
$ rpki-client -vvf rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230332e302f32342d3234203d3e203538353532.roa
File: 3230322e37322e3230332e302f32342d3234203d3e203538353532.roa (raw, json)
Hash identifier: iby8iV2U2RE+gf7SXobV11P3/zgUaZgIeET+QYf6T1o=
Subject key identifier: D6:C4:AB:62:14:6C:1E:AD:17:B2:59:80:8B:C7:61:5C:9B:C1:4E:54
Certificate issuer: /CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
Certificate serial: 1E38370914092D22B6FB2AAFD9AF21604D00CB51
Authority key identifier: 2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230332e302f32342d3234203d3e203538353532.roa
Signing time: Sun 03 May 2026 02:40:29 +0000
ROA not before: Sun 03 May 2026 02:35:29 +0000
ROA not after: Sun 02 May 2027 02:40:29 +0000
asID: 58552
IP address blocks: 202.72.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl
rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:51:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:38:37:09:14:09:2d:22:b6:fb:2a:af:d9:af:21:60:4d:00:cb:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
Validity
Not Before: May 3 02:35:29 2026 GMT
Not After : May 2 02:40:29 2027 GMT
Subject: CN=D6C4AB62146C1EAD17B259808BC7615C9BC14E54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:da:7a:b8:40:a8:71:c0:1a:1c:ea:00:b6:73:
19:8a:85:21:b2:47:3f:16:33:b9:5b:0d:16:01:f8:
55:84:e8:a9:68:a6:c1:65:a2:1b:20:bc:80:ed:3b:
e2:97:ab:55:85:7a:30:c5:fb:96:29:1b:66:04:23:
04:97:74:a7:03:22:af:a7:b1:cb:41:25:54:da:2a:
1f:8c:1b:00:ad:b3:4e:52:f0:5c:74:22:fc:1f:c7:
93:47:3d:84:01:20:cd:c1:2a:a8:cd:36:99:3d:b2:
e3:5e:ac:53:e9:4c:73:4d:22:fb:24:4c:0b:a0:98:
fb:ee:53:6e:ff:f8:55:cd:04:28:40:33:35:0e:d5:
2e:44:a3:df:d6:43:7f:a9:13:f1:a1:52:7c:b2:e6:
ec:58:c7:9a:eb:2b:0c:28:2f:87:d9:d0:84:70:24:
4d:3c:8b:23:f8:b0:98:ce:2a:d8:ee:15:47:71:19:
9c:86:49:07:d1:42:1e:28:4b:7c:c7:14:05:14:f0:
b2:da:cd:ac:ac:cd:b0:69:77:c7:6f:bc:84:36:c1:
aa:f7:d8:ac:4e:d0:e2:e4:24:b3:8f:7f:28:19:a1:
65:6c:87:d6:e0:62:d7:67:dc:75:3f:56:c1:b5:5b:
37:06:5d:75:86:f0:59:65:7d:86:0d:45:5b:61:15:
1c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C4:AB:62:14:6C:1E:AD:17:B2:59:80:8B:C7:61:5C:9B:C1:4E:54
X509v3 Authority Key Identifier:
keyid:2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230332e302f32342d3234203d3e203538353532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.72.203.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:93:d3:22:9e:fb:9f:01:7f:36:d0:f1:81:f7:6d:93:91:6c:
4e:b2:37:c8:53:88:fb:c0:42:26:11:65:d4:22:b5:c4:14:7b:
