
$ rpki-client -vvf rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230372e302f32342d3234203d3e203538333839.roa
File: 3230322e37322e3230372e302f32342d3234203d3e203538333839.roa (raw, json)
Hash identifier: WHBbJGZmdQKaYyhDTGiF9nJvtfUgtNB8fOyt7IgLmpo=
Subject key identifier: 9A:3E:A8:CC:D4:02:CF:72:63:C1:23:E6:5D:5B:7F:F6:44:BB:1A:04
Certificate issuer: /CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
Certificate serial: 30DD9B12D3010047EE7E6519639C9BB32C4C4030
Authority key identifier: 2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230372e302f32342d3234203d3e203538333839.roa
Signing time: Sun 03 May 2026 02:40:34 +0000
ROA not before: Sun 03 May 2026 02:35:34 +0000
ROA not after: Sun 02 May 2027 02:40:34 +0000
asID: 58389
IP address blocks: 202.72.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl
rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:51:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:dd:9b:12:d3:01:00:47:ee:7e:65:19:63:9c:9b:b3:2c:4c:40:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
Validity
Not Before: May 3 02:35:34 2026 GMT
Not After : May 2 02:40:34 2027 GMT
Subject: CN=9A3EA8CCD402CF7263C123E65D5B7FF644BB1A04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a6:4f:f7:12:5a:b5:56:15:96:07:e8:8f:10:
7d:ff:87:c5:47:7f:e4:cd:91:47:72:8a:00:d4:00:
29:b2:a1:f4:b8:ac:c0:07:86:f7:e8:05:26:de:eb:
47:db:ad:0c:cf:0d:df:6f:1a:6e:a8:19:59:b0:c9:
4d:18:c1:e6:4c:79:13:49:04:d8:15:78:27:0b:e9:
7c:26:a4:29:9c:ea:5b:74:b2:90:3a:40:0d:6a:e7:
64:ca:91:b1:0e:03:50:b7:07:4e:6e:1d:d6:d7:97:
2d:01:07:e7:78:9d:77:8c:7d:de:ab:c5:7d:29:e3:
02:c0:d6:78:6b:52:27:5d:cc:99:a0:1c:8e:bb:39:
a1:0d:89:4d:ad:d8:a5:d0:5d:98:50:63:5f:31:bb:
fd:24:81:be:82:ff:80:d1:41:16:00:b7:c3:57:5f:
86:6b:39:17:3f:51:b6:2a:7e:a8:ae:fe:c3:1d:e5:
69:ba:28:69:7c:89:69:db:ff:a3:ae:53:07:9f:a1:
00:1b:05:ae:b3:05:a6:c1:dd:1f:b1:f5:88:17:44:
66:92:60:86:b7:6b:56:2c:ee:6a:ae:87:27:d6:6b:
2a:75:71:da:fb:3a:c6:f2:59:1d:be:56:c6:9a:3a:
e0:2d:21:1f:6a:16:42:c2:b3:57:e2:6d:43:35:d1:
a8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3E:A8:CC:D4:02:CF:72:63:C1:23:E6:5D:5B:7F:F6:44:BB:1A:04
X509v3 Authority Key Identifier:
keyid:2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230372e302f32342d3234203d3e203538333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.72.207.0/24
Signature Algorithm: sha256WithRSAEncryption
81:22:bd:dc:d3:87:46:ff:55:56:57:50:89:16:48:d0:c1:ee:
56:9e:41:3b:68:46:4c:2a:30:21:26:a8:53:61:bb:00:7f:6a:
b8:66:90:59:b9:35:13:ce:ac:ac:eb:c6:b6:99:81:cd:a9:58:
ce:dd:04:3c:e4:a0:e6:fe:8b:43:16:6a:bb:0f:be:ef:5f:18:
93:01:71:31:68:9e:07:be:b4:0b:36:a5:2a:b9:f2:a6:ce:df:
90:33:e4:9c:0d:bc:84:14:0d:ec:68:01:ff:c7:de:5c:2c:d3:
a4:62:81:a5:e1:1b:5a:ee:8e:0b:68:c9:6f:a0:4b:59:c6:1f:
ea:bc:05:fd:83:90:4f:35:fd:96:a9:18:c9:57:e5:d6:9d:45:
f0:20:3c:db:ea:f4:77:0b:e4:cb:22:cc:7f:dd:d9:bc:42:5f:
08:c0:ff:5e:1b:de:70:f3:f8:da:ce:34:05:56:94:81:34:77:
34:b6:ad:60:24:ba:cb:8f:a3:da:7f:1f:52:7e:5b:34:a8:d5:
1a:1c:15:41:52:4d:c6:47:df:44:93:09:f1:9c:65:c2:40:0b:
b3:72:24:67:95:03:8d:7a:4b:b2:ad:3e:39:8b:e4:6e:d5:7d:
03:a7:53:0a:8a:fe:05:5e:ee:40:0c:4d:24:71:f6:95:3e:e5:
0e:87:4c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:45:15 2026 by rpki-client