
$ rpki-client -vvf rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e31362e302f32322d3234203d3e2039393035.roa
File: 3230322e3133372e31362e302f32322d3234203d3e2039393035.roa (raw, json)
Hash identifier: dSBZailoQQTSiyKxA2l6AI3PspujPG35rpgdMX5KHK0=
Subject key identifier: C4:F9:CD:DF:20:FE:73:B4:7F:97:6F:2C:B2:96:C2:C4:01:C0:44:04
Certificate issuer: /CN=38A016716413D0128BA473D046A93A222EF258E1
Certificate serial: 752B00EA8E15CDC38A8C3B9C9C1DB151993A0944
Authority key identifier: 38:A0:16:71:64:13:D0:12:8B:A4:73:D0:46:A9:3A:22:2E:F2:58:E1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e31362e302f32322d3234203d3e2039393035.roa
Signing time: Sun 03 May 2026 02:44:40 +0000
ROA not before: Sun 03 May 2026 02:39:40 +0000
ROA not after: Sun 02 May 2027 02:44:40 +0000
asID: 9905
IP address blocks: 202.137.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.crl
rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:2b:00:ea:8e:15:cd:c3:8a:8c:3b:9c:9c:1d:b1:51:99:3a:09:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38A016716413D0128BA473D046A93A222EF258E1
Validity
Not Before: May 3 02:39:40 2026 GMT
Not After : May 2 02:44:40 2027 GMT
Subject: CN=C4F9CDDF20FE73B47F976F2CB296C2C401C04404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:77:cb:b6:e2:ee:df:60:92:fb:ed:be:11:52:
aa:45:16:3e:0c:b5:b7:fa:1c:8d:bd:e8:91:28:78:
4b:c2:84:c3:f2:bf:77:d3:7b:5d:61:ce:ff:b8:11:
18:a4:86:60:f2:66:f8:3c:5f:5b:71:7e:ae:18:6e:
3d:f2:9d:15:d5:d8:d6:4c:b2:b9:1f:7b:9e:91:5e:
eb:11:d2:c5:77:d7:de:df:b7:b8:d8:a1:10:16:20:
66:be:84:fb:06:e3:71:5b:0f:43:21:49:61:2e:cf:
94:da:ec:3b:ed:7d:38:6f:8e:81:5e:7e:7e:91:7f:
c5:fd:5b:1c:04:2e:d3:1b:cb:f5:b8:51:bf:73:c8:
15:dc:6c:91:e7:83:31:59:9f:aa:33:ea:e4:cf:0c:
82:d1:bd:9a:fc:28:2a:d7:49:8d:58:7c:af:e9:79:
c2:4d:e4:aa:fc:64:ce:7f:ba:cf:df:49:90:1d:ab:
b4:39:1b:37:77:4d:b0:b0:18:7a:da:d1:e3:23:b7:
f2:a1:c0:60:d0:78:27:cd:41:86:18:1e:87:bf:5a:
6f:51:d2:8a:db:c2:00:8d:f7:e0:56:b6:7d:fd:b9:
a6:5d:e5:5c:7d:6d:12:71:f1:88:c1:3e:d6:90:32:
cc:6c:54:33:47:2d:40:d5:34:fd:0b:cf:e4:fa:4b:
6c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F9:CD:DF:20:FE:73:B4:7F:97:6F:2C:B2:96:C2:C4:01:C0:44:04
X509v3 Authority Key Identifier:
keyid:38:A0:16:71:64:13:D0:12:8B:A4:73:D0:46:A9:3A:22:2E:F2:58:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e3133372e31362e302f32322d3234203d3e2039393035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.137.16.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:b9:89:28:0b:3e:09:00:8d:57:26:68:d5:74:11:53:34:4b:
20:95:c8:2e:49:b0:7e:a4:47:30:05:d2:78:a0:81:85:50:64:
fb:e6:1e:d2:9e:a7:ed:77:6f:0b:e2:33:4c:41:7b:b2:94:ec:
cb:5f:c0:d9:42:0f:ba:ea:6f:bd:72:6c:e7:2c:98:fd:8c:31:
e9:37:78:2d:f6:74:9a:b3:32:4d:ad:04:36:7c:96:80:48:36:
13:a5:0f:bf:9c:59:18:eb:2a:32:cf:f6:e1:66:77:da:d8:8f:
90:be:7d:79:39:25:58:48:68:30:59:24:18:44:3e:d2:03:42:
95:a0:f3:99:2b:8c:2b:a9:d7:d5:6e:f6:76:cb:3e:ff:6b:94:
f4:7f:44:78:76:4c:f4:f1:7b:97:ca:f3:c8:5e:2b:02:21:db:
cc:1c:71:b0:3d:9d:39:96:ef:27:63:9a:8b:2e:ae:c9:bc:56:
82:29:51:f5:12:20:33:30:0e:9a:77:14:16:e0:a1:37:76:0f:
f5:b8:a6:74:45:82:e1:80:08:a5:db:03:c6:ca:35:cf:01:cf:
3a:09:15:d3:09:2e:c2:75:99:39:36:62:34:7d:c1:80:e4:1c:
39:75:1a:44:19:85:7e:3e:15:9b:54:1d:78:31:cc:b8:f0:3c:
bc:20:32:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:08 2026 by rpki-client