
$ rpki-client -vvf rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e31322e302f32322d3234203d3e2039393035.roa
File: 3230322e3133372e31322e302f32322d3234203d3e2039393035.roa (raw, json)
Hash identifier: DsSxJ+60lvbsX4hG81MSfAY6DjOKwAPqkr7jR3rXmbA=
Subject key identifier: C9:9E:2D:F6:C0:A7:C0:2D:62:61:00:C8:A6:A5:5A:94:C2:CD:05:B8
Certificate issuer: /CN=38A016716413D0128BA473D046A93A222EF258E1
Certificate serial: 25D6033D00F0C6AB5B8651F2710DD92537E9C229
Authority key identifier: 38:A0:16:71:64:13:D0:12:8B:A4:73:D0:46:A9:3A:22:2E:F2:58:E1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e31322e302f32322d3234203d3e2039393035.roa
Signing time: Sun 03 May 2026 02:44:40 +0000
ROA not before: Sun 03 May 2026 02:39:40 +0000
ROA not after: Sun 02 May 2027 02:44:40 +0000
asID: 9905
IP address blocks: 202.137.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.crl
rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:d6:03:3d:00:f0:c6:ab:5b:86:51:f2:71:0d:d9:25:37:e9:c2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38A016716413D0128BA473D046A93A222EF258E1
Validity
Not Before: May 3 02:39:40 2026 GMT
Not After : May 2 02:44:40 2027 GMT
Subject: CN=C99E2DF6C0A7C02D626100C8A6A55A94C2CD05B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:35:01:c2:91:04:be:bc:55:fd:ec:a5:fc:ce:
61:cb:1a:a5:b3:3b:c4:1c:ef:29:f4:5b:36:85:ca:
c9:5c:0c:da:4f:f6:c2:8d:fe:db:6e:90:22:48:74:
27:6b:df:a3:f8:a3:c8:f3:64:6a:85:d5:80:90:fd:
02:25:d6:94:69:7c:da:6a:42:99:6c:02:2a:e1:06:
3b:52:dd:e1:57:01:f1:c8:83:15:69:ce:58:ea:c3:
f0:c2:8c:d0:a7:fc:af:9a:27:a0:0c:67:5d:81:d9:
22:a4:43:c7:f0:86:bc:6b:09:29:5e:be:98:00:5c:
4f:b5:35:30:55:30:ee:f5:80:44:c9:3b:6f:2c:8d:
ba:78:76:72:fc:0a:bf:bb:f6:24:20:e1:17:f4:a3:
67:a8:8c:c5:34:43:3b:b0:37:75:5f:6b:dd:37:ed:
36:d5:ae:31:e2:b1:5f:cd:0c:b4:3d:fa:25:45:3b:
de:0d:83:70:4f:68:76:4c:c7:e2:d2:ed:4e:de:00:
13:6b:e2:a9:36:3d:25:f4:8b:00:f3:2a:83:32:44:
4a:07:68:9f:d5:5e:a4:bf:5c:47:51:90:fb:e8:a6:
5b:0d:2a:85:46:15:fc:dd:33:09:c3:4d:b7:15:6d:
da:98:21:10:bf:b1:83:3e:fe:72:36:ea:c8:63:8e:
d8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9E:2D:F6:C0:A7:C0:2D:62:61:00:C8:A6:A5:5A:94:C2:CD:05:B8
X509v3 Authority Key Identifier:
keyid:38:A0:16:71:64:13:D0:12:8B:A4:73:D0:46:A9:3A:22:2E:F2:58:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e31322e302f32322d3234203d3e2039393035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.137.12.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:1e:32:77:5a:65:83:2d:db:c5:43:e3:45:7a:0b:0d:83:9d:
