
$ rpki-client -vvf rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3230322e3137392e3138382e302f32342d3234203d3e203338373530.roa
File: 3230322e3137392e3138382e302f32342d3234203d3e203338373530.roa (raw, json)
Hash identifier: UKS72Ik2t69VNkZx10eznMiDop94XfhDTWq/cxqZMcs=
Subject key identifier: 20:28:D3:1C:D7:CB:0A:5C:D3:80:C7:40:CD:D6:43:EC:A0:C5:98:4C
Certificate issuer: /CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8
Certificate serial: 627EFD2F568F2FFBCC0E299E5FEF882145611323
Authority key identifier: 99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3230322e3137392e3138382e302f32342d3234203d3e203338373530.roa
Signing time: Sun 03 May 2026 02:42:36 +0000
ROA not before: Sun 03 May 2026 02:37:36 +0000
ROA not after: Sun 02 May 2027 02:42:36 +0000
asID: 38750
IP address blocks: 202.179.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl
rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:56:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:7e:fd:2f:56:8f:2f:fb:cc:0e:29:9e:5f:ef:88:21:45:61:13:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99F0E6DE02C602D1E485455474F4B21207D2D7F8
Validity
Not Before: May 3 02:37:36 2026 GMT
Not After : May 2 02:42:36 2027 GMT
Subject: CN=2028D31CD7CB0A5CD380C740CDD643ECA0C5984C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:94:82:9c:cc:c5:3f:79:d4:b2:27:da:cc:44:
3a:34:ab:c0:8a:2e:62:4d:c1:24:12:c7:e4:1e:5d:
d7:02:6c:18:e2:9a:4e:f3:f2:73:3d:bc:4a:2d:4d:
8f:56:62:17:08:13:62:8d:97:f0:a3:7b:63:ab:0b:
03:d1:be:89:d8:c2:1f:7e:14:b5:58:ef:a5:49:12:
74:5d:ad:ab:8e:64:a8:13:1f:33:b7:30:32:23:54:
6f:d4:ff:22:a7:4e:4f:d3:bd:21:45:f4:9c:5d:15:
fc:e9:02:b7:e0:7c:01:c6:59:b5:3e:f1:e4:83:78:
ce:65:c9:e4:7a:d9:fe:04:cd:f4:87:4d:90:a3:d0:
9c:42:ed:d4:0f:38:01:fd:63:a5:56:2a:2f:7e:d7:
45:29:7e:08:b9:cd:7c:0f:3c:54:0b:c5:6b:ba:13:
19:31:39:ce:04:c7:fb:cc:21:ce:c4:dd:40:fb:c6:
7b:2c:21:79:b4:04:89:7c:ff:60:7a:0d:62:12:3d:
93:b4:10:26:96:e2:ad:b0:0d:98:99:ba:5c:6f:68:
ff:99:e0:95:1e:b9:46:1b:e0:fb:9b:f7:84:40:ed:
35:c9:e2:3f:ad:25:82:61:ca:8d:b7:e4:8d:d7:97:
fa:2e:21:0c:ef:76:31:53:c6:9d:3a:3b:ea:63:5a:
7d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:28:D3:1C:D7:CB:0A:5C:D3:80:C7:40:CD:D6:43:EC:A0:C5:98:4C
X509v3 Authority Key Identifier:
keyid:99:F0:E6:DE:02:C6:02:D1:E4:85:45:54:74:F4:B2:12:07:D2:D7:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/99F0E6DE02C602D1E485455474F4B21207D2D7F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/99F0E6DE02C602D1E485455474F4B21207D2D7F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3230322e3137392e3138382e302f32342d3234203d3e203338373530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.179.188.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:d6:df:9e:10:eb:52:5a:9c:31:dc:c3:16:a0:f7:82:70:b0:
5f:31:a0:06:52:a1:c5:3b:56:44:e8:d5:c3:e0:d5:c9:78:15:
aa:2c:fc:64:d2:86:44:64:81:8e:d0:b0:c0:c6:02:9d:82:32:
09:38:76:f7:79:43:2d:ef:a9:0b:75:af:d6:ee:6c:80:d5:d3:
ba:35:16:22:2a:f9:54:46:1b:02:31:d5:97:85:5d:90:2e:ec:
24:9d:73:31:97:0c:82:76:86:00:95:32:3a:bd:2f:2a:6e:d4:
ea:fb:2f:76:83:5c:45:95:e0:5d:ae:5f:d0:34:02:87:2f:7c:
44:9f:43:db:31:12:38:97:03:39:d4:38:ca:e3:18:80:88:f3:
90:99:c5:5d:68:f8:13:89:17:51:6c:d1:9e:89:42:e4:53:ff:
bc:29:16:c6:40:f1:78:6c:95:f4:c7:00:b7:a2:37:81:70:e7:
6c:b0:80:1b:31:8a:24:17:d5:a2:9c:69:db:05:f2:62:39:d5:
c6:81:ec:c0:86:75:32:e6:ea:b4:98:45:1d:fe:39:7b:4d:0e:
44:49:60:99:b2:c3:12:c7:59:ef:89:ce:7c:35:02:6e:fd:17:
6c:67:cc:f0:e7:9a:4b:a7:e1:cb:ff:69:2e:54:15:bb:cb:64:
6d:a8:9d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:11:02 2026 by rpki-client