
$ rpki-client -vvf rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e302e302f32322d3232203d3e2039393035.roa
File: 3230322e3133372e302e302f32322d3232203d3e2039393035.roa (raw, json)
Hash identifier: WaWYp+Csy1XmWlHWyydNjABqy7+/ynRv2N7rdeu9lvs=
Subject key identifier: 82:19:15:A5:6B:F7:27:CF:E5:D3:20:3D:DA:2E:41:71:06:FF:F4:A1
Certificate issuer: /CN=38A016716413D0128BA473D046A93A222EF258E1
Certificate serial: 2BEE1B604AB059B96C55C17CE100CBEF1CAA9D0B
Authority key identifier: 38:A0:16:71:64:13:D0:12:8B:A4:73:D0:46:A9:3A:22:2E:F2:58:E1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e302e302f32322d3232203d3e2039393035.roa
Signing time: Sun 03 May 2026 02:44:33 +0000
ROA not before: Sun 03 May 2026 02:39:33 +0000
ROA not after: Sun 02 May 2027 02:44:33 +0000
asID: 9905
IP address blocks: 202.137.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.crl
rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:ee:1b:60:4a:b0:59:b9:6c:55:c1:7c:e1:00:cb:ef:1c:aa:9d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38A016716413D0128BA473D046A93A222EF258E1
Validity
Not Before: May 3 02:39:33 2026 GMT
Not After : May 2 02:44:33 2027 GMT
Subject: CN=821915A56BF727CFE5D3203DDA2E417106FFF4A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:fc:4f:b8:73:19:1d:9a:9b:a9:44:ce:6b:fb:
b5:e8:60:72:24:97:07:85:58:bb:b6:f2:3d:61:26:
24:57:fe:80:1f:7b:8f:af:3a:2f:4d:e2:d9:b9:dc:
d4:f8:a0:fe:f1:c3:c3:32:b1:1d:c0:60:a5:7b:0a:
77:91:58:aa:e4:a7:5f:e9:47:d3:e7:98:bc:c7:44:
ff:17:f4:f3:ba:f8:b6:ce:80:5d:b6:63:43:d7:00:
01:f2:2c:85:88:47:bb:b4:0c:8e:bb:3c:a9:37:8f:
a6:df:e3:df:2a:39:8d:8b:d9:22:66:3e:e9:c4:bb:
f8:17:70:cf:87:10:ff:26:fc:04:da:8f:f2:2d:2a:
7d:8c:50:1a:02:de:0b:8c:25:44:02:0f:bb:8b:e0:
26:c6:1a:25:02:ee:61:d0:6c:b3:2d:a5:11:83:37:
eb:fe:f7:74:d1:76:cc:02:8c:e9:e3:90:20:03:b1:
34:33:f7:f1:3a:0e:4c:c3:eb:90:73:ba:73:c3:ab:
08:88:f3:30:ff:62:43:80:26:8f:68:c7:77:1d:ce:
a9:ef:e8:6c:9e:25:1a:d5:57:ce:44:6f:c1:f3:42:
1e:43:3b:f4:b3:c8:33:c4:0e:78:ec:19:29:84:88:
20:6d:53:83:0e:2f:e8:1a:8a:d1:7f:0e:bf:09:f4:
80:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:19:15:A5:6B:F7:27:CF:E5:D3:20:3D:DA:2E:41:71:06:FF:F4:A1
X509v3 Authority Key Identifier:
keyid:38:A0:16:71:64:13:D0:12:8B:A4:73:D0:46:A9:3A:22:2E:F2:58:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e302e302f32322d3232203d3e2039393035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.137.0.0/22
Signature Algorithm: sha256WithRSAEncryption
06:a0:46:3a:db:10:67:be:ec:bf:fd:af:e4:04:2d:10:29:08:
c5:7e:aa:71:5c:5d:bd:32:0e:0e:90:78:ac:90:9b:45:87:f7:
1f:6c:29:fb:e6:cb:8c:a6:e8:79:76:25:56:6d:29:2a:e6:8a:
be:b3:64:a7:c0:32:68:27:88:26:1e:c8:49:d4:1b:20:19:8c:
f2:90:74:9b:bb:67:3d:7b:5f:84:d8:5f:f1:9e:51:25:e0:39:
0e:b6:7d:52:cb:a7:72:96:6c:e8:93:73:4d:64:59:10:4c:e0:
b3:81:3e:39:ce:fe:a3:d4:30:3a:77:8d:2f:83:c9:12:dc:03:
b5:84:23:f4:d0:5c:10:35:a2:dd:83:44:18:ed:ab:07:e5:c8:
72:2f:4b:b2:a4:8b:ec:78:e7:51:8b:8e:81:8a:99:ef:02:0b:
9f:06:01:46:0e:c1:e5:8c:88:b5:25:9e:81:1a:dd:e4:a7:90:
3b:49:de:3f:8f:94:17:e0:9a:ad:70:a6:d3:e9:24:9b:cd:f5:
ea:b2:fa:d5:c3:8a:50:f2:76:92:da:e5:92:12:1a:38:6e:dc:
99:27:a1:6f:a9:3b:d9:d7:80:32:32:92:7d:14:2f:b8:59:55:
0d:1d:04:a6:0d:01:c9:7c:23:3f:05:85:3d:16:6b:23:83:1e:
c6:ba:45:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:51:48 2026 by rpki-client