
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35382e3231392e302f32342d3234203d3e203137363731.roa
File: 3230322e35382e3231392e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: 8W0oi5xRZ27UVWN+WZgFJQdVpUzNmorFPhqKUp61QmY=
Subject key identifier: 90:75:9A:75:F5:C6:56:05:06:57:0F:A9:F1:33:DC:E7:27:77:56:95
Certificate issuer: /CN=CA547F005E84823E6A8A471723C17168E8E44644
Certificate serial: 26B7ECCD7DCF35E8425847B27936988C3FFF7D35
Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35382e3231392e302f32342d3234203d3e203137363731.roa
Signing time: Sun 03 May 2026 02:50:23 +0000
ROA not before: Sun 03 May 2026 02:45:23 +0000
ROA not after: Sun 02 May 2027 02:50:23 +0000
asID: 17671
IP address blocks: 202.58.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl
rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:54:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:b7:ec:cd:7d:cf:35:e8:42:58:47:b2:79:36:98:8c:3f:ff:7d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644
Validity
Not Before: May 3 02:45:23 2026 GMT
Not After : May 2 02:50:23 2027 GMT
Subject: CN=90759A75F5C6560506570FA9F133DCE727775695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:97:f2:3e:42:66:64:64:b0:b4:78:bb:59:fa:
bd:eb:a8:c3:7e:d5:8d:8d:65:54:6e:67:ae:ae:1c:
44:b4:fc:aa:59:c4:72:3b:72:e2:13:94:d5:39:e7:
55:f6:66:8d:c3:7c:54:59:60:4f:2b:8c:2f:d3:f0:
62:c5:26:59:45:51:a4:31:2d:69:b3:ae:f0:21:54:
69:fc:2f:b5:b3:1a:f4:a3:2c:19:f5:8d:83:0c:13:
f2:a4:8a:65:a7:10:c9:0e:10:7e:1a:f9:af:ec:6b:
6c:e3:5f:d6:cc:21:e3:20:cc:69:7c:42:4a:01:2c:
9d:ee:33:fa:e4:2e:80:1f:a1:4c:49:fc:c7:31:55:
f8:dc:31:6d:9e:ef:bd:45:1c:db:43:3e:29:bd:86:
6b:6c:00:6a:a8:06:87:14:11:e5:de:b9:ff:8a:56:
f0:d6:2f:38:4f:df:31:da:a7:4e:5f:2d:79:4e:4a:
d8:6f:2d:7f:17:fb:a2:ea:b1:ea:f4:06:f9:a9:09:
3d:cc:98:1d:28:e6:c3:56:ac:33:e5:01:c5:2e:3d:
e6:78:5e:61:06:c9:45:93:b2:1d:14:49:cd:bc:bb:
02:a0:22:db:71:9f:f8:64:93:08:2c:5f:f1:00:e9:
70:ab:a6:83:c2:c3:77:b2:eb:1c:f5:24:aa:fb:62:
72:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:75:9A:75:F5:C6:56:05:06:57:0F:A9:F1:33:DC:E7:27:77:56:95
X509v3 Authority Key Identifier:
keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35382e3231392e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.58.219.0/24
Signature Algorithm: sha256WithRSAEncryption
39:49:e3:e7:db:52:b1:76:f1:3e:af:69:c4:8a:6d:da:a9:59:
1b:4b:14:08:39:24:b0:5c:a0:53:5f:53:18:83:34:58:9a:30:
e6:5b:e3:35:40:ae:52:d8:37:e7:e1:4a:52:27:48:2a:33:16:
c4:d2:70:58:c9:e0:b6:16:39:e6:ac:97:1a:1f:f7:d8:f5:7d:
ac:e5:8f:83:9d:9c:2d:76:ab:cc:ff:a5:6c:19:9b:fd:88:1f:
f0:83:99:6e:09:1f:f6:9b:e3:70:bb:48:e9:48:3b:99:cd:1b:
c3:98:63:b9:4e:3e:d6:49:e5:07:2a:71:90:a0:29:f7:a2:bf:
62:48:c6:28:5b:48:af:49:4d:c0:1c:2c:91:0e:4e:78:25:20:
dc:fa:90:f3:9f:b4:c0:69:7c:65:b2:9c:c1:90:37:a2:a2:29:
89:0b:5a:b9:1b:fe:76:a9:e4:70:ec:b6:3d:9d:1b:1b:19:b3:
a5:73:22:f8:b1:6e:e9:1f:12:ec:3b:05:3a:8a:3a:b9:96:bb:
99:10:57:7d:fd:74:40:f2:de:f4:70:1e:eb:72:c6:23:f2:90:
b0:59:6b:dd:ba:84:99:89:b1:5c:e7:42:41:2b:5f:0b:fc:0b:
7b:42:a5:b8:8f:fe:54:5f:c4:36:b7:bf:f8:6f:c3:d0:47:44:
db:7d:7f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:51:10 2026 by rpki-client