
$ rpki-client -vvf rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e39362e302f32302d3234203d3e203137393130.roa
File: 3230322e3132372e39362e302f32302d3234203d3e203137393130.roa (raw, json)
Hash identifier: +dGVRe6EsrE8x8JkrbEl5y9M3KyI6+RObwSg+1Gl944=
Subject key identifier: 76:32:68:50:0B:6B:65:2D:E7:27:62:EA:2F:C8:B6:4D:27:CE:F9:5A
Certificate issuer: /CN=EC59C36AB88A35CEA64B4ED019F2F05317672299
Certificate serial: 1C627564C73268152E38EDA64812811C71532DEC
Authority key identifier: EC:59:C3:6A:B8:8A:35:CE:A6:4B:4E:D0:19:F2:F0:53:17:67:22:99
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e39362e302f32302d3234203d3e203137393130.roa
Signing time: Sun 03 May 2026 02:48:18 +0000
ROA not before: Sun 03 May 2026 02:43:18 +0000
ROA not after: Sun 02 May 2027 02:48:18 +0000
asID: 17910
IP address blocks: 202.127.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.crl
rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:62:75:64:c7:32:68:15:2e:38:ed:a6:48:12:81:1c:71:53:2d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC59C36AB88A35CEA64B4ED019F2F05317672299
Validity
Not Before: May 3 02:43:18 2026 GMT
Not After : May 2 02:48:18 2027 GMT
Subject: CN=763268500B6B652DE72762EA2FC8B64D27CEF95A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:48:35:eb:fd:80:67:18:ab:de:f5:b9:b1:70:
c8:2b:35:6a:cb:4c:d8:02:dc:85:f2:f7:29:cd:a2:
d2:c0:32:22:9c:0d:c1:de:72:dd:07:eb:93:bc:ae:
fc:14:bd:20:dc:eb:9c:dc:d9:da:7e:07:b2:91:cb:
0f:a6:5d:04:c1:e3:bc:1e:ce:04:bf:e1:3e:4e:a9:
4e:80:27:27:c0:f4:48:0f:67:ae:05:3a:0f:4d:ed:
f9:29:f8:c1:71:cf:39:94:f1:93:fc:f7:99:ac:ee:
f8:43:1a:54:9b:dc:54:cc:78:b5:dd:1a:f8:7b:03:
7a:53:f3:3f:70:7a:c4:ea:29:c3:ce:0c:80:62:cf:
3a:0e:c8:43:90:03:d0:db:93:13:74:35:4a:9c:bd:
17:25:b3:ce:70:48:30:e3:b4:1f:0c:06:07:d1:fb:
36:c0:c3:5e:c3:ac:59:40:22:46:7d:47:b1:a2:2a:
c5:b9:b9:e2:06:33:a3:44:c7:79:e1:60:5d:26:c7:
0e:ba:ba:05:49:c5:a1:28:ef:0a:13:db:66:11:c2:
d6:01:b1:d0:a0:8f:2e:fb:ae:1a:fa:ed:e3:1b:f2:
99:b2:a1:32:8b:19:6b:af:27:c8:12:20:5f:1c:c0:
7b:21:5f:0e:12:3b:30:9d:bb:61:c2:48:02:75:03:
60:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:32:68:50:0B:6B:65:2D:E7:27:62:EA:2F:C8:B6:4D:27:CE:F9:5A
X509v3 Authority Key Identifier:
keyid:EC:59:C3:6A:B8:8A:35:CE:A6:4B:4E:D0:19:F2:F0:53:17:67:22:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e39362e302f32302d3234203d3e203137393130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.127.96.0/20
Signature Algorithm: sha256WithRSAEncryption
af:95:e9:38:d7:55:ba:6e:71:fd:ad:bf:1a:57:70:dc:fa:6b:
