
$ rpki-client -vvf rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e3130302e302f32342d3234203d3e203137393130.roa
File: 3230322e3132372e3130302e302f32342d3234203d3e203137393130.roa (raw, json)
Hash identifier: n+eUGlNoGxyXiKbu/ITCTX0cNeFjGes4nvyKs6e972Y=
Subject key identifier: 8C:A1:9C:53:FF:68:05:E2:9B:42:1C:ED:74:CE:32:AD:60:B7:48:1E
Certificate issuer: /CN=EC59C36AB88A35CEA64B4ED019F2F05317672299
Certificate serial: 1E5A3193E957E37CA1E8782666218671A0726AAA
Authority key identifier: EC:59:C3:6A:B8:8A:35:CE:A6:4B:4E:D0:19:F2:F0:53:17:67:22:99
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e3130302e302f32342d3234203d3e203137393130.roa
Signing time: Sun 03 May 2026 02:48:17 +0000
ROA not before: Sun 03 May 2026 02:43:17 +0000
ROA not after: Sun 02 May 2027 02:48:17 +0000
asID: 17910
IP address blocks: 202.127.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.crl
rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:5a:31:93:e9:57:e3:7c:a1:e8:78:26:66:21:86:71:a0:72:6a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC59C36AB88A35CEA64B4ED019F2F05317672299
Validity
Not Before: May 3 02:43:17 2026 GMT
Not After : May 2 02:48:17 2027 GMT
Subject: CN=8CA19C53FF6805E29B421CED74CE32AD60B7481E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:09:74:59:31:ee:22:8c:7c:71:c5:17:23:29:
48:29:1d:14:be:a1:b5:5e:8e:15:45:17:67:93:d4:
52:e3:24:00:a8:c4:79:c2:cc:1c:ad:46:cb:93:aa:
a4:35:8a:3b:89:60:1f:13:18:9b:3c:a0:30:d5:ac:
c8:ca:24:24:c5:5c:a9:4e:95:a3:44:c0:82:b5:2d:
61:58:b0:ec:e2:1d:f5:51:b8:c0:de:63:5d:f4:59:
24:40:90:23:3b:c5:83:2f:e4:48:f6:f4:14:d6:4a:
bd:09:b5:a4:27:20:13:6b:c5:0c:99:8a:ce:29:83:
a5:6f:21:bc:7b:af:f4:b7:c2:4b:f4:a4:c1:62:52:
f3:72:b1:19:9a:09:2d:6d:fa:33:8e:28:ac:41:58:
a9:5e:b5:d2:dd:ad:bd:25:8a:10:a0:c9:24:ed:87:
a5:d1:49:62:85:33:ff:0a:e7:a4:7f:ce:a5:64:ae:
61:7e:e3:cd:2c:43:6f:3c:1d:20:d8:44:b9:e5:15:
35:1d:ea:82:3c:f3:f4:e7:f0:c6:50:42:bb:68:85:
77:b0:77:fd:bb:27:8b:89:9d:82:f2:f3:f0:02:e8:
a2:ae:cb:c2:1e:81:65:0a:73:d5:7c:cd:e1:2a:16:
dc:6f:fd:75:cc:84:27:1f:1f:24:53:8b:c9:96:1b:
27:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A1:9C:53:FF:68:05:E2:9B:42:1C:ED:74:CE:32:AD:60:B7:48:1E
X509v3 Authority Key Identifier:
keyid:EC:59:C3:6A:B8:8A:35:CE:A6:4B:4E:D0:19:F2:F0:53:17:67:22:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e3130302e302f32342d3234203d3e203137393130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.127.100.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:1d:cd:99:f4:86:40:31:d6:6f:be:5a:6a:d4:31:84:03:7e:
e0:f4:e8:6c:88:28:cc:c2:1c:e1:08:07:5a:28:1a:06:54:b5:
86:47:2b:64:48:7c:21:53:f6:9b:6f:4e:83:e7:43:62:f9:30:
19:ae:a6:3c:79:e4:7b:fe:37:f6:ea:3a:8f:00:f6:0a:f4:67:
d2:f2:da:f9:4a:20:d1:89:b5:db:ad:d2:5f:45:c5:51:d7:3e:
3e:ec:c0:01:64:6e:bd:1c:e8:7c:30:7e:a1:d9:4e:68:d5:8a:
ee:b2:b6:19:87:6c:a3:aa:bf:f7:14:3f:3e:75:bf:2e:d1:a1:
85:20:7f:1a:1c:b2:f7:8c:97:aa:7d:00:15:85:27:d1:9b:c3:
fc:1a:92:22:5f:2c:06:2a:5d:cf:90:19:f4:d3:8a:4b:fb:40:
18:19:22:7e:d4:22:5a:c8:c1:64:43:f1:67:b1:83:ea:8e:fa:
02:d0:11:cb:7f:6c:fd:37:a0:ac:a2:cd:46:a4:f1:88:ec:58:
3b:b0:a1:48:83:59:d1:8c:d2:01:a1:07:63:b2:17:94:99:1e:
a1:a1:0b:e2:fb:0e:a5:da:a3:63:65:a9:c8:f2:b5:ca:f9:4e:
8c:da:b2:bc:b8:b9:c2:95:f1:17:77:3b:6c:40:9d:99:0e:bb:
f3:f4:06:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:28:41 2026 by rpki-client