
$ rpki-client -vvf rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3230322e3135312e382e302f32322d3234203d3e2039373835.roa
File: 3230322e3135312e382e302f32322d3234203d3e2039373835.roa (raw, json)
Hash identifier: Pbg7HMIUocxPePd7OOnLCPLrq3CDhKhitltGyutZn2w=
Subject key identifier: A4:05:58:21:6F:84:77:E1:E5:90:88:1E:CD:93:98:F1:AA:69:E5:99
Certificate issuer: /CN=9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D
Certificate serial: 66BA99B61B6AA0D6C2A665A8EF9B5FD0744C7112
Authority key identifier: 9D:D7:FD:1C:0A:74:FE:31:7E:DA:41:E4:D1:CD:C8:57:AF:C1:77:9D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3230322e3135312e382e302f32322d3234203d3e2039373835.roa
Signing time: Sun 03 May 2026 02:40:21 +0000
ROA not before: Sun 03 May 2026 02:35:21 +0000
ROA not after: Sun 02 May 2027 02:40:21 +0000
asID: 9785
IP address blocks: 202.151.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.crl
rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:28:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:ba:99:b6:1b:6a:a0:d6:c2:a6:65:a8:ef:9b:5f:d0:74:4c:71:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D
Validity
Not Before: May 3 02:35:21 2026 GMT
Not After : May 2 02:40:21 2027 GMT
Subject: CN=A40558216F8477E1E590881ECD9398F1AA69E599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:46:35:f0:c0:5f:52:8c:43:b7:57:73:98:02:
fc:59:95:1b:ee:75:44:2d:7d:4a:35:50:fc:64:ad:
80:e3:58:b1:0b:ba:e4:7e:94:86:b3:0c:35:d6:4e:
7e:dc:67:ed:4b:01:76:ef:a4:49:06:b1:4f:4a:b5:
83:a4:4b:66:48:6e:dd:bf:49:61:4b:b0:34:6d:e4:
eb:01:ad:0d:6c:ae:03:b2:4b:ec:b9:d9:e5:ee:eb:
fc:2c:1e:ad:a2:66:b3:c1:a9:d8:3b:ef:9b:37:70:
db:dc:9c:6f:8c:52:2f:a2:75:19:e5:34:58:a4:ea:
e9:b4:23:3b:18:bf:6c:56:04:f6:aa:72:4f:e0:50:
17:b7:3b:9d:a0:82:d9:c0:2c:69:1b:11:9a:8e:42:
5a:7f:4a:2a:1d:59:a0:a1:b9:f2:c3:9c:a5:96:41:
a0:33:db:1c:cb:2a:43:e0:26:e5:01:1f:f9:b8:dc:
11:f8:b3:d0:1b:2d:45:e3:57:11:c9:5a:83:0a:66:
eb:a3:66:22:39:72:6b:85:c9:2f:28:21:ef:e4:8c:
1f:80:ca:3c:e2:e3:7e:93:77:56:00:5e:54:cf:3f:
df:ed:b9:b3:37:f8:d6:cc:fd:f1:0e:a8:14:57:cc:
c7:54:ee:af:bb:74:b3:2d:e1:e6:70:ea:d7:83:61:
8f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:05:58:21:6F:84:77:E1:E5:90:88:1E:CD:93:98:F1:AA:69:E5:99
X509v3 Authority Key Identifier:
keyid:9D:D7:FD:1C:0A:74:FE:31:7E:DA:41:E4:D1:CD:C8:57:AF:C1:77:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3230322e3135312e382e302f32322d3234203d3e2039373835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.151.8.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:52:2b:1a:51:71:32:e1:d5:a9:cb:87:00:b2:94:98:5e:63:
6e:87:a5:e1:02:a3:49:7d:f6:b1:0f:2c:2c:56:56:b8:d5:e2:
a6:68:6e:d4:43:45:4c:58:f6:4f:54:d7:cd:ef:1c:83:f0:34:
9b:21:42:4b:4a:2e:29:8d:bb:4e:df:b2:71:be:d9:55:25:53:
5d:65:1b:c3:72:66:4f:b6:26:26:e6:8f:d7:a3:6f:44:f9:2b:
02:8d:a5:50:06:73:d2:a0:6c:4d:a7:48:b9:4c:c2:59:b5:bb:
00:0b:f4:75:a5:42:ff:1c:70:c7:4d:e4:f1:5e:d2:7b:0a:c3:
d5:90:be:76:a2:3b:8c:5d:90:52:80:3b:32:cb:61:f8:61:6e:
7d:83:5e:cf:d3:2c:b4:3a:df:62:dc:b5:30:7f:a2:3e:f4:ee:
ed:61:62:38:06:ab:52:9a:50:25:c1:49:b8:2a:71:26:e9:92:
9c:85:87:27:c9:c0:9d:97:c9:a2:0c:01:a0:68:a6:2e:de:fc:
af:ad:e8:52:3b:77:63:cb:8f:6b:c6:50:0e:d1:4c:ce:07:24:
5c:ad:5d:90:72:f0:42:a1:be:2f:70:10:21:04:bf:0a:1a:72:
29:9a:4c:31:3f:4d:e8:85:33:62:48:65:dc:a8:14:e0:f5:dc:
33:04:9e:aa
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUZrqZthtqoNbCpmWo75tf0HRMcRIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUREN0ZEMUMwQTc0RkUzMTdFREE0MUU0RDFDREM4NTdB
RkMxNzc5RDAeFw0yNjA1MDMwMjM1MjFaFw0yNzA1MDIwMjQwMjFaMDMxMTAvBgNV
BAMTKEE0MDU1ODIxNkY4NDc3RTFFNTkwODgxRUNEOTM5OEYxQUE2OUU1OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnRjXwwF9SjEO3V3OYAvxZlRvu
dUQtfUo1UPxkrYDjWLELuuR+lIazDDXWTn7cZ+1LAXbvpEkGsU9KtYOkS2ZIbt2/
SWFLsDRt5OsBrQ1srgOyS+y52eXu6/wsHq2iZrPBqdg775s3cNvcnG+MUi+idRnl
NFik6um0IzsYv2xWBPaqck/gUBe3O52ggtnALGkbEZqOQlp/SiodWaChufLDnKWW
QaAz2xzLKkPgJuUBH/m43BH4s9AbLUXjVxHJWoMKZuujZiI5cmuFyS8oIe/kjB+A
yjzi436Td1YAXlTPP9/tubM3+NbM/fEOqBRXzMdU7q+7dLMt4eZw6teDYY81AgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUpAVYIW+Ed+HlkIgezZOY8app5ZkwHwYDVR0j
BBgwFoAUndf9HAp0/jF+2kHk0c3IV6/Bd50wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjkwYzkwMDktYWQ1My00ZmE2LWExODMtMzRiMzQ1N2JlYTAzLzAvOUREN0ZEMUMw
QTc0RkUzMTdFREE0MUU0RDFDREM4NTdBRkMxNzc5RC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85REQ3RkQxQzBBNzRGRTMxN0VEQTQxRTREMUNEQzg1N0FGQzE3
NzlELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjkwYzkwMDktYWQ1My00ZmE2LWEx
ODMtMzRiMzQ1N2JlYTAzLzAvMzIzMDMyMmUzMTM1MzEyZTM4MmUzMDJmMzIzMjJk
MzIzNDIwM2QzZTIwMzkzNzM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALKlwgwDQYJKoZIhvcNAQEL
BQADggEBAGxSKxpRcTLh1anLhwCylJheY26HpeECo0l99rEPLCxWVrjV4qZobtRD
RUxY9k9U183vHIPwNJshQktKLimNu07fsnG+2VUlU11lG8NyZk+2Jibmj9ejb0T5
KwKNpVAGc9KgbE2nSLlMwlm1uwAL9HWlQv8ccMdN5PFe0nsKw9WQvnaiO4xdkFKA
OzLLYfhhbn2DXs/TLLQ632LctTB/oj707u1hYjgGq1KaUCXBSbgqcSbpkpyFhyfJ
wJ2XyaIMAaBopi7e/K+t6FI7d2PLj2vGUA7RTM4HJFytXZBy8EKhvi9wECEEvwoa
cimaTDE/TeiFM2JIZdyoFOD13DMEnqo=
-----END CERTIFICATE-----
Generated at Wed May 13 07:15:07 2026 by rpki-client