13:8c:60:68:cb:07:bf:c2:5f:14:51:88:5e:28:ac:e9:3f:ed:
d5:01:62:36:eb:24:42:5b:15:79:b6:e6:65:ba:17:58:d8:c9:
4d:82:71:7b:4e:51:ff:f1:4e:8e:d9:24:38:eb:d7:c8:ba:c6:
f5:2b:fa:0a:dd:62:16:9b:04:d1:e6:60:e8:e0:72:dd:f1:1d:
e6:98:89:dc:e0:f7:01:c0:5a:22:b4:c7:ea:6e:dd:c4:a6:f5:
27:49:6f:99:a5:33:34:f8:c2:72:7f:19:fe:f2:fc:ad:e5:1b:
71:26:68:68:57:77:26:2a:4c:89:27:f2:05:15:08:98:20:c0:
e4:f6:bf:f0:51:8d:9a:57:6d:bf:b1:30:ed:49:40:37:c5:6a:
98:0c:0b:fe:b7:88:22:b8:72:46:04:36:f0:e0:b0:50:9e:d0:
32:d3:bf:c3:c9:98:dd:93:9d:4d:d3:a2:8e:5c:d1:8b:5b:e9:
1a:c2:51:67:fb:c1:26:66:f9:a1:7c:81:01:8c:4a:68:d8:fe:
1e:3b:3f:a9:c3:78:e1:86:30:d5:5f:d9:0b:1d:c2:97:6c:a9:
7e:13:4d:53:30:3f:26:85:9c:70:a8:c8:9a:79:2f:73:70:37:
b1:76:dd:f5
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUHGJ1ZMcyaBUuOO2mSBKBHHFTLewwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM1OUMzNkFCODhBMzVDRUE2NEI0RUQwMTlGMkYwNTMx
NzY3MjI5OTAeFw0yNjA1MDMwMjQzMThaFw0yNzA1MDIwMjQ4MThaMDMxMTAvBgNV
BAMTKDc2MzI2ODUwMEI2QjY1MkRFNzI3NjJFQTJGQzhCNjREMjdDRUY5NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJSDXr/YBnGKve9bmxcMgrNWrL
TNgC3IXy9ynNotLAMiKcDcHect0H65O8rvwUvSDc65zc2dp+B7KRyw+mXQTB47we
zgS/4T5OqU6AJyfA9EgPZ64FOg9N7fkp+MFxzzmU8ZP895ms7vhDGlSb3FTMeLXd
Gvh7A3pT8z9wesTqKcPODIBizzoOyEOQA9DbkxN0NUqcvRcls85wSDDjtB8MBgfR
+zbAw17DrFlAIkZ9R7GiKsW5ueIGM6NEx3nhYF0mxw66ugVJxaEo7woT22YRwtYB
sdCgjy77rhr67eMb8pmyoTKLGWuvJ8gSIF8cwHshXw4SOzCdu2HCSAJ1A2BVAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUdjJoUAtrZS3nJ2LqL8i2TSfO+VowHwYDVR0j
BBgwFoAU7FnDariKNc6mS07QGfLwUxdnIpkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODY0NTAwMzItNTQ5Mi00YTVhLTk0M2YtYmRiNDczMzQxMjMzLzAvRUM1OUMzNkFC
ODhBMzVDRUE2NEI0RUQwMTlGMkYwNTMxNzY3MjI5OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FQzU5QzM2QUI4OEEzNUNFQTY0QjRFRDAxOUYyRjA1MzE3Njcy
Mjk5LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg2NDUwMDMyLTU0OTItNGE1YS05
NDNmLWJkYjQ3MzM0MTIzMy8wLzMyMzAzMjJlMzEzMjM3MmUzOTM2MmUzMDJmMzIz
MDJkMzIzNDIwM2QzZTIwMzEzNzM5MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMp/YDANBgkqhkiG
9w0BAQsFAAOCAQEAr5XpONdVum5x/a2/Gldw3PprE4xgaMsHv8JfFFGIXiis6T/t
1QFiNuskQlsVebbmZboXWNjJTYJxe05R//FOjtkkOOvXyLrG9Sv6Ct1iFpsE0eZg
6OBy3fEd5piJ3OD3AcBaIrTH6m7dxKb1J0lvmaUzNPjCcn8Z/vL8reUbcSZoaFd3
JipMiSfyBRUImCDA5Pa/8FGNmldtv7Ew7UlAN8VqmAwL/reIIrhyRgQ28OCwUJ7Q
MtO/w8mY3ZOdTdOijlzRi1vpGsJRZ/vBJmb5oXyBAYxKaNj+Hjs/qcN44YYw1V/Z
Cx3Cl2ypfhNNUzA/JoWccKjImnkvc3A3sXbd9Q==
-----END CERTIFICATE-----
Generated at Wed May 13 11:03:51 2026 by rpki-client