
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3131312e302f32342d3234203d3e203130313337.roa
File: 3230332e39392e3131312e302f32342d3234203d3e203130313337.roa (raw, json)
Hash identifier: by6bVuVjvD6SHS/RSc1MKPNjclAKxLlvShxlE0Ivay8=
Subject key identifier: 5D:9D:5A:B1:54:DF:B5:E2:F2:4A:78:92:C1:E6:B3:C8:A8:9F:79:E2
Certificate issuer: /CN=12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D
Certificate serial: 4054B6674A56B6217DC614171E0634ED59FF99CF
Authority key identifier: 12:BD:5F:3F:6C:5A:B1:A9:F4:E3:12:A7:DA:FA:AC:BC:22:22:94:6D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3131312e302f32342d3234203d3e203130313337.roa
Signing time: Sun 03 May 2026 02:46:05 +0000
ROA not before: Sun 03 May 2026 02:41:05 +0000
ROA not after: Sun 02 May 2027 02:46:05 +0000
asID: 10137
IP address blocks: 203.99.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl
rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:54:b6:67:4a:56:b6:21:7d:c6:14:17:1e:06:34:ed:59:ff:99:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D
Validity
Not Before: May 3 02:41:05 2026 GMT
Not After : May 2 02:46:05 2027 GMT
Subject: CN=5D9D5AB154DFB5E2F24A7892C1E6B3C8A89F79E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:50:69:63:52:68:7d:b4:d2:cc:ce:7a:7f:02:
aa:84:98:06:60:38:6d:4e:91:a9:47:57:af:76:2a:
e6:2a:77:d6:28:18:27:11:5e:84:dd:a5:66:b3:cb:
e7:b2:9d:c2:82:4c:b8:a7:40:b4:6f:2b:91:01:c5:
63:04:ff:28:53:bb:d6:58:d5:6b:36:3f:1a:c3:eb:
f0:ac:db:73:e1:72:cc:59:dd:ab:45:f3:13:9f:99:
63:2c:12:c1:38:0c:59:90:c8:b4:99:03:0e:1d:dd:
0b:44:8f:50:04:4b:2b:4d:a2:6c:75:77:8e:9f:cd:
4e:e2:75:c9:66:b9:ad:3b:57:c5:ad:aa:dc:9d:93:
07:2e:64:8f:00:af:c1:db:a4:1f:2a:42:31:06:9d:
e4:d4:27:c6:e3:3f:d5:54:8f:de:e4:66:b7:8b:33:
fe:02:e8:78:a0:b6:42:d9:da:39:bd:77:b3:59:24:
ec:d5:e8:ed:7d:98:70:51:8d:d8:97:4a:9c:72:6a:
2c:98:04:8a:e9:fe:82:b2:58:a3:9e:5f:4c:22:0f:
c2:67:4b:fa:2e:8a:ac:cb:f2:fd:f6:c6:c7:90:06:
80:d5:63:50:eb:15:03:5b:a2:bb:8c:f2:ff:b9:32:
b0:56:b4:ad:ae:fe:00:b9:de:d4:da:05:29:7b:7d:
d9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9D:5A:B1:54:DF:B5:E2:F2:4A:78:92:C1:E6:B3:C8:A8:9F:79:E2
X509v3 Authority Key Identifier:
keyid:12:BD:5F:3F:6C:5A:B1:A9:F4:E3:12:A7:DA:FA:AC:BC:22:22:94:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3131312e302f32342d3234203d3e203130313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.99.111.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:e8:b8:da:c2:19:24:77:62:bb:a3:64:b6:93:e9:d1:6d:47:
20:2e:72:e5:b5:db:3e:a1:24:4f:78:4c:e1:db:57:6a:21:cb:
f5:9b:c5:99:ae:2b:57:f5:59:09:85:73:1a:1e:b1:27:0a:4b:
fd:34:16:59:ff:94:49:0c:6f:4a:92:77:5f:07:54:13:fc:a5:
dd:90:50:fc:e2:1f:00:22:fc:70:8f:ae:7d:d3:a6:b9:30:c5:
0d:2a:20:e1:02:77:c0:5d:37:7f:44:a7:8f:c7:64:5e:ee:aa:
3c:1b:20:2d:0b:25:e7:bd:e7:d6:47:c8:ab:00:21:03:a2:22:
b3:b7:ba:50:08:4d:0c:d2:37:6a:5a:9d:22:8a:b5:1f:f4:67:
c8:fe:ad:69:4f:98:ef:ec:b5:9f:6f:be:43:1e:5c:b5:a4:8c:
bb:a7:c3:ca:ac:e7:24:36:f1:2b:95:66:60:39:f4:34:4c:b2:
54:09:0b:c4:57:60:de:0c:6f:d9:24:58:99:32:40:8f:d5:2d:
16:b5:f6:93:a6:9f:b9:d7:5a:2e:d1:a3:59:f7:45:65:b0:ab:
53:d1:88:7d:73:88:fe:f8:8c:bb:31:d0:d3:82:19:bc:f2:64:
54:26:7a:18:a2:9b:72:2e:da:ef:58:32:08:2c:49:57:2f:39:
84:c0:fb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:37:09 2026 by rpki-client