ad:e4:19:73:01:22:84:0d:e2:3e:6e:88:01:b1:54:c7:72:02:
59:df:fd:30:82:4d:5a:5c:c7:1d:82:26:7f:5d:90:15:3f:b8:
c7:41:f7:56:f1:58:d4:b6:6c:0e:21:ae:35:7b:ee:f0:68:96:
0a:c9:6c:36:06:fe:b8:cc:aa:d4:7f:7a:5a:77:86:bd:0a:fd:
c1:09:07:03:b9:68:b6:d3:b7:57:0a:76:a9:52:8f:af:04:44:
a4:63:4c:2c:58:b9:f1:71:7d:d8:a2:d2:50:0a:ca:20:bf:a6:
3e:db:69:d3:1e:67:1f:0c:fa:8e:88:64:c8:82:66:82:f4:aa:
10:01:72:b7:17:63:7e:64:06:ca:ec:b6:4c:24:74:be:cf:ae:
50:73:bb:a7:61:76:19:90:ee:73:aa:2a:84:2d:2a:b0:4d:0f:
a7:ba:76:e9:db:09:a2:64:03:ea:72:d8:21:0b:2f:b6:0c:78:
27:0b:96:69:3b:78:66:9d:63:70:fe:db:d0:03:26:25:bb:bf:
16:22:d9:ac:e7:0a:77:e7:95:5d:31:ce:d8:b1:ef:37:90:ee:
75:17:29:71
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUHjg3CRQJLSK2+yqv2a8hYE0Ay1EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU3QUIxMzM1QzRFMDdDNkQzNDYxMERBNUI5MjBDNDk2
RjZCNjFEMDAeFw0yNjA1MDMwMjM1MjlaFw0yNzA1MDIwMjQwMjlaMDMxMTAvBgNV
BAMTKEQ2QzRBQjYyMTQ2QzFFQUQxN0IyNTk4MDhCQzc2MTVDOUJDMTRFNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE2nq4QKhxwBoc6gC2cxmKhSGy
Rz8WM7lbDRYB+FWE6KlopsFlohsgvIDtO+KXq1WFejDF+5YpG2YEIwSXdKcDIq+n
sctBJVTaKh+MGwCts05S8Fx0Ivwfx5NHPYQBIM3BKqjNNpk9suNerFPpTHNNIvsk
TAugmPvuU27/+FXNBChAMzUO1S5Eo9/WQ3+pE/GhUnyy5uxYx5rrKwwoL4fZ0IRw
JE08iyP4sJjOKtjuFUdxGZyGSQfRQh4oS3zHFAUU8LLazayszbBpd8dvvIQ2war3
2KxO0OLkJLOPfygZoWVsh9bgYtdn3HU/VsG1WzcGXXWG8FllfYYNRVthFRwjAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU1sSrYhRsHq0XslmAi8dhXJvBTlQwHwYDVR0j
BBgwFoAULnqxM1xOB8bTRhDaW5IMSW9rYdAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjlhY2I0YTgtNzgwNC00NTI2LTg0ZDItODY5YjkxYTY3MTlkLzAvMkU3QUIxMzM1
QzRFMDdDNkQzNDYxMERBNUI5MjBDNDk2RjZCNjFEMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yRTdBQjEzMzVDNEUwN0M2RDM0NjEwREE1QjkyMEM0OTZGNkI2
MUQwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzY5YWNiNGE4LTc4MDQtNDUyNi04
NGQyLTg2OWI5MWE2NzE5ZC8wLzMyMzAzMjJlMzczMjJlMzIzMDMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODM1MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpIyzANBgkqhkiG
9w0BAQsFAAOCAQEAPZPTIp77nwF/NtDxgfdtk5FsTrI3yFOI+8BCJhFl1CK1xBR7
reQZcwEihA3iPm6IAbFUx3ICWd/9MIJNWlzHHYImf12QFT+4x0H3VvFY1LZsDiGu
NXvu8GiWCslsNgb+uMyq1H96WneGvQr9wQkHA7lottO3Vwp2qVKPrwREpGNMLFi5
8XF92KLSUArKIL+mPttp0x5nHwz6johkyIJmgvSqEAFytxdjfmQGyuy2TCR0vs+u
UHO7p2F2GZDuc6oqhC0qsE0Pp7p26dsJomQD6nLYIQsvtgx4JwuWaTt4Zp1jcP7b
0AMmJbu/FiLZrOcKd+eVXTHO2LHvN5DudRcpcQ==
-----END CERTIFICATE-----
Generated at Wed May 13 06:27:08 2026 by rpki-client