
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3130322e302f32342d3234203d3e203130313337.roa
File: 3230332e39392e3130322e302f32342d3234203d3e203130313337.roa (raw, json)
Hash identifier: MAg0dVjN/VisS1hFmLJD+dd3x6Va1gOOR658nswBpQU=
Subject key identifier: 63:8A:80:6B:AD:10:F5:C9:76:C9:FC:22:D5:F2:D6:C3:FD:E1:18:38
Certificate issuer: /CN=12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D
Certificate serial: 4B987A11EA47960BFC490F75BFDDA280F04F5BD2
Authority key identifier: 12:BD:5F:3F:6C:5A:B1:A9:F4:E3:12:A7:DA:FA:AC:BC:22:22:94:6D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3130322e302f32342d3234203d3e203130313337.roa
Signing time: Sun 03 May 2026 02:46:03 +0000
ROA not before: Sun 03 May 2026 02:41:03 +0000
ROA not after: Sun 02 May 2027 02:46:03 +0000
asID: 10137
IP address blocks: 203.99.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl
rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:56:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:98:7a:11:ea:47:96:0b:fc:49:0f:75:bf:dd:a2:80:f0:4f:5b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D
Validity
Not Before: May 3 02:41:03 2026 GMT
Not After : May 2 02:46:03 2027 GMT
Subject: CN=638A806BAD10F5C976C9FC22D5F2D6C3FDE11838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ae:0b:5f:f4:58:b8:d8:a0:f3:83:59:be:21:
8a:ca:68:0a:f8:9e:e5:63:96:3e:4f:d7:a1:f9:b5:
fe:4e:ff:7f:6c:93:ef:f3:7f:6c:fc:85:4d:9c:8c:
63:09:f3:9c:67:f7:b2:16:c5:ed:08:4c:24:0d:76:
e7:15:54:55:c3:97:f2:cc:9d:92:78:8d:df:77:82:
2d:a7:66:5a:02:f2:cf:9f:43:62:99:2d:35:39:8b:
37:26:18:8e:71:7d:e9:48:6a:8e:85:72:a6:39:74:
9c:3f:6c:37:e0:40:93:f7:f2:a7:2c:9d:c7:52:28:
ee:1a:ae:eb:03:0d:e7:bb:6f:93:43:73:5c:95:68:
8e:b7:14:c6:38:fc:3f:33:26:e5:9b:9e:df:86:02:
bc:46:ba:15:fe:a0:7d:d8:e0:75:c4:d6:4d:64:12:
ba:95:08:bd:4a:7b:69:fb:97:d2:da:f7:41:84:7e:
4e:15:00:08:7d:f7:74:7a:45:f0:62:26:58:0d:83:
6a:b7:16:b3:3e:bb:84:fa:f7:46:bd:6b:0a:a5:6e:
3d:4e:28:02:35:26:e3:b8:64:dc:83:86:4c:fd:16:
ef:0a:77:9d:89:f7:5a:16:32:83:46:29:de:fb:95:
a1:c0:e8:71:89:1d:78:8d:b0:ff:76:d0:0c:53:15:
f6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8A:80:6B:AD:10:F5:C9:76:C9:FC:22:D5:F2:D6:C3:FD:E1:18:38
X509v3 Authority Key Identifier:
keyid:12:BD:5F:3F:6C:5A:B1:A9:F4:E3:12:A7:DA:FA:AC:BC:22:22:94:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3130322e302f32342d3234203d3e203130313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.99.102.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:5b:49:8f:6c:d1:fd:44:8c:9b:bf:49:e0:a8:e8:93:d8:95:
e0:74:8c:18:3e:38:db:2a:0f:c5:ee:d6:0f:eb:b6:67:b7:4c:
06:6a:fd:2d:b3:4d:88:ed:1b:04:1b:6b:1b:34:b3:69:53:5e:
3b:64:c7:e9:21:40:5d:2f:07:a3:4a:47:c5:82:a7:c5:e9:48:
6b:4d:16:cd:70:f2:17:86:c1:51:b6:92:d1:f2:a6:d6:04:ec:
a7:22:bf:f1:90:b5:0c:84:52:25:14:39:09:aa:a4:77:00:1e:
20:48:2d:c4:16:04:9a:a9:91:5d:28:32:76:c0:b7:d6:03:09:
c2:77:bc:5c:22:80:c6:75:a1:41:69:d2:cb:c2:92:d1:fe:3d:
76:84:7b:5c:51:20:2e:ae:ce:ac:2d:cf:68:fc:9c:6f:d5:b2:
a7:20:6d:92:cc:91:9f:8f:b7:59:a5:b1:87:ad:a1:97:9e:41:
9b:fb:b0:37:47:d5:d0:cf:2b:5b:07:40:7b:a5:6b:9f:41:0f:
3a:e3:7b:07:5d:57:f6:b2:ec:44:db:3c:14:07:20:f5:d9:8c:
02:c1:1b:ff:81:b2:24:80:78:98:0a:b6:fa:4a:40:e2:42:9c:
52:ef:92:47:77:28:2a:49:cf:06:98:40:de:b6:84:13:21:f4:
ad:2a:3f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:59:48 2026 by rpki-client