
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37392e302f32342d3234203d3e203137363731.roa
File: 3230322e34372e37392e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: XwfOkF71WVziy/K58M1b2UAO5tgH+6XzYzfmUBfK5UQ=
Subject key identifier: 20:22:E2:DD:E6:CF:78:CD:95:79:B0:AE:04:ED:49:E1:5C:62:A7:59
Certificate issuer: /CN=CA547F005E84823E6A8A471723C17168E8E44644
Certificate serial: 754D3E5A966FE94A73B8053457C13133E747FDF7
Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37392e302f32342d3234203d3e203137363731.roa
Signing time: Sun 03 May 2026 02:50:13 +0000
ROA not before: Sun 03 May 2026 02:45:13 +0000
ROA not after: Sun 02 May 2027 02:50:13 +0000
asID: 17671
IP address blocks: 202.47.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl
rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:54:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:4d:3e:5a:96:6f:e9:4a:73:b8:05:34:57:c1:31:33:e7:47:fd:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644
Validity
Not Before: May 3 02:45:13 2026 GMT
Not After : May 2 02:50:13 2027 GMT
Subject: CN=2022E2DDE6CF78CD9579B0AE04ED49E15C62A759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cf:ef:8d:c0:48:ff:24:b9:43:f1:73:18:4b:
23:aa:fd:e5:d2:6f:a8:eb:35:8a:62:4d:f2:17:60:
bf:69:55:6f:32:78:e1:8d:fe:3c:f9:f2:97:9e:b3:
69:45:fc:60:fb:f0:71:29:9b:5a:cc:be:e3:e4:e7:
7d:52:0a:37:50:74:f9:7e:ff:3d:65:49:7c:a9:94:
1b:1f:94:fc:f3:3f:c9:f3:23:fc:05:7f:9a:57:b5:
c6:84:29:bc:f5:07:60:f7:0b:78:51:63:bb:09:7b:
99:12:17:01:84:d8:54:09:00:3f:44:83:b1:e8:ac:
b4:44:57:51:14:03:1c:36:29:b1:e8:cb:f3:58:1a:
af:70:f7:37:06:2e:5d:8f:02:a6:8d:19:9c:3e:06:
6c:0c:a8:1d:3a:9b:3b:ee:76:22:1e:e6:f9:bb:7f:
a3:0e:62:e3:8a:66:30:b7:06:04:9c:a0:c4:8d:64:
3d:3d:c2:b8:c3:e7:7e:3e:f9:a1:88:37:83:96:06:
23:95:b6:3a:e8:43:20:b7:8a:73:e7:90:9b:e1:be:
1f:a2:07:60:38:26:71:f0:7c:9c:a4:ac:f0:5a:8f:
13:62:64:56:25:7e:bc:38:44:7c:50:7c:b3:22:e2:
19:11:5d:d7:5c:19:80:8d:dc:d5:07:07:78:06:a8:
e3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:22:E2:DD:E6:CF:78:CD:95:79:B0:AE:04:ED:49:E1:5C:62:A7:59
X509v3 Authority Key Identifier:
keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37392e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.47.79.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:23:38:5a:f2:91:21:af:28:f6:b6:de:e2:89:0f:97:db:42:
f1:17:a1:d6:55:37:0d:89:29:8a:62:7c:25:d7:70:36:80:7f:
c5:21:8f:6a:8b:4a:3c:35:fa:23:6b:3d:56:6f:78:bc:ce:5c:
22:c9:2e:cb:c1:7b:a9:3f:d2:7f:9e:7f:94:1f:1c:b8:f6:2e:
39:6c:bb:6c:a1:3f:38:6d:ae:be:a4:60:5b:58:63:33:34:9c:
3f:c6:77:f2:a7:36:29:a8:5e:29:2e:9d:ad:b2:77:ee:f9:18:
9d:58:09:c5:84:61:44:47:9e:8c:8a:83:7c:22:bc:ec:d2:f1:
86:19:a4:92:98:c9:b6:2d:6c:84:c7:55:f2:36:33:e7:e0:d1:
96:c6:85:b0:d9:1c:d7:bb:4e:01:c2:48:b1:37:83:a9:0b:cb:
d4:69:a6:1b:28:77:06:fd:d0:b7:a1:05:84:04:a1:ed:4a:e1:
2a:36:6e:82:79:70:8f:8b:e7:98:5e:5a:bf:51:9a:ac:61:3e:
ed:7e:af:b4:1a:fd:09:ca:e7:d1:79:ca:d7:f3:2b:ed:60:dc:
55:b6:c7:e4:1e:e7:04:58:76:1a:70:91:88:87:93:d7:e3:3e:
5b:97:c6:c9:af:ad:57:ea:a0:3f:df:c2:fe:ae:ea:58:43:8a:
5b:27:ef:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:51:14 2026 by rpki-client