
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36342e302f32342d3234203d3e20313533313230.roa
File: 3230322e34372e36342e302f32342d3234203d3e20313533313230.roa (raw, json)
Hash identifier: A1cIHV3NhTF9AhSpaOzU51ntba3SN3zA8Fd5F5dR3KU=
Subject key identifier: 6E:BA:71:66:28:C6:D2:BE:8D:53:15:8F:F1:DB:C0:18:97:A6:57:9C
Certificate issuer: /CN=CA547F005E84823E6A8A471723C17168E8E44644
Certificate serial: 7A2B0D34FD608F94F3A58D359C0AF8EDBB16093A
Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36342e302f32342d3234203d3e20313533313230.roa
Signing time: Sun 03 May 2026 02:50:10 +0000
ROA not before: Sun 03 May 2026 02:45:10 +0000
ROA not after: Sun 02 May 2027 02:50:10 +0000
asID: 153120
IP address blocks: 202.47.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl
rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:54:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:2b:0d:34:fd:60:8f:94:f3:a5:8d:35:9c:0a:f8:ed:bb:16:09:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644
Validity
Not Before: May 3 02:45:10 2026 GMT
Not After : May 2 02:50:10 2027 GMT
Subject: CN=6EBA716628C6D2BE8D53158FF1DBC01897A6579C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7a:85:7f:51:86:2a:d5:eb:3a:1f:0a:29:b7:
75:6c:d3:cc:cf:53:99:91:ef:ef:72:8c:37:69:b5:
0a:3d:96:f6:55:d2:26:1e:20:8f:e6:f9:4c:ca:cb:
c6:84:51:5a:7f:ff:6e:66:81:77:4c:4d:a0:1d:47:
c1:bb:c2:77:60:4d:cf:93:54:96:de:01:7c:0d:fc:
3f:3f:e6:12:05:a4:95:83:7a:9e:b2:05:86:5a:e3:
ce:79:e6:15:b1:a3:2f:c0:28:57:83:04:0e:87:1a:
38:7a:e0:39:2d:eb:a7:5d:73:25:28:db:34:f3:bf:
4c:31:22:1c:74:24:07:fd:a7:7e:2b:f7:5c:72:8c:
d8:76:c9:d3:23:6b:59:71:c8:79:ef:e6:ff:d2:2d:
5d:a6:8b:9a:c2:b3:5f:b4:29:d0:cf:7b:e8:f3:24:
a7:81:a6:12:70:ca:a1:04:43:81:06:75:c4:d6:09:
45:93:0c:78:2f:89:ce:2f:fa:cb:8f:c1:ed:3c:a2:
c7:53:2b:a8:d9:11:04:d0:5a:98:09:a5:2d:cd:f6:
34:bd:8a:9a:10:e5:a5:a9:e9:e3:f3:f3:9a:57:de:
2e:72:c1:82:1f:f5:32:5d:d5:99:20:c0:2e:e6:49:
77:25:a8:18:38:9d:69:93:77:58:21:00:62:8f:2b:
d7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BA:71:66:28:C6:D2:BE:8D:53:15:8F:F1:DB:C0:18:97:A6:57:9C
X509v3 Authority Key Identifier:
keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36342e302f32342d3234203d3e20313533313230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.47.64.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:f0:38:a1:63:92:fc:ca:f2:d6:c5:c1:b6:a2:cf:c8:71:55:
81:55:38:d9:45:04:cb:3b:c8:37:5f:cf:2f:c5:6c:5a:94:dc:
a1:ce:95:98:3e:27:2a:df:b6:21:44:2b:02:6b:ca:5d:a5:6d:
1b:c5:26:5e:e9:2d:db:96:5e:14:ed:69:b6:a1:67:16:e7:3b:
bd:e9:29:0a:bc:3a:3a:5f:35:81:1f:f9:88:7c:34:07:61:a7:
a6:80:af:40:b5:a8:4e:f0:08:82:92:31:2b:13:3b:1e:d6:ea:
39:06:57:18:4f:18:2f:c5:7b:21:96:5f:95:ad:84:14:d3:17:
29:bc:8e:1e:a8:5b:12:d8:32:59:e7:17:02:57:14:16:96:4e:
14:aa:60:ef:c8:82:a3:2b:f3:a0:a5:17:8f:e9:1d:d9:7e:e8:
6e:65:1f:26:9c:de:41:95:0e:a7:50:4e:05:e2:81:72:18:24:
34:63:f9:45:f4:26:08:f1:59:9e:03:e7:9b:bb:56:3c:e5:48:
10:54:32:0d:b1:d2:a8:d7:2e:ff:f2:b4:cd:d0:05:6a:2b:88:
83:2a:b7:2b:1c:96:83:57:bc:6a:ca:d5:b9:86:07:89:88:31:
6c:c6:f3:73:92:4d:d5:6d:b5:63:75:dd:21:17:ae:5a:7a:c4:
3c:8e:14:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:51:10 2026 by rpki-client