
$ rpki-client -vvf rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3130302e302f32322d3234203d3e2039393035.roa
File: 3230322e37372e3130302e302f32322d3234203d3e2039393035.roa (raw, json)
Hash identifier: 4zcs3dsKUpw1QSrJt91B69SmnZX4YnkFdN0jKF+1k7E=
Subject key identifier: DE:B4:F0:7C:4C:22:8B:58:44:B6:0F:95:73:70:EE:E1:C3:3F:23:AE
Certificate issuer: /CN=38A016716413D0128BA473D046A93A222EF258E1
Certificate serial: 135F9E078E1BAA42AEFC2715DA0C81BA4CFE52CE
Authority key identifier: 38:A0:16:71:64:13:D0:12:8B:A4:73:D0:46:A9:3A:22:2E:F2:58:E1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3130302e302f32322d3234203d3e2039393035.roa
Signing time: Sun 03 May 2026 02:44:33 +0000
ROA not before: Sun 03 May 2026 02:39:33 +0000
ROA not after: Sun 02 May 2027 02:44:33 +0000
asID: 9905
IP address blocks: 202.77.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.crl
rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:5f:9e:07:8e:1b:aa:42:ae:fc:27:15:da:0c:81:ba:4c:fe:52:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38A016716413D0128BA473D046A93A222EF258E1
Validity
Not Before: May 3 02:39:33 2026 GMT
Not After : May 2 02:44:33 2027 GMT
Subject: CN=DEB4F07C4C228B5844B60F957370EEE1C33F23AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a6:3c:b5:2d:40:73:4e:5a:73:97:19:33:63:
f1:cd:19:23:c1:16:49:62:de:5c:3c:38:d9:24:1a:
52:57:e4:09:bf:b8:e2:a8:cd:e7:20:6c:dd:87:0c:
ee:85:74:39:2a:7e:c1:80:dd:6a:7e:e7:89:6a:a1:
49:dc:ac:f3:48:9b:cb:bd:bd:c4:72:2d:04:ad:95:
ba:3c:48:df:be:25:cb:f0:f4:3e:1b:9a:d5:c9:45:
cd:fe:3b:ff:25:4d:e3:45:8e:f7:e3:63:1b:73:99:
b3:3b:c5:22:66:08:73:5d:f9:e1:f8:2a:0d:b9:e6:
25:21:0b:23:02:59:3b:63:06:24:2d:de:2c:01:a7:
b0:3f:d1:d7:12:04:a9:59:fd:9b:04:24:cb:93:96:
23:f9:81:a9:b7:bb:84:33:bf:64:e8:bc:44:41:80:
e7:2c:68:8b:6d:53:45:ab:b1:ac:b4:35:6c:05:54:
8b:bf:b7:5a:ec:ea:8a:74:99:76:88:f9:ab:84:68:
ca:3b:55:f9:9a:18:f3:f8:ce:29:4e:3b:ef:a3:e1:
03:4c:32:ab:13:77:1d:fb:b6:6b:16:e0:ed:fc:2c:
95:ae:de:d2:77:55:ba:5b:25:be:e6:a1:d3:4d:d4:
10:5b:de:e8:f1:0e:d9:b7:72:09:82:0b:a1:bf:86:
f5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B4:F0:7C:4C:22:8B:58:44:B6:0F:95:73:70:EE:E1:C3:3F:23:AE
X509v3 Authority Key Identifier:
keyid:38:A0:16:71:64:13:D0:12:8B:A4:73:D0:46:A9:3A:22:2E:F2:58:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e3130302e302f32322d3234203d3e2039393035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.77.100.0/22
Signature Algorithm: sha256WithRSAEncryption
01:d8:29:75:2b:82:20:f9:0b:79:37:5d:b8:7b:48:b8:88:a4:
71:18:02:91:e3:5d:88:7b:37:cb:ca:fc:fa:de:6a:95:cb:15:
8a:39:7e:55:ac:83:7b:4d:f0:6e:04:c1:0d:f3:2e:9f:6f:65:
7a:93:a9:f2:2c:13:1a:f8:d3:60:56:67:aa:40:73:3e:e6:22:
3e:44:e1:e2:8a:b2:f1:72:48:47:a7:93:82:64:06:93:e8:07:
7f:5f:75:5e:8b:3e:2c:73:f1:ff:ee:c8:8d:48:66:b8:f0:ca:
b3:64:11:8e:e7:6e:e2:fa:eb:2f:25:3a:82:22:f7:71:4c:df:
06:2e:54:f5:05:21:5a:9f:e0:de:ac:da:9c:77:e0:7d:72:b9:
95:c8:2e:fd:86:32:b7:36:3c:34:0d:84:a4:c5:87:cd:a8:6c:
42:9e:51:38:0c:e4:84:f6:3e:82:3f:0a:c9:cf:ca:aa:f1:35:
72:f7:60:4f:54:01:b8:66:0e:34:53:0a:2a:05:f9:d2:2a:ee:
91:aa:09:94:01:ef:3c:f1:7f:3d:2c:89:e1:cd:30:63:09:7e:
fb:95:60:bc:70:66:18:78:6a:3e:34:16:5d:d8:a5:e2:13:d8:
f4:75:da:02:56:b6:f5:6d:df:cf:67:e9:b6:9a:38:e3:d1:b2:
44:fa:da:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:51:41 2026 by rpki-client