
$ rpki-client -vvf rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e39362e302f32342d3234203d3e203137393130.roa
File: 3230322e3132372e39362e302f32342d3234203d3e203137393130.roa (raw, json)
Hash identifier: +30yZ3DQ/J4gQPQfBONcQspdy36OErhmpY2jH4HzLiQ=
Subject key identifier: 6E:03:41:81:6B:6F:75:94:45:0C:8B:E3:E7:1B:DB:EB:57:98:81:E3
Certificate issuer: /CN=EC59C36AB88A35CEA64B4ED019F2F05317672299
Certificate serial: 1E8738095B61E928004DE8EA7293FCAE7ADDA20A
Authority key identifier: EC:59:C3:6A:B8:8A:35:CE:A6:4B:4E:D0:19:F2:F0:53:17:67:22:99
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e39362e302f32342d3234203d3e203137393130.roa
Signing time: Sun 03 May 2026 02:48:16 +0000
ROA not before: Sun 03 May 2026 02:43:16 +0000
ROA not after: Sun 02 May 2027 02:48:16 +0000
asID: 17910
IP address blocks: 202.127.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.crl
rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:87:38:09:5b:61:e9:28:00:4d:e8:ea:72:93:fc:ae:7a:dd:a2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC59C36AB88A35CEA64B4ED019F2F05317672299
Validity
Not Before: May 3 02:43:16 2026 GMT
Not After : May 2 02:48:16 2027 GMT
Subject: CN=6E0341816B6F7594450C8BE3E71BDBEB579881E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:23:d6:c5:e5:42:d5:ad:95:11:a5:e9:50:2d:
d3:26:3c:47:eb:f8:8b:ee:d1:94:9e:0c:80:c8:12:
d3:72:0e:05:ad:ad:f7:6a:03:2b:3d:54:99:f8:c7:
65:7d:fd:f1:73:58:72:21:41:78:72:a6:71:2f:6c:
3d:4d:07:77:c6:e4:94:82:8c:0c:a5:29:9f:90:8b:
57:25:cf:70:ef:79:75:9f:23:90:26:ca:e0:2d:98:
85:b1:95:85:a1:10:91:0e:1d:cc:01:1d:e1:72:dd:
fc:4a:f2:45:44:70:8a:68:d0:da:0c:6a:ca:a7:8f:
4e:32:e4:d7:50:f7:1a:9e:c3:ea:a5:7f:f2:d5:5f:
7f:f9:95:48:5c:da:3a:7a:88:d1:31:1c:dd:36:d3:
da:ab:ef:88:5c:86:ab:00:b2:8d:38:38:4d:54:c5:
b0:2a:58:4b:1b:fb:92:eb:f6:10:b2:d9:ef:f4:b2:
56:d4:ad:2a:07:c1:69:ca:bc:55:80:22:54:d7:07:
9e:01:52:1b:2d:c8:8f:02:4a:57:3b:17:19:5b:d7:
05:39:c9:1f:bc:b6:ae:42:08:80:8e:9a:8f:17:64:
b3:96:32:c6:36:1b:62:ce:36:e2:4d:84:a5:67:65:
9b:d5:db:64:f6:a8:b9:1c:99:b4:89:18:d1:b5:58:
ae:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:03:41:81:6B:6F:75:94:45:0C:8B:E3:E7:1B:DB:EB:57:98:81:E3
X509v3 Authority Key Identifier:
keyid:EC:59:C3:6A:B8:8A:35:CE:A6:4B:4E:D0:19:F2:F0:53:17:67:22:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/EC59C36AB88A35CEA64B4ED019F2F05317672299.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EC59C36AB88A35CEA64B4ED019F2F05317672299.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e39362e302f32342d3234203d3e203137393130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.127.96.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:97:98:04:8d:22:b9:2a:72:4f:66:15:71:cf:99:93:fa:be:
