
$ rpki-client -vvf rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230312e302f32342d3234203d3e203138313533.roa
File: 3230322e37322e3230312e302f32342d3234203d3e203138313533.roa (raw, json)
Hash identifier: 5mZLoNgZhTm39U7OL1mXB6ctYVQTzYRY8BBmuLpMg4Y=
Subject key identifier: E7:F5:ED:D8:57:CC:6E:44:ED:1A:A2:FF:48:E2:62:61:CA:3D:F1:C2
Certificate issuer: /CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
Certificate serial: 176EAF9D2602C739197EB02EE1DB6AE7471B3338
Authority key identifier: 2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230312e302f32342d3234203d3e203138313533.roa
Signing time: Sun 03 May 2026 02:40:34 +0000
ROA not before: Sun 03 May 2026 02:35:34 +0000
ROA not after: Sun 02 May 2027 02:40:34 +0000
asID: 18153
IP address blocks: 202.72.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl
rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:51:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:6e:af:9d:26:02:c7:39:19:7e:b0:2e:e1:db:6a:e7:47:1b:33:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
Validity
Not Before: May 3 02:35:34 2026 GMT
Not After : May 2 02:40:34 2027 GMT
Subject: CN=E7F5EDD857CC6E44ED1AA2FF48E26261CA3DF1C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a9:58:3f:1f:a7:b1:f5:73:54:31:b8:64:13:
39:58:d9:6c:44:e9:e8:69:09:44:f0:25:15:ad:33:
45:af:4c:4f:7c:d4:91:15:cc:30:29:55:40:66:3b:
73:c1:18:c6:1f:2e:bb:ab:e3:51:cb:49:57:89:75:
e6:2f:2a:0a:aa:ec:9e:e0:fe:69:92:ad:06:82:da:
08:66:9d:9f:f7:ac:87:c4:32:39:30:82:75:ce:df:
a6:4d:70:6a:d8:4e:11:71:21:e5:81:53:bf:37:ca:
11:b5:1b:b7:eb:7f:93:31:1a:14:a2:62:0e:2f:83:
f4:1a:c6:01:94:9b:2f:68:64:71:df:84:b7:70:05:
4b:4f:6e:a2:8c:65:67:e7:57:9c:7c:8f:f0:b1:5d:
49:f3:fb:33:bc:bd:ba:b8:f0:b5:1e:60:a7:fb:ad:
31:cf:86:6f:23:34:d3:7b:58:a9:fd:57:72:61:44:
51:69:d6:81:d2:83:21:c9:15:5d:37:cc:01:d5:84:
bc:46:5a:9c:56:95:12:c7:36:72:8b:b8:36:92:82:
da:0c:bd:6e:82:43:8f:bc:43:cc:0b:3f:23:ce:6b:
16:7a:da:e3:67:9e:90:2e:ab:87:a7:9d:73:32:df:
a9:58:cb:dc:cc:a5:ee:50:c4:8c:27:82:40:5d:ba:
02:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F5:ED:D8:57:CC:6E:44:ED:1A:A2:FF:48:E2:62:61:CA:3D:F1:C2
X509v3 Authority Key Identifier:
keyid:2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230312e302f32342d3234203d3e203138313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.72.201.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:6d:da:de:42:32:5d:d0:a6:4b:49:0f:03:37:81:9b:c2:0a:
e9:dc:4c:43:24:e6:7a:6c:07:90:b7:d8:b3:17:79:94:7c:c8:
3f:bd:72:e7:44:ee:c5:0d:51:93:1d:62:1d:e1:93:30:bd:62:
33:02:6f:c6:18:58:43:1c:39:00:28:b9:dc:58:45:40:9b:56:
1c:6c:08:fc:85:97:b1:01:f9:12:db:41:3f:98:76:40:5c:54:
d4:b1:14:f1:30:b1:17:13:00:e8:56:e3:95:ad:19:3e:93:8f:
e4:73:ff:31:f6:e1:25:4d:a1:0b:93:2b:5e:ab:16:f6:d6:c4:
87:3a:58:d1:60:de:92:e2:8d:68:66:0b:b7:d9:fd:fc:92:7b:
25:a1:ac:33:af:ce:1c:01:49:ea:3c:5e:b0:0d:a6:95:55:c8:
bc:a6:9f:e6:a8:16:db:34:0c:bb:6b:19:c8:9c:60:c3:f1:d3:
7a:21:6a:d1:85:fc:93:f6:73:33:9e:80:42:9d:01:3c:96:75:
5c:12:3e:9c:99:7d:c7:8d:34:d8:39:fd:a6:7e:f2:b7:2d:e6:
1d:55:62:c0:48:12:ff:95:d3:28:db:27:06:02:ed:ef:15:01:
24:60:2f:ec:43:4f:b9:9d:37:77:e8:f8:3d:79:6e:01:0a:c1:
f5:46:6e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:23:57 2026 by rpki-client