
$ rpki-client -vvf rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230342e302f32342d3234203d3e203538353532.roa
File: 3230322e37322e3230342e302f32342d3234203d3e203538353532.roa (raw, json)
Hash identifier: 8elAsNukKO5kSDzzuWo1Aj5s9RVKBqJn0R9tAyalsQM=
Subject key identifier: 0C:4B:B3:66:57:9A:8A:BC:1C:36:C3:6A:D8:8B:F1:7A:A2:76:51:E6
Certificate issuer: /CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
Certificate serial: 036F9E1BAAB20CAB8DA342D33A2C96018A77E5C5
Authority key identifier: 2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230342e302f32342d3234203d3e203538353532.roa
Signing time: Sun 03 May 2026 02:40:30 +0000
ROA not before: Sun 03 May 2026 02:35:30 +0000
ROA not after: Sun 02 May 2027 02:40:30 +0000
asID: 58552
IP address blocks: 202.72.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl
rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:51:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:6f:9e:1b:aa:b2:0c:ab:8d:a3:42:d3:3a:2c:96:01:8a:77:e5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
Validity
Not Before: May 3 02:35:30 2026 GMT
Not After : May 2 02:40:30 2027 GMT
Subject: CN=0C4BB366579A8ABC1C36C36AD88BF17AA27651E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5e:58:94:3f:26:1c:d2:28:70:e7:18:66:aa:
e1:0a:55:8c:c7:1e:d8:d4:b6:45:82:31:53:71:66:
35:70:b5:f5:65:c5:85:af:85:43:fa:d5:33:60:4e:
c8:9f:dc:09:bc:33:ea:59:a8:bb:f4:1c:4a:9c:92:
e7:cb:e3:96:ab:b4:26:93:c4:39:50:3a:74:b0:a8:
a7:0d:61:2c:db:c8:b1:2a:ee:57:49:59:65:fa:69:
99:11:4d:ca:12:12:f4:5e:fa:17:31:ef:8b:30:2a:
57:ed:05:f1:dc:68:70:7e:0c:aa:a0:62:09:1a:90:
d5:fe:42:22:34:73:28:41:b5:20:cf:8d:fe:27:97:
7e:c3:cf:2a:07:f9:b8:6d:6d:95:5b:5a:a3:e3:86:
34:ac:88:d4:dd:5c:6d:0c:f4:21:6c:ea:66:5d:50:
46:57:3a:2b:96:34:e1:32:ad:9b:08:b9:90:1f:80:
84:ab:80:d6:c8:52:5f:cb:3f:0b:56:aa:e6:a5:d2:
8e:bd:c0:2c:71:37:ae:14:0b:2f:6a:bc:e6:7d:26:
53:a1:6e:8a:2c:ef:89:da:74:b3:bf:8c:62:36:87:
c0:3c:2d:79:c9:3b:54:dd:75:92:30:07:39:fa:c0:
c5:2b:f2:93:61:74:63:d1:93:6b:49:e6:1e:e3:af:
81:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4B:B3:66:57:9A:8A:BC:1C:36:C3:6A:D8:8B:F1:7A:A2:76:51:E6
X509v3 Authority Key Identifier:
keyid:2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230342e302f32342d3234203d3e203538353532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.72.204.0/24
Signature Algorithm: sha256WithRSAEncryption
07:4c:f0:71:25:01:ea:09:8f:31:5c:90:36:ac:5f:07:6b:62:
28:fc:bd:95:30:4c:13:ed:98:4e:2f:51:e5:e8:69:1e:db:43:
3d:e8:3e:04:8b:57:23:fa:05:87:5f:35:89:15:68:ba:8c:fc:
a8:65:6b:a7:e2:3b:56:cf:96:a6:48:e8:e4:59:e5:4a:3a:60:
b7:2e:99:f4:18:43:ba:b4:73:b7:2a:6e:75:08:2f:ce:aa:aa:
84:e5:03:ed:69:be:2f:3a:2c:93:8c:62:db:64:aa:b9:99:cc:
be:88:66:1a:03:fe:c3:55:62:f3:13:95:21:30:e5:24:3e:3a:
86:ae:48:cc:1b:9b:2f:f6:4c:5a:48:92:f7:be:e9:1f:b3:22:
a8:3f:86:db:79:02:7b:70:19:5e:58:bd:45:74:3e:e3:e6:f7:
83:92:7b:20:b2:ee:92:3b:84:3d:91:a7:66:8d:3c:cc:0e:90:
6c:a6:fa:a8:1e:59:a9:16:aa:e9:70:e6:17:5b:9d:0d:38:db:
ff:32:2c:4f:35:03:4f:ba:44:dc:e7:26:7e:34:9d:80:04:b7:
8b:91:7b:ea:6d:08:12:c2:ca:a0:27:5c:0f:87:53:16:eb:9a:
0a:20:f6:72:4a:4e:2a:d9:9c:9b:10:5d:b6:6f:f1:9a:31:21:
67:fa:a9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:19:17 2026 by rpki-client