
$ rpki-client -vvf rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e39362e302f32322d3234203d3e2039393035.roa
File: 3230322e37372e39362e302f32322d3234203d3e2039393035.roa (raw, json)
Hash identifier: 9UNjPzeTlgKKqUtFeYaNHw++yvRCKf3VTOaGIaohaGU=
Subject key identifier: 4A:85:85:EA:B2:E1:E2:18:11:47:4F:1A:3D:2A:CA:1F:7F:AC:8B:9B
Certificate issuer: /CN=38A016716413D0128BA473D046A93A222EF258E1
Certificate serial: 12DCC5BFD0C38A92691A96F0B14F0AC493396DB1
Authority key identifier: 38:A0:16:71:64:13:D0:12:8B:A4:73:D0:46:A9:3A:22:2E:F2:58:E1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e39362e302f32322d3234203d3e2039393035.roa
Signing time: Sun 03 May 2026 02:44:38 +0000
ROA not before: Sun 03 May 2026 02:39:38 +0000
ROA not after: Sun 02 May 2027 02:44:38 +0000
asID: 9905
IP address blocks: 202.77.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.crl
rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:dc:c5:bf:d0:c3:8a:92:69:1a:96:f0:b1:4f:0a:c4:93:39:6d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38A016716413D0128BA473D046A93A222EF258E1
Validity
Not Before: May 3 02:39:38 2026 GMT
Not After : May 2 02:44:38 2027 GMT
Subject: CN=4A8585EAB2E1E21811474F1A3D2ACA1F7FAC8B9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4e:1c:77:e8:14:ee:ba:f9:7e:d5:a3:24:48:
26:7a:4e:48:cc:93:bb:b7:23:83:a6:f4:56:b2:3e:
8f:96:a4:60:7e:43:9f:26:67:eb:6a:ad:2a:47:60:
d0:4a:97:4b:42:b8:5f:06:8e:7c:b6:5d:43:57:98:
f1:e4:a2:d9:cd:94:d1:fd:2b:81:1e:76:e4:21:38:
72:d6:13:37:6e:36:30:ae:c2:f2:eb:a0:15:00:03:
04:2a:f5:d4:17:db:49:52:5b:be:64:ce:ed:9c:cf:
8b:79:a5:a7:9f:21:a9:0a:2f:13:97:5c:21:3b:95:
57:d2:2f:49:5c:66:16:97:32:fd:79:7c:d0:21:ea:
83:a6:a1:14:7a:80:bb:80:af:92:bd:43:3f:42:a7:
fe:44:0d:66:30:d7:e8:64:82:63:9c:92:cb:56:6d:
dc:86:2c:78:7c:c7:2a:a8:74:8d:dd:cc:04:99:a1:
5a:37:70:7a:4c:db:2b:31:ec:1c:49:c8:6b:92:8f:
4e:98:62:9f:a2:8f:4e:08:18:0f:c1:ba:46:a2:39:
f8:9b:ce:5b:8d:88:29:cf:8c:99:87:9c:01:4c:eb:
d2:7a:ca:5a:5d:a4:1a:47:8e:8c:e0:bd:db:34:af:
7b:26:41:86:31:ee:6f:91:e4:91:73:42:fd:0f:9b:
ee:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:85:85:EA:B2:E1:E2:18:11:47:4F:1A:3D:2A:CA:1F:7F:AC:8B:9B
X509v3 Authority Key Identifier:
keyid:38:A0:16:71:64:13:D0:12:8B:A4:73:D0:46:A9:3A:22:2E:F2:58:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/38A016716413D0128BA473D046A93A222EF258E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38A016716413D0128BA473D046A93A222EF258E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e39362e302f32322d3234203d3e2039393035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.77.96.0/22
Signature Algorithm: sha256WithRSAEncryption
13:65:06:77:cc:ab:21:eb:78:ec:a8:05:4a:43:de:e6:3b:20:
22:f6:a9:43:78:49:5d:50:02:c7:3c:47:ea:a1:b3:37:0d:08:
38:17:6e:6b:39:8d:98:eb:4c:b7:7e:e6:c3:f6:b8:91:3d:c6:
5e:25:07:25:05:97:66:42:ba:28:91:a7:2a:28:a1:ff:7a:ff:
3a:8b:8e:df:c4:36:ad:de:6c:f0:a2:21:c2:fd:06:90:94:57:
fc:f7:bd:6f:ec:d7:00:4f:e8:1a:56:af:05:9f:58:58:ba:61:
0d:fd:c1:23:69:98:1a:3f:6b:f7:c1:a6:92:97:6f:c1:15:8e:
8b:8d:ee:6b:ef:03:79:75:73:d8:84:85:d3:3d:ca:bc:fd:41:
af:b4:b1:b8:03:1e:52:12:43:15:ee:ef:4d:20:d8:83:a7:26:
68:73:a2:d7:6d:96:0c:7b:53:6a:53:64:97:5a:23:7b:6a:64:
2f:c3:0d:43:79:88:9c:c1:39:f5:cf:d3:8e:f7:c4:5a:67:db:
7b:cd:9a:af:5f:b4:61:71:6f:df:4e:34:ff:b6:7b:d0:ad:1a:
29:16:f5:b4:4b:da:3a:69:59:d7:15:ef:3f:72:a5:c7:4b:70:
b9:1b:76:1f:42:a1:56:1d:6d:2e:8b:ba:10:12:8b:30:af:f0:
df:45:5e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:51:45 2026 by rpki-client