
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3131322e302f32342d3234203d3e203536323431.roa
File: 3230332e39392e3131322e302f32342d3234203d3e203536323431.roa (raw, json)
Hash identifier: yNSswNu7I5mxAU9hq/xHGawbAp2gMK9dl+S56V1qrxg=
Subject key identifier: 9C:EB:D4:84:E4:45:AB:A3:0A:59:52:3B:25:9C:A9:B9:0B:F0:7A:35
Certificate issuer: /CN=12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D
Certificate serial: 248FBEA43187EE8249A4104F7B76B693AE4F012D
Authority key identifier: 12:BD:5F:3F:6C:5A:B1:A9:F4:E3:12:A7:DA:FA:AC:BC:22:22:94:6D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3131322e302f32342d3234203d3e203536323431.roa
Signing time: Sun 03 May 2026 02:46:03 +0000
ROA not before: Sun 03 May 2026 02:41:03 +0000
ROA not after: Sun 02 May 2027 02:46:03 +0000
asID: 56241
IP address blocks: 203.99.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl
rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:8f:be:a4:31:87:ee:82:49:a4:10:4f:7b:76:b6:93:ae:4f:01:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D
Validity
Not Before: May 3 02:41:03 2026 GMT
Not After : May 2 02:46:03 2027 GMT
Subject: CN=9CEBD484E445ABA30A59523B259CA9B90BF07A35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fb:74:20:ba:cc:ab:b7:cc:9e:75:14:ad:9f:
c2:72:8a:0e:5b:fa:3c:e4:25:11:9c:aa:03:75:6d:
52:0e:46:9a:fc:2d:58:a0:fa:ff:a4:bd:62:39:89:
7d:6a:69:27:ad:f6:ff:29:4b:17:39:b9:d0:2e:5a:
0e:08:56:af:15:c4:bb:c5:6e:47:ac:b4:7d:9d:57:
16:d6:af:23:d9:ec:3f:d4:a2:e8:fa:30:86:c5:e3:
99:e1:b1:31:b1:7e:65:ad:80:9c:7c:5b:84:89:81:
02:32:ae:40:c5:88:84:22:4b:53:10:ac:f7:ab:51:
fa:b6:73:00:a0:de:64:6e:31:d9:aa:71:d4:b6:e3:
56:d9:88:b1:fc:ac:52:91:ef:80:f6:08:85:09:df:
5c:a4:10:ac:d1:96:06:0c:5a:f1:5f:ec:25:e6:37:
0e:0d:32:0e:15:bd:b0:23:5f:b7:ee:a5:ba:86:3a:
f7:7c:39:ab:33:dc:17:b8:33:40:49:8e:e7:42:64:
8a:78:67:f7:8a:85:e5:9e:2c:c0:11:68:77:2d:36:
a5:3a:7f:f6:0a:4f:2b:46:a0:6f:1e:d6:84:91:2c:
98:c4:2d:6e:3a:98:9d:0e:84:e4:9a:22:6d:45:2f:
08:2e:bb:56:d9:23:d7:a7:02:88:3b:e1:80:43:23:
80:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EB:D4:84:E4:45:AB:A3:0A:59:52:3B:25:9C:A9:B9:0B:F0:7A:35
X509v3 Authority Key Identifier:
keyid:12:BD:5F:3F:6C:5A:B1:A9:F4:E3:12:A7:DA:FA:AC:BC:22:22:94:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3131322e302f32342d3234203d3e203536323431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.99.112.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:a9:de:9f:c9:f4:ca:96:42:d1:b5:d5:99:98:93:4b:c1:df:
37:4d:ab:d3:ab:8a:41:18:d3:b1:7c:49:38:ce:f9:ef:a1:a5:
c5:b9:c3:ab:29:94:53:2a:6f:4c:45:6b:af:13:42:bb:4f:7c:
7f:ad:aa:81:04:7f:e2:c6:4e:45:b2:3e:20:1b:d9:53:58:0c:
cf:a1:c5:3e:48:8c:ed:27:3e:d6:ea:93:d0:ef:27:2a:94:a5:
67:11:d1:3d:49:b6:e1:ce:96:2e:94:68:75:24:16:64:23:e8:
5a:20:1d:c2:66:c5:d6:f6:29:3a:3d:35:ee:75:8f:f7:6f:23:
6b:e8:2d:b2:2a:73:67:c8:5b:91:92:0c:57:f9:ac:2c:e3:3b:
20:f2:e8:78:9a:63:be:33:8a:8e:d6:2a:86:11:f9:46:12:7b:
8f:13:61:31:17:27:8b:70:50:b7:1d:bd:03:9f:1c:cb:9f:dc:
73:6c:05:15:81:a3:6b:4a:ee:9f:90:a0:15:3a:d1:59:f5:12:
df:47:31:e8:e5:13:a3:f0:58:79:07:df:06:62:b6:ba:5e:20:
ed:68:b6:68:03:90:41:32:69:34:02:b0:4b:c2:b8:47:25:27:
08:85:23:d7:df:4e:3e:37:30:1a:5d:8c:d0:00:9b:bf:11:80:
3d:51:5c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:13:39 2026 by rpki-client