
$ rpki-client -vvf rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e302e302f32322d3234203d3e2039393035.roa
File: 3230322e3133372e302e302f32322d3234203d3e2039393035.roa (raw, json)
Hash identifier: sDTmD3GU6Ft8EEEqtjLcBYRRth1n9ZFmkA27qiDqHu0=
Subject key identifier: 7E:72:F8:DF:2B:E3:66:EB:81:03:41:D3:F2:0E:A3:61:68:8D:B7:3D
Certificate issuer: /CN=38A016716413D0128BA473D046A93A222EF258E1
Certificate serial: 3F4368A794E575FDA290F8E7482F51F944226143
Authority key identifier: 38:A0:16:71:64:13:D0:12:8B:A4:73:D0:46:A9:3A:22:2E:F2:58:E1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e302e302f32322d3234203d3e2039393035.roa
Signing time: Sun 03 May 2026 02:44:34 +0000
ROA not before: Sun 03 May 2026 02:39:34 +0000
ROA not after: Sun 02 May 2027 02:44:34 +0000
asID: 9905
IP address blocks: 202.137.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.crl
rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:43:68:a7:94:e5:75:fd:a2:90:f8:e7:48:2f:51:f9:44:22:61:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38A016716413D0128BA473D046A93A222EF258E1
Validity
Not Before: May 3 02:39:34 2026 GMT
Not After : May 2 02:44:34 2027 GMT
Subject: CN=7E72F8DF2BE366EB810341D3F20EA361688DB73D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7e:e2:42:eb:27:66:9d:98:ad:4b:7f:47:a5:
00:3e:0b:94:63:28:3d:68:df:eb:af:5b:6a:f8:75:
cf:63:84:5b:a6:8d:e8:82:32:7b:09:d4:a2:9b:8f:
6c:6c:8e:54:78:73:70:6f:19:0e:93:d1:cc:7b:3c:
59:c9:d0:a6:df:92:00:89:be:c9:06:ae:4c:12:02:
a4:9f:aa:03:d9:ae:83:0b:97:b3:1c:e6:b0:03:4b:
7e:77:21:2a:b5:2a:a1:d4:81:cb:05:6f:a5:28:89:
34:7b:6b:28:58:52:1c:28:41:86:e0:2d:40:86:c8:
89:ef:3b:a5:75:7c:ce:a8:3c:13:b9:57:85:ab:fd:
55:30:31:28:3d:b0:23:d9:4f:80:93:25:a5:0f:02:
3b:d7:8c:de:02:d5:6b:0f:a0:80:6e:82:44:80:09:
e9:58:01:19:1a:66:2e:ea:ee:ff:86:dc:16:b1:96:
38:c9:65:2f:e2:52:e0:8b:f6:c8:2a:6f:54:57:ad:
25:81:f0:4b:3f:8a:b1:8a:da:4a:17:b9:9a:ce:b8:
d0:80:15:24:28:eb:4d:3e:c0:fc:d2:33:af:65:fd:
68:53:d2:c6:e7:52:09:e6:19:bd:4f:94:bb:1e:db:
73:e4:31:d6:61:6c:67:e5:0e:06:d4:0e:5d:ae:07:
5b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:72:F8:DF:2B:E3:66:EB:81:03:41:D3:F2:0E:A3:61:68:8D:B7:3D
X509v3 Authority Key Identifier:
keyid:38:A0:16:71:64:13:D0:12:8B:A4:73:D0:46:A9:3A:22:2E:F2:58:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e302e302f32322d3234203d3e2039393035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.137.0.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:0d:31:38:4e:48:61:5d:73:c8:da:ed:9c:4e:7e:59:c7:82:
9e:bb:cc:0c:df:a0:47:57:f0:8a:de:54:de:32:e5:bf:17:16:
3f:fa:8f:a8:cd:9d:a7:b1:1e:b9:12:d7:13:d3:0b:03:d7:3c:
03:6d:83:9c:9a:9d:b6:ab:0b:67:49:99:ae:71:66:04:96:ad:
48:c3:78:f5:f5:b3:6d:f6:0c:d2:f6:89:7d:76:f9:00:62:03:
9a:af:6f:d9:d9:98:d8:47:a2:c3:9f:72:fc:95:9e:83:ad:74:
97:e9:4b:46:50:27:83:78:27:59:79:74:69:82:86:33:19:b6:
0e:af:52:38:79:7e:5b:17:ed:6b:a9:0b:22:4f:c6:a9:14:5a:
a8:49:4e:c6:4c:92:49:3c:fd:8d:a3:29:67:a9:27:b4:3e:18:
4c:03:41:c5:48:4d:74:bb:33:10:9f:dd:65:3e:55:4c:10:c5:
7b:24:35:62:ab:4a:79:a4:48:b5:d2:6f:e2:3c:f4:bb:0d:80:
e1:0c:39:10:7e:61:9c:3c:50:12:69:87:4c:eb:d3:91:bb:dd:
98:3e:25:39:fe:01:4e:04:f7:91:f6:79:e3:3c:23:fe:4d:2d:
07:ab:09:1c:3e:af:64:d3:3d:30:c5:57:b5:84:7a:6a:02:bf:
65:30:d4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:51:38 2026 by rpki-client