
$ rpki-client -vvf rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139352e302f32342d3234203d3e203138313533.roa
File: 3230322e37322e3139352e302f32342d3234203d3e203138313533.roa (raw, json)
Hash identifier: SCHe3hYSRhgevYCfCBUBkvtKm+wlGx7OZOfJDoM+cQk=
Subject key identifier: 1F:DC:92:00:1A:48:B7:DD:5C:3A:74:F2:0F:18:B8:63:38:F5:D8:57
Certificate issuer: /CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
Certificate serial: 2B8B32EDB4A6C9C58C811E3C1DD06269D1031A28
Authority key identifier: 2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139352e302f32342d3234203d3e203138313533.roa
Signing time: Sun 03 May 2026 02:40:29 +0000
ROA not before: Sun 03 May 2026 02:35:29 +0000
ROA not after: Sun 02 May 2027 02:40:29 +0000
asID: 18153
IP address blocks: 202.72.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl
rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:51:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:8b:32:ed:b4:a6:c9:c5:8c:81:1e:3c:1d:d0:62:69:d1:03:1a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
Validity
Not Before: May 3 02:35:29 2026 GMT
Not After : May 2 02:40:29 2027 GMT
Subject: CN=1FDC92001A48B7DD5C3A74F20F18B86338F5D857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b8:a0:50:ff:d8:48:c7:8a:80:79:06:33:4c:
88:d8:67:14:9c:e9:4d:59:c5:22:19:02:76:a3:46:
bb:47:1c:88:76:fd:4b:96:a4:0f:33:bb:fa:45:bc:
e6:47:f4:b4:6f:fb:86:4a:45:bb:cd:2a:26:da:d3:
78:cf:1d:e3:5f:74:b4:9d:97:02:3d:94:27:56:fe:
df:89:3d:06:f6:22:56:71:bb:3c:92:bb:7b:6d:62:
eb:85:09:af:0d:93:33:49:88:d0:2b:d1:70:f8:f5:
a7:6b:42:a2:e6:ee:7b:8f:fb:3d:35:7a:3f:a4:11:
cf:b2:49:69:25:27:96:a6:b8:eb:63:47:7b:7a:16:
75:fa:a0:33:e1:cc:97:c9:a5:6e:ee:e2:5f:3a:36:
bb:7f:d7:e9:49:d3:77:4f:71:2c:a3:81:a3:c0:18:
69:20:1c:d3:41:e7:ef:10:8f:3f:f8:50:e6:ca:14:
96:df:9f:7e:ce:00:10:1e:00:ca:99:4c:7f:f9:02:
21:39:18:85:1a:59:ce:9a:fe:86:7f:45:9f:e1:15:
b7:36:db:62:d4:90:7f:64:da:1d:8e:7c:a8:77:12:
4a:cf:02:cc:8a:e1:71:f9:41:00:92:76:f7:24:bc:
c3:3d:73:1b:f0:52:19:fb:54:44:4b:23:6b:99:90:
ca:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DC:92:00:1A:48:B7:DD:5C:3A:74:F2:0F:18:B8:63:38:F5:D8:57
X509v3 Authority Key Identifier:
keyid:2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139352e302f32342d3234203d3e203138313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.72.195.0/24
Signature Algorithm: sha256WithRSAEncryption
14:37:28:2c:04:43:c2:8f:a3:d1:35:ff:55:98:91:56:38:b1:
1f:3e:52:d0:e6:2f:b2:3b:ce:e8:1a:0f:e2:55:91:d3:d4:23:
e2:f6:e9:61:f8:bf:98:22:3d:54:bf:e0:e1:fb:c7:04:3c:8f:
f9:97:5e:f1:46:d8:d3:61:69:55:38:bf:90:26:ad:c1:6c:a6:
b3:5b:f6:cf:e6:3e:1e:4c:4d:96:3a:ef:3a:66:34:6d:70:fe:
df:6e:5f:1a:93:99:a3:20:e5:40:27:7b:f3:ec:93:02:93:50:
65:2c:62:cc:69:3a:a6:bd:8e:05:3e:fc:49:1e:64:df:bc:f7:
91:c2:1e:31:f8:a0:49:94:95:17:b7:dd:44:a9:ed:f6:d6:0c:
9e:96:f7:ef:37:58:2d:54:3e:90:b1:db:9b:7d:f6:4a:7c:b3:
80:4c:0d:d6:7b:c0:f5:d8:2d:f9:7d:e5:9a:a0:cd:ec:cc:4d:
a5:be:81:65:14:73:c9:a2:93:a1:e9:6a:86:18:73:33:d7:c7:
c7:05:3d:6d:71:86:1a:97:0d:2b:32:82:ad:18:60:85:5f:f2:
84:02:58:f2:f2:79:3b:60:b7:b1:6b:5b:1d:7e:0b:86:56:70:
2c:97:3c:66:40:03:a5:ec:2e:b1:8f:e6:14:ba:a1:bb:85:12:
dd:b5:14:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:43:08 2026 by rpki-client