
$ rpki-client -vvf rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139362e302f32342d3234203d3e203138313533.roa
File: 3230322e37322e3139362e302f32342d3234203d3e203138313533.roa (raw, json)
Hash identifier: 0VsRrjsdIFJeamY9VCTKavELmYTFS3ilP2PUztX74Uc=
Subject key identifier: C2:E0:DB:3D:1D:75:AE:25:35:97:64:84:2C:5E:BA:02:CC:E4:A9:DA
Certificate issuer: /CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
Certificate serial: 232DD09E7C6723BC3A3CF93FF7F7BEC766CDC95C
Authority key identifier: 2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139362e302f32342d3234203d3e203138313533.roa
Signing time: Sun 03 May 2026 02:40:35 +0000
ROA not before: Sun 03 May 2026 02:35:35 +0000
ROA not after: Sun 02 May 2027 02:40:35 +0000
asID: 18153
IP address blocks: 202.72.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl
rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:51:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:2d:d0:9e:7c:67:23:bc:3a:3c:f9:3f:f7:f7:be:c7:66:cd:c9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
Validity
Not Before: May 3 02:35:35 2026 GMT
Not After : May 2 02:40:35 2027 GMT
Subject: CN=C2E0DB3D1D75AE25359764842C5EBA02CCE4A9DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:82:04:3c:32:8a:18:44:03:46:61:42:78:52:
2a:89:84:3c:2a:df:e9:a0:fd:49:6a:e3:d8:40:1e:
9b:9a:a8:4a:91:24:c1:53:e6:ce:e2:93:07:6e:ab:
70:4e:43:1b:6e:fc:b9:71:e9:79:d5:f6:28:2f:1b:
cf:f4:c7:61:ff:a7:c5:14:6e:ff:2f:0e:4c:a9:27:
36:21:7e:49:b0:b2:12:0c:79:1d:a1:a9:d1:dd:90:
c9:76:94:93:ac:5d:82:cf:3e:5a:eb:17:b7:42:19:
d1:cc:56:28:47:90:4b:27:5e:ca:b8:91:71:83:22:
dc:66:e2:b8:3b:9b:50:c3:4e:28:5b:14:1a:0b:fc:
3c:e3:6b:21:b7:b4:da:26:94:c9:7e:e7:0b:9f:1a:
6c:3f:05:c1:b7:38:4b:a9:63:14:a2:54:6a:3d:9e:
9e:56:9a:9f:52:74:fe:b0:84:fe:2a:85:46:3c:55:
7c:c2:a9:7b:53:39:b5:7d:cc:d4:44:67:dd:a7:b2:
a1:6e:05:00:b7:72:43:ef:be:db:2a:3d:61:62:60:
78:29:a9:4b:51:cd:be:73:da:28:53:35:8a:e7:16:
46:f5:c7:d7:5c:6e:2d:ba:36:75:89:c7:12:8c:77:
e2:ba:6c:85:2d:0b:23:f8:97:99:49:b1:3f:1e:85:
7f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E0:DB:3D:1D:75:AE:25:35:97:64:84:2C:5E:BA:02:CC:E4:A9:DA
X509v3 Authority Key Identifier:
keyid:2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139362e302f32342d3234203d3e203138313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.72.196.0/24
Signature Algorithm: sha256WithRSAEncryption
85:10:4f:fe:b3:a2:c6:29:7b:79:79:2b:28:4d:73:92:fd:bc:
53:1a:c3:93:43:c2:69:a7:3a:fc:9f:80:39:b4:23:95:c7:f4:
70:1e:e0:f6:e0:8a:e3:a0:66:54:07:a8:0a:49:e0:25:01:fc:
8d:b5:d4:c0:f0:e4:27:81:00:a7:ab:ee:ad:25:c5:16:5c:3c:
6b:bf:09:6f:b7:43:4a:af:33:68:c5:1b:74:db:3d:8c:7a:4f:
aa:b2:6c:c9:93:41:3b:85:9d:59:a6:90:5b:4b:74:cb:e4:11:
69:ab:ae:f9:b3:15:6e:8f:df:be:cb:cd:df:44:d7:f0:e4:e2:
06:da:4b:70:2d:95:c8:22:ab:15:93:ee:d8:8b:3a:20:2c:e7:
d7:ea:4b:fd:90:b5:11:08:d7:a4:30:22:6a:e7:91:8a:28:62:
d6:2a:ee:47:57:55:5d:d7:8b:ba:7e:ce:a1:56:a9:d7:53:36:
cb:e4:a6:f4:6b:86:3b:b6:46:7c:d3:65:0e:99:52:28:69:6b:
b4:c0:14:ee:4f:30:56:dc:90:0a:68:69:8b:2d:d9:79:fc:a4:
b9:fb:24:88:71:e2:22:88:2a:b3:95:ad:28:39:bc:6e:20:02:
42:0e:ce:5b:43:42:57:67:e4:7d:d9:50:7f:8f:11:71:78:64:
9c:99:15:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:35:53 2026 by rpki-client