 14EDE450ED88586E2997A5FA4D1A4DB9AD374182
Authority key identifier: 4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3230332e3230392e3139302e302f32342d3234203d3e203435323938.roa
Signing time: Sun 03 May 2026 02:39:50 +0000
ROA not before: Sun 03 May 2026 02:34:50 +0000
ROA not after: Sun 02 May 2027 02:39:50 +0000
asID: 45298
IP address blocks: 203.209.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl
rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:ed:e4:50:ed:88:58:6e:29:97:a5:fa:4d:1a:4d:b9:ad:37:41:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0
Validity
Not Before: May 3 02:34:50 2026 GMT
Not After : May 2 02:39:50 2027 GMT
Subject: CN=95C2F5CE65019796990E6A5962B1C009FF745359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a3:7b:91:0d:cf:03:78:bf:82:89:ff:ce:96:
8b:c0:f6:85:b1:d7:f7:91:54:1b:38:cd:1b:ab:92:
77:a5:71:ed:9d:69:42:11:1b:3e:96:a5:ac:e0:9a:
20:02:e6:e7:1c:a8:1b:06:30:88:96:68:07:f6:11:
0f:35:86:d6:65:e5:a8:ab:39:a2:15:60:5e:7f:75:
7a:44:0a:d4:75:c8:95:66:22:e4:3f:97:f8:b6:2a:
2e:f6:e3:a3:01:7a:1a:65:54:ad:80:fe:72:68:eb:
e0:40:ff:ff:c5:71:96:de:b1:09:13:ae:13:6f:1e:
dd:c1:96:a7:bb:9c:5e:5e:cf:08:2a:f4:8c:fa:2f:
2d:44:96:e2:3a:5e:ca:76:63:ba:a2:4a:71:6b:3a:
7f:d6:a7:22:2c:a4:9c:8e:af:4b:14:4c:9b:25:17:
88:c9:7d:57:80:3a:f8:26:a6:54:0b:d3:c8:8a:72:
66:44:e8:ef:70:08:19:ac:e7:07:3c:d7:68:23:9a:
ac:38:f8:89:9d:d2:4d:90:d5:90:fb:f6:35:e2:14:
cd:25:00:53:80:2b:d3:d8:29:e8:7b:55:31:e9:bf:
fa:9d:7c:0e:30:92:28:b0:2b:77:ae:1b:46:f0:a7:
cd:b4:3a:df:00:ac:5a:d8:7f:32:45:fe:fc:e3:89:
4f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C2:F5:CE:65:01:97:96:99:0E:6A:59:62:B1:C0:09:FF:74:53:59
X509v3 Authority Key Identifier:
keyid:4A:4E:AE:6D:F7:EB:F8:D5:B4:40:4D:BA:E4:87:48:CC:F2:70:F7:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4A4EAE6DF7EBF8D5B4404DBAE48748CCF270F7A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3230332e3230392e3139302e302f32342d3234203d3e203435323938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.209.190.0/24
Signature Algorithm: sha256WithRSAEncryption
97:22:47:ab:cf:68:a9:4e:11:b4:dd:57:41:52:cf:13:e6:d4:
35:99:f1:53:1b:fc:ab:ab:00:c5:ab:fb:07:64:c8:e5:fd:92:
4f:ad:e1:e2:e5:1f:00:03:2f:f5:ac:72:1f:71:dd:99:04:13:
63:f4:3e:14:80:f6:71:b2:61:26:95:95:a5:d0:b7:b3:f0:b5:
c6:48:bb:e9:35:7f:60:55:8e:40:8b:49:42:78:8e:16:da:6a:
38:5c:b3:cf:17:09:5d:24:a3:2b:cd:68:d1:bc:24:e0:5a:8c:
58:43:16:e4:f6:81:18:45:a6:de:73:5f:af:e7:29:a8:e6:3c:
ea:55:5d:6d:de:9a:e0:e2:e7:fa:8b:d7:3d:9a:dc:ce:0c:6d:
92:ee:0f:0b:9e:0c:c1:53:e7:06:eb:72:09:1c:c4:b2:89:38:
26:ea:3c:9a:13:fa:f3:67:e7:5b:ae:a5:ea:30:6e:4e:e0:8e:
1b:0d:b4:95:b3:d9:2d:c5:f8:da:69:bf:3e:1b:bb:c7:3d:1f:
87:75:c9:9f:e7:a6:3a:6d:d9:c2:7b:9b:7f:21:9c:95:f0:17:
92:0c:33:52:16:4e:3d:17:28:bc:c5:ff:f9:d1:de:c6:df:b3:
88:69:c8:eb:89:7a:e0:44:b6:0a:df:c8:a0:1b:cf:ca:5e:3f:
37:82:d4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:47:32 2026 by rpki-client