
$ rpki-client -vvf rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3230322e34332e3131342e302f32332d3234203d3e20313339393338.roa
File: 3230322e34332e3131342e302f32332d3234203d3e20313339393338.roa (raw, json)
Hash identifier: zkpoPaCvym1nePddds0Q6RkGOhVKM8mr34gyM4UC8cI=
Subject key identifier: B6:67:B0:5F:81:1A:8C:78:D8:93:C1:55:56:CE:9B:3E:D2:6B:4F:97
Certificate issuer: /CN=E00C0AD01CBF6EE9B4254305E7B340D64C5974D0
Certificate serial: 3053E792090FF1B9D1B28567D966FE8234FD4979
Authority key identifier: E0:0C:0A:D0:1C:BF:6E:E9:B4:25:43:05:E7:B3:40:D6:4C:59:74:D0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3230322e34332e3131342e302f32332d3234203d3e20313339393338.roa
Signing time: Sun 03 May 2026 02:44:05 +0000
ROA not before: Sun 03 May 2026 02:39:05 +0000
ROA not after: Sun 02 May 2027 02:44:05 +0000
asID: 139938
IP address blocks: 202.43.114.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.crl
rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 06:22:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:53:e7:92:09:0f:f1:b9:d1:b2:85:67:d9:66:fe:82:34:fd:49:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E00C0AD01CBF6EE9B4254305E7B340D64C5974D0
Validity
Not Before: May 3 02:39:05 2026 GMT
Not After : May 2 02:44:05 2027 GMT
Subject: CN=B667B05F811A8C78D893C15556CE9B3ED26B4F97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c3:06:c8:24:42:e6:35:9c:89:2f:3b:e3:93:
c0:a6:2b:04:4c:13:45:50:6e:04:a9:c8:ba:d3:73:
15:97:81:d1:ce:ca:12:78:d8:ab:c8:7e:95:d9:1b:
06:94:62:bb:03:14:6b:cd:35:dd:34:66:6b:99:d1:
86:cd:ea:f8:d4:6b:4f:f4:41:8a:2c:66:83:66:3d:
a7:58:86:69:d3:0d:c6:fa:02:e6:ea:51:b4:88:43:
94:79:2c:f9:82:87:40:c2:d6:b7:72:2c:47:e3:03:
60:49:e2:4f:f0:fb:f7:30:b9:d3:4c:08:55:32:88:
b8:c1:fa:0a:a1:f1:8c:3d:e0:92:e3:c7:52:16:fb:
4b:50:dc:12:4f:9e:22:bb:27:ad:63:4e:dd:bf:ce:
ce:32:d9:74:8d:f2:22:3e:9b:ff:ed:74:e8:21:f7:
57:a9:02:d6:00:7d:eb:9d:b0:9f:3b:96:b0:c7:00:
80:f4:2a:48:3e:4f:59:f5:50:48:b1:75:fc:a2:41:
71:5c:4f:ea:3d:14:27:d1:26:ac:51:6f:6c:4b:2a:
70:a3:a8:d4:c9:fd:9f:01:51:ea:66:12:09:08:44:
aa:d9:20:cf:83:66:00:13:ae:40:b6:e6:c5:53:ab:
c6:d4:9e:f2:a0:c0:9e:a4:a5:43:ba:22:fd:d5:53:
a7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:67:B0:5F:81:1A:8C:78:D8:93:C1:55:56:CE:9B:3E:D2:6B:4F:97
X509v3 Authority Key Identifier:
keyid:E0:0C:0A:D0:1C:BF:6E:E9:B4:25:43:05:E7:B3:40:D6:4C:59:74:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3230322e34332e3131342e302f32332d3234203d3e20313339393338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.43.114.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:60:93:4d:0d:57:66:26:cc:fc:22:c7:9f:82:f8:11:e4:c2:
69:94:61:c5:ea:0a:af:2c:f7:50:59:98:cb:d3:f3:dd:92:1c:
75:04:80:c0:58:18:ac:e4:28:cd:70:1d:a4:cf:62:2b:12:45:
ad:f3:3b:fd:1e:4d:e6:ad:fb:a6:62:2c:18:5f:f7:7c:b9:b7:
73:77:26:f9:8c:10:8a:43:aa:0b:00:77:dc:da:9e:5f:2d:7f:
7b:9f:02:b7:61:4f:f0:1a:4c:3b:5a:f1:5f:ea:ec:75:9a:4e:
5f:49:01:cf:27:34:b6:ac:f2:37:fa:63:90:c5:5e:04:b3:b4:
5e:88:af:88:91:eb:62:eb:09:57:44:e2:a6:ac:5a:55:da:ea:
c2:49:a3:91:8f:ec:d0:6c:9f:9c:ec:11:1a:d6:d4:92:eb:56:
00:13:41:35:8d:b0:26:44:24:91:9c:1b:66:2f:74:29:20:e2:
20:4d:e7:db:72:91:5e:dc:17:91:21:a1:a0:b1:7f:6f:1c:51:
1d:aa:ad:71:fc:87:3b:f7:cc:bf:4d:c3:3b:30:dc:38:aa:12:
53:9f:0f:b4:03:e2:14:60:9b:fe:0f:b2:ce:6c:f2:8f:db:61:
52:e9:ff:02:e6:d3:e7:be:4e:cb:0f:f4:c5:df:2e:4a:e4:85:
41:1f:f0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:47 2026 by rpki-client