
$ rpki-client -vvf rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139342e302f32342d3234203d3e203538353532.roa
File: 3230322e37322e3139342e302f32342d3234203d3e203538353532.roa (raw, json)
Hash identifier: x2waDxAivuzwEakd8DLbazFG/EZswmywlTtLdaU69e8=
Subject key identifier: 00:5C:9C:EA:20:36:C4:05:53:BB:7D:59:DC:4E:86:FA:1F:5D:CD:AC
Certificate issuer: /CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
Certificate serial: 3BB663D2468A2944A24EA0CA2BE3BE1FE571467E
Authority key identifier: 2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139342e302f32342d3234203d3e203538353532.roa
Signing time: Sun 03 May 2026 02:40:33 +0000
ROA not before: Sun 03 May 2026 02:35:33 +0000
ROA not after: Sun 02 May 2027 02:40:33 +0000
asID: 58552
IP address blocks: 202.72.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl
rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:51:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:b6:63:d2:46:8a:29:44:a2:4e:a0:ca:2b:e3:be:1f:e5:71:46:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
Validity
Not Before: May 3 02:35:33 2026 GMT
Not After : May 2 02:40:33 2027 GMT
Subject: CN=005C9CEA2036C40553BB7D59DC4E86FA1F5DCDAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fe:f5:dd:23:cc:8a:be:ed:9b:cf:75:55:3b:
e9:7f:c9:49:6b:3a:49:6f:96:b7:44:59:3a:37:5e:
5f:59:e0:9f:7e:f1:0f:eb:ec:34:2d:70:c9:2c:89:
d2:ce:45:c1:cc:3b:d8:e6:b0:21:20:25:16:c9:2a:
64:5f:e7:81:8e:37:c0:77:0e:14:f1:c9:29:d8:58:
55:76:e6:35:f9:ef:6d:c9:f3:ba:56:ca:2a:12:27:
ff:25:2a:d2:7f:5f:15:00:29:d6:9c:f5:e4:59:4c:
39:3c:d6:34:0a:50:e7:4a:c1:55:2d:11:2e:bc:89:
cf:a9:6e:f1:7c:f8:3a:2c:23:1b:37:0a:50:22:a5:
64:07:d9:5d:10:74:84:5c:29:d8:ec:90:77:af:f1:
07:9f:2a:84:8d:09:80:38:12:ca:32:a7:e3:71:1a:
8b:e1:07:5c:bf:be:87:36:83:8b:ac:cb:28:47:83:
c4:db:0d:4e:c7:b9:ec:98:f3:5b:88:87:35:49:f6:
7a:b1:59:1f:39:6d:47:04:73:e4:0f:f3:ce:f8:c8:
b3:50:e7:19:a2:bc:c6:eb:b0:25:d3:f2:40:0a:5e:
4d:87:12:de:5f:2a:39:86:23:1a:18:69:86:88:c4:
dc:c7:d6:9d:88:a2:96:37:99:39:13:24:16:a6:2e:
57:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5C:9C:EA:20:36:C4:05:53:BB:7D:59:DC:4E:86:FA:1F:5D:CD:AC
X509v3 Authority Key Identifier:
keyid:2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139342e302f32342d3234203d3e203538353532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.72.194.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:fd:f8:cf:05:17:23:b9:e5:03:00:91:2d:06:3a:84:fd:4e:
bc:fe:ca:6c:9d:3d:f0:01:01:9a:2a:a7:56:73:98:c7:62:0c:
85:85:6f:d3:3b:e3:af:77:be:78:fe:c8:cb:0b:ed:54:b4:5f:
39:96:fe:8f:f7:94:6c:cd:9f:2f:7b:c2:eb:30:3d:40:c0:58:
39:47:c1:c5:11:b6:44:80:4e:34:da:5e:c4:09:1d:1a:9b:89:
1b:bb:76:7f:c8:4e:95:f6:cf:ea:db:4a:28:f6:29:96:09:4a:
6a:3c:4a:7e:40:70:e2:d0:1a:77:09:d4:ee:43:7b:93:3b:71:
5a:54:2b:e8:a1:66:f3:68:5a:e4:4c:3f:7c:33:57:a2:75:fe:
12:e8:21:20:08:32:36:04:1a:ee:2f:27:aa:06:e0:98:6e:f4:
05:de:d3:73:ba:87:06:6e:b8:62:c8:04:5a:1c:22:89:77:ce:
d2:47:85:d0:47:17:51:df:d8:8c:53:61:76:51:dd:c1:93:4e:
47:7c:b4:9d:90:54:d8:d5:2c:21:b4:c0:8e:dd:fc:5c:92:55:
76:22:4e:7c:b5:d4:ab:fe:40:b0:64:5b:b0:3b:d0:86:5a:9b:
e3:a5:94:0d:fe:a5:d1:d8:d6:ae:3c:b3:d0:a3:31:2f:ff:70:
88:35:8f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:12:45 2026 by rpki-client