63:76:00:d4:68:e9:a2:b3:12:f4:9e:6b:00:bb:54:a7:2c:7e:
ba:32:e3:3a:80:19:41:c7:2f:0b:9f:5f:05:87:7c:0d:89:10:
00:0c:56:1b:e9:a9:f4:e8:d6:65:05:89:6f:9e:4c:6d:33:7d:
bb:f6:d0:a1:4f:ad:94:ba:ca:ec:0f:74:1a:55:90:5c:00:ac:
28:80:71:bd:f2:03:ea:7e:a7:3f:49:df:75:38:01:cb:8a:50:
2e:64:ab:3e:07:58:bb:9b:3a:21:fb:4f:e6:b2:ff:16:74:d1:
ea:61:a0:71:c5:fa:51:65:85:ff:1f:28:d9:a4:71:4e:2a:7f:
a1:4c:6d:5d:7a:73:d8:d1:08:1a:12:6f:e9:cc:12:19:d7:e7:
65:12:e8:86:ae:f2:8d:f2:68:6e:6c:50:de:ce:ce:5b:03:0c:
7f:e6:72:e7:34:f5:bc:d1:17:ff:77:12:99:36:d3:4a:95:bd:
89:b6:bb:2f:64:73:51:d3:a2:7c:cd:1b:9a:9d:0b:4f:66:68:
2a:a9:a5:ad:35:ac:e5:8d:be:fa:0a:48:99:95:c6:27:37:17:
f3:3a:cb:e7:6f:12:00:1c:db:ff:65:34:01:a2:a0:57:7d:39:
16:b1:09:af
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUJdYDPQDwxqtbhlHycQ3ZJTfpwikwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhBMDE2NzE2NDEzRDAxMjhCQTQ3M0QwNDZBOTNBMjIy
RUYyNThFMTAeFw0yNjA1MDMwMjM5NDBaFw0yNzA1MDIwMjQ0NDBaMDMxMTAvBgNV
BAMTKEM5OUUyREY2QzBBN0MwMkQ2MjYxMDBDOEE2QTU1QTk0QzJDRDA1QjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmNQHCkQS+vFX97KX8zmHLGqWz
O8Qc7yn0WzaFyslcDNpP9sKN/ttukCJIdCdr36P4o8jzZGqF1YCQ/QIl1pRpfNpq
QplsAirhBjtS3eFXAfHIgxVpzljqw/DCjNCn/K+aJ6AMZ12B2SKkQ8fwhrxrCSle
vpgAXE+1NTBVMO71gETJO28sjbp4dnL8Cr+79iQg4Rf0o2eojMU0QzuwN3Vfa903
7TbVrjHisV/NDLQ9+iVFO94Ng3BPaHZMx+LS7U7eABNr4qk2PSX0iwDzKoMyREoH
aJ/VXqS/XEdRkPvoplsNKoVGFfzdMwnDTbcVbdqYIRC/sYM+/nI26shjjthHAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUyZ4t9sCnwC1iYQDIpqValMLNBbgwHwYDVR0j
BBgwFoAUOKAWcWQT0BKLpHPQRqk6Ii7yWOEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzljMDVlZTMtN2ZjOC00NDA3LWIyYzAtY2I0MGJmY2ZiODY2LzAvMzhBMDE2NzE2
NDEzRDAxMjhCQTQ3M0QwNDZBOTNBMjIyRUYyNThFMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8zOEEwMTY3MTY0MTNEMDEyOEJBNDczRDA0NkE5M0EyMjJFRjI1
OEUxLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzc5YzA1ZWUzLTdmYzgtNDQwNy1i
MmMwLWNiNDBiZmNmYjg2Ni8wLzMyMzAzMjJlMzEzMzM3MmUzMTMyMmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzkzOTMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALKiQwwDQYJKoZIhvcN
AQELBQADggEBAHoeMndaZYMt28VD40V6Cw2DnWN2ANRo6aKzEvSeawC7VKcsfroy
4zqAGUHHLwufXwWHfA2JEAAMVhvpqfTo1mUFiW+eTG0zfbv20KFPrZS6yuwPdBpV
kFwArCiAcb3yA+p+pz9J33U4AcuKUC5kqz4HWLubOiH7T+ay/xZ00ephoHHF+lFl
hf8fKNmkcU4qf6FMbV16c9jRCBoSb+nMEhnX52US6Iau8o3yaG5sUN7OzlsDDH/m
cuc09bzRF/93Epk200qVvYm2uy9kc1HTonzNG5qdC09maCqppa01rOWNvvoKSJmV
xic3F/M6y+dvEgAc2/9lNAGioFd9ORaxCa8=
-----END CERTIFICATE-----
Generated at Wed May 13 03:16:07 2026 by rpki-client