
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36362e302f32342d3234203d3e203137363731.roa
File: 3230322e34372e36362e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: qr+rnEcVphoPvO9RIhDOwk8LfqSt9RMEzSDw3iaV5g8=
Subject key identifier: 6A:6F:41:E3:44:1E:A2:DA:6A:98:6A:79:98:93:2A:B0:B6:54:A4:B1
Certificate issuer: /CN=CA547F005E84823E6A8A471723C17168E8E44644
Certificate serial: 2946249988FF5A771311D8F97A1E4474963DB1EE
Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36362e302f32342d3234203d3e203137363731.roa
Signing time: Sun 03 May 2026 02:50:04 +0000
ROA not before: Sun 03 May 2026 02:45:04 +0000
ROA not after: Sun 02 May 2027 02:50:04 +0000
asID: 17671
IP address blocks: 202.47.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl
rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:54:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:46:24:99:88:ff:5a:77:13:11:d8:f9:7a:1e:44:74:96:3d:b1:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644
Validity
Not Before: May 3 02:45:04 2026 GMT
Not After : May 2 02:50:04 2027 GMT
Subject: CN=6A6F41E3441EA2DA6A986A7998932AB0B654A4B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1d:2d:98:37:b9:64:aa:a2:a2:d7:ff:4c:6f:
56:9a:4c:8f:38:ad:84:56:c4:a6:ab:b1:da:b8:5d:
09:90:9b:bc:77:00:88:00:07:28:0c:ca:5e:b2:22:
49:05:36:36:db:09:1b:32:f6:ab:17:c0:4e:f5:f1:
68:db:8a:75:b8:82:c0:0b:11:34:dd:c8:b5:20:ee:
46:36:d2:b1:e0:93:a3:93:0f:74:50:11:60:f0:b4:
ec:7f:7b:4f:b5:42:63:bb:73:6b:cd:34:10:4f:19:
8d:9e:c6:a5:60:d5:fa:82:b4:06:c7:ee:0a:5c:34:
c3:83:fe:29:f8:ef:ed:66:38:0a:b3:b0:25:c1:1c:
f7:d4:5f:2a:c6:ed:4e:ff:63:f5:21:8c:04:5a:88:
9e:66:72:23:6a:e7:67:5f:69:c8:24:cf:16:89:ac:
1c:dc:8f:2a:01:ff:b4:bd:6e:fc:7a:97:87:45:53:
27:8c:e4:11:da:02:f2:a7:93:7e:e2:5d:3d:ec:5f:
b8:a7:65:0c:79:d6:2d:fd:b2:7b:ab:df:85:82:88:
8e:49:fc:33:03:28:5a:40:3f:70:9b:ed:46:40:ce:
c8:d5:ec:cf:91:b6:3c:99:14:99:08:cf:e7:e8:e5:
bc:2d:f4:e7:27:7f:a9:d4:3a:27:e7:dd:81:bd:7c:
68:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6F:41:E3:44:1E:A2:DA:6A:98:6A:79:98:93:2A:B0:B6:54:A4:B1
X509v3 Authority Key Identifier:
keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36362e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.47.66.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:19:26:7c:78:2f:0d:a3:72:00:e2:4e:3b:37:11:6a:b0:20:
ee:4c:ce:f2:fc:5c:42:e3:05:93:8b:15:06:33:37:32:df:4f:
b8:42:8c:37:32:c6:12:8f:b3:3e:12:80:0b:92:c3:4e:5d:3d:
0f:a8:3d:4c:b8:2a:c8:66:d1:48:77:8e:d3:c4:22:d3:a3:8f:
27:99:ae:01:d3:9a:9c:e5:79:d4:83:76:98:63:b0:95:ec:6e:
3d:1f:3f:8f:9a:cf:61:b3:e4:89:1d:31:f6:77:84:6b:69:26:
41:e1:21:af:e1:b6:86:96:46:c2:f5:b7:71:eb:bb:2b:40:46:
aa:aa:fa:18:da:6b:54:f1:ff:92:19:e8:96:fc:05:cf:7b:4f:
0b:9f:95:e5:63:1e:28:8b:32:8b:cb:f6:1a:d6:63:ee:ee:9d:
01:b2:7a:71:7c:1e:73:8a:3e:f4:49:89:90:a3:81:5c:b7:12:
c6:20:4a:f5:18:fb:e4:b4:2d:87:5e:13:a5:1a:c3:2a:e7:c2:
81:e3:1d:56:b8:9b:d0:62:2e:89:ec:38:e0:8e:7a:15:6f:4b:
c0:2b:bf:e3:17:63:da:9b:74:f4:b5:38:ce:32:e7:d6:2b:10:
06:c9:36:45:0d:e4:30:e4:70:a2:d5:45:47:3d:7c:40:04:c6:
8a:a3:b2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:51:15 2026 by rpki-client