34:9c:7d:f3:32:a5:07:c4:3f:c7:19:e9:0e:7a:bc:02:82:28:
b5:e6:4a:e8:c6:b7:48:33:76:7e:95:ae:2a:af:d8:67:b9:d2:
46:3e:fe:ec:d1:7e:37:8f:b0:30:e9:94:80:1d:5b:dd:78:4d:
94:02:b7:fc:cc:b5:9c:1e:1e:4a:b5:27:a1:81:63:f9:99:95:
94:9d:4f:44:36:fa:5a:b4:3d:79:ea:57:fa:9d:80:2e:e8:17:
ff:6b:07:f6:a5:02:f5:1e:7e:00:78:0e:eb:f2:6d:71:42:5a:
f7:ba:0f:fd:e4:95:e1:3e:11:02:0b:34:1d:8a:e1:f3:13:79:
9f:0e:fa:6f:da:b9:60:59:29:5b:9f:c7:85:e3:69:7c:f8:65:
9f:35:3c:6c:6b:2c:35:de:4e:f6:8c:2b:05:a2:4b:5f:6e:cf:
27:e5:83:91:a7:2b:93:a7:1c:da:ed:26:42:44:a2:03:5d:52:
be:ae:7d:ba:9d:c5:67:c7:c3:cc:9f:a9:7f:d2:e5:f2:23:14:
46:7d:0c:8f:68:f4:b7:dc:3b:87:c0:67:95:97:13:ad:9c:01:
7f:5c:1e:5c:dd:ef:8d:6c:dd:80:fc:8b:d8:e3:70:41:52:bc:
db:a7:43:fa
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUHoc4CVth6SgATejqcpP8rnrdogowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM1OUMzNkFCODhBMzVDRUE2NEI0RUQwMTlGMkYwNTMx
NzY3MjI5OTAeFw0yNjA1MDMwMjQzMTZaFw0yNzA1MDIwMjQ4MTZaMDMxMTAvBgNV
BAMTKDZFMDM0MTgxNkI2Rjc1OTQ0NTBDOEJFM0U3MUJEQkVCNTc5ODgxRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYI9bF5ULVrZURpelQLdMmPEfr
+Ivu0ZSeDIDIEtNyDgWtrfdqAys9VJn4x2V9/fFzWHIhQXhypnEvbD1NB3fG5JSC
jAylKZ+Qi1clz3DveXWfI5AmyuAtmIWxlYWhEJEOHcwBHeFy3fxK8kVEcIpo0NoM
asqnj04y5NdQ9xqew+qlf/LVX3/5lUhc2jp6iNExHN0209qr74hchqsAso04OE1U
xbAqWEsb+5Lr9hCy2e/0slbUrSoHwWnKvFWAIlTXB54BUhstyI8CSlc7Fxlb1wU5
yR+8tq5CCICOmo8XZLOWMsY2G2LONuJNhKVnZZvV22T2qLkcmbSJGNG1WK6VAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUbgNBgWtvdZRFDIvj5xvb61eYgeMwHwYDVR0j
BBgwFoAU7FnDariKNc6mS07QGfLwUxdnIpkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODY0NTAwMzItNTQ5Mi00YTVhLTk0M2YtYmRiNDczMzQxMjMzLzAvRUM1OUMzNkFC
ODhBMzVDRUE2NEI0RUQwMTlGMkYwNTMxNzY3MjI5OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FQzU5QzM2QUI4OEEzNUNFQTY0QjRFRDAxOUYyRjA1MzE3Njcy
Mjk5LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg2NDUwMDMyLTU0OTItNGE1YS05
NDNmLWJkYjQ3MzM0MTIzMy8wLzMyMzAzMjJlMzEzMjM3MmUzOTM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNzM5MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMp/YDANBgkqhkiG
9w0BAQsFAAOCAQEAyJeYBI0iuSpyT2YVcc+Zk/q+NJx98zKlB8Q/xxnpDnq8AoIo
teZK6Ma3SDN2fpWuKq/YZ7nSRj7+7NF+N4+wMOmUgB1b3XhNlAK3/My1nB4eSrUn
oYFj+ZmVlJ1PRDb6WrQ9eepX+p2ALugX/2sH9qUC9R5+AHgO6/JtcUJa97oP/eSV
4T4RAgs0HYrh8xN5nw76b9q5YFkpW5/HheNpfPhlnzU8bGssNd5O9owrBaJLX27P
J+WDkacrk6cc2u0mQkSiA11Svq59up3FZ8fDzJ+pf9Ll8iMURn0Mj2j0t9w7h8Bn
lZcTrZwBf1weXN3vjWzdgPyL2ONwQVK826dD+g==
-----END CERTIFICATE-----
Generated at Wed May 13 12:17:45 2026 by rpki-client