
$ rpki-client -vvf rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3230322e34332e3131342e302f32332d3234203d3e203435373036.roa
File: 3230322e34332e3131342e302f32332d3234203d3e203435373036.roa (raw, json)
Hash identifier: PwwIV0M1bktSo20UeNkcLhDf5y3VQGfSd2Gx4evwdcY=
Subject key identifier: 2C:BA:1B:1C:AD:83:41:87:DC:26:20:5E:DA:5F:02:41:4F:55:23:D4
Certificate issuer: /CN=E00C0AD01CBF6EE9B4254305E7B340D64C5974D0
Certificate serial: 162E5FCE10625E42EA2967D600754CF9E5301AFA
Authority key identifier: E0:0C:0A:D0:1C:BF:6E:E9:B4:25:43:05:E7:B3:40:D6:4C:59:74:D0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3230322e34332e3131342e302f32332d3234203d3e203435373036.roa
Signing time: Sun 03 May 2026 02:44:06 +0000
ROA not before: Sun 03 May 2026 02:39:06 +0000
ROA not after: Sun 02 May 2027 02:44:06 +0000
asID: 45706
IP address blocks: 202.43.114.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.crl
rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 06:22:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:2e:5f:ce:10:62:5e:42:ea:29:67:d6:00:75:4c:f9:e5:30:1a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E00C0AD01CBF6EE9B4254305E7B340D64C5974D0
Validity
Not Before: May 3 02:39:06 2026 GMT
Not After : May 2 02:44:06 2027 GMT
Subject: CN=2CBA1B1CAD834187DC26205EDA5F02414F5523D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:46:f7:c6:4a:0c:4a:c1:ba:0d:9c:55:4f:55:
03:46:72:dd:d7:5a:34:16:17:4f:4b:fe:61:f9:97:
10:14:e1:60:86:c0:b7:21:35:80:d2:91:a5:b6:86:
20:b8:a6:76:4a:94:df:b7:29:68:97:9c:0c:7a:bc:
2b:77:2a:39:85:14:a9:0f:1c:70:20:d6:10:98:9f:
97:ad:23:31:9f:ae:8a:ee:ed:87:c4:55:16:0a:46:
cf:69:37:18:e9:df:bc:74:81:05:b7:88:45:92:d8:
d7:cd:12:17:ea:0b:80:41:85:20:00:2b:21:9c:4e:
3b:90:1f:1f:9f:4d:e3:85:b7:5b:9e:bd:f6:53:1a:
86:85:45:c2:b7:fb:3c:41:1e:34:b4:40:68:7b:70:
d8:80:f8:fb:d4:14:dc:6c:2a:b9:47:ff:3f:a1:43:
cb:cc:8b:a8:84:db:52:26:6a:3a:62:4f:68:69:e6:
de:4e:9d:ff:58:b4:ca:de:35:76:0b:92:34:a1:5e:
54:85:3a:fd:07:83:0c:dd:05:6c:be:9b:80:66:5a:
c1:c9:9a:e2:c3:de:ca:1b:8d:e4:1f:a7:5d:04:23:
2b:d6:8f:b1:71:05:06:a2:d5:f8:59:bd:57:11:1a:
c2:a4:cc:d7:d4:28:71:8d:72:ff:e8:21:c5:9c:d2:
1a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BA:1B:1C:AD:83:41:87:DC:26:20:5E:DA:5F:02:41:4F:55:23:D4
X509v3 Authority Key Identifier:
keyid:E0:0C:0A:D0:1C:BF:6E:E9:B4:25:43:05:E7:B3:40:D6:4C:59:74:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3230322e34332e3131342e302f32332d3234203d3e203435373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.43.114.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:1f:f6:87:80:c0:d5:a2:ac:82:9d:80:56:bc:30:5d:e8:50:
5b:9f:8d:f5:85:93:07:44:30:c7:12:9b:39:8e:43:56:8a:36:
9e:da:a6:64:38:8d:c7:30:94:fa:ac:e1:54:57:2a:30:12:50:
38:59:86:be:9c:80:39:d2:b0:41:72:09:10:e0:c4:d7:58:20:
fe:9a:37:bd:bb:cc:a4:be:67:b0:85:15:51:d6:53:3e:a1:ca:
b6:0e:6c:ed:70:13:7a:81:bd:1f:9c:3e:9c:db:31:b4:5d:04:
6b:8f:46:4a:ac:6f:19:05:81:35:f8:ef:23:db:0c:5c:01:f8:
68:5e:9f:b4:d7:52:b3:a2:7c:b1:ef:38:a6:e9:14:d8:23:42:
81:43:91:c1:ce:b2:f9:59:04:9a:3a:96:09:8a:86:fb:99:8b:
db:9b:49:f8:43:7f:61:b3:65:1e:f6:03:53:3d:39:b8:db:67:
6e:c9:46:17:83:35:72:54:d0:fa:3e:77:72:7b:a1:61:62:df:
c6:7b:2f:10:08:58:8a:ad:61:5d:39:43:57:47:d5:57:10:a1:
a9:11:50:08:65:26:61:7b:b6:65:01:9a:d7:bd:c3:ac:cd:26:
cb:1c:b1:0c:bb:e8:25:48:9c:3e:32:f4:3e:e9:59:3b:73:9f:
58:8c:9f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:50:02 2026 by rpki-client