
$ rpki-client -vvf rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/3230332e31342e31382e302f32342d3234203d3e20313532303834.roa
File: 3230332e31342e31382e302f32342d3234203d3e20313532303834.roa (raw, json)
Hash identifier: 82PgOYyRG3xdn3rHf9P7dEP+kUdz3CbIpSWQ59DST8k=
Subject key identifier: 46:E2:11:06:11:98:E6:F8:F5:B0:23:D7:A2:E5:D0:CB:CB:7B:CA:5E
Certificate issuer: /CN=848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0
Certificate serial: 4305E10731A7C3747445614640C8031895128A59
Authority key identifier: 84:8B:00:82:DF:3A:F5:0F:4D:AA:14:26:A7:6E:BB:39:D2:A1:0F:A0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/3230332e31342e31382e302f32342d3234203d3e20313532303834.roa
Signing time: Sun 03 May 2026 02:52:52 +0000
ROA not before: Sun 03 May 2026 02:47:52 +0000
ROA not after: Sun 02 May 2027 02:52:52 +0000
asID: 152084
IP address blocks: 203.14.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.crl
rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:05:e1:07:31:a7:c3:74:74:45:61:46:40:c8:03:18:95:12:8a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0
Validity
Not Before: May 3 02:47:52 2026 GMT
Not After : May 2 02:52:52 2027 GMT
Subject: CN=46E211061198E6F8F5B023D7A2E5D0CBCB7BCA5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:37:b9:57:9b:80:e5:a1:ab:a6:5d:53:d4:aa:
69:cb:de:50:4a:51:69:48:38:8a:d8:bb:54:8a:03:
bb:d8:fe:8c:f8:32:87:ba:34:39:69:ad:1c:ae:ba:
d2:dc:6e:c4:bf:57:6a:6c:67:65:f9:5e:f5:6e:ca:
6e:f8:ca:19:f7:3b:9a:c6:62:5d:66:9a:9c:e1:89:
0a:1c:ca:0e:89:11:3d:e4:c0:dd:db:78:05:42:b1:
61:25:96:a2:2d:ad:6e:35:3a:a8:5f:45:8d:fb:12:
b5:b8:43:55:00:86:c9:47:d6:7f:3f:99:a4:77:96:
b4:9e:f3:b3:02:2a:39:c9:71:77:95:82:f9:64:bc:
c5:88:25:c4:15:89:a2:e6:5f:96:a2:cc:0b:81:0f:
84:c8:94:77:be:54:3a:79:f3:48:f4:30:dc:ba:da:
68:e6:0e:69:ef:8b:0a:40:40:83:97:e3:eb:ba:43:
87:f1:ba:de:42:a8:41:a4:e9:4b:3b:7b:0b:3b:36:
77:b8:01:96:95:da:d7:06:54:b8:ed:5a:61:be:a7:
90:a5:ad:91:bc:6c:ed:b9:f7:03:e6:50:ff:0d:26:
c0:1c:f6:58:a9:a7:98:7f:11:79:cf:29:f0:77:49:
42:f3:c9:60:5d:3a:20:04:70:13:64:4b:cd:13:78:
4c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E2:11:06:11:98:E6:F8:F5:B0:23:D7:A2:E5:D0:CB:CB:7B:CA:5E
X509v3 Authority Key Identifier:
keyid:84:8B:00:82:DF:3A:F5:0F:4D:AA:14:26:A7:6E:BB:39:D2:A1:0F:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/3230332e31342e31382e302f32342d3234203d3e20313532303834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.14.18.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:e8:9c:64:f2:ea:c2:89:3b:15:65:46:e0:bb:65:c6:ac:0e:
cf:da:8e:92:50:8d:7a:45:cd:60:43:55:df:77:a2:2d:c7:cc:
e9:60:dc:52:1b:2f:0d:54:6e:c8:ec:55:3b:2e:76:c3:41:3d:
0a:1a:9f:2e:07:59:42:db:03:d3:8d:1c:3f:f5:65:9c:37:d4:
a4:63:6b:53:06:5b:e9:2a:e4:a3:70:e9:6f:10:9d:5c:e7:63:
e3:53:2f:54:f2:ec:16:1f:02:15:65:56:b4:a3:17:94:96:5d:
4b:70:0d:02:a8:db:95:97:74:b1:fe:7d:3e:f6:d2:61:2e:3a:
fa:62:aa:e8:94:c2:b9:f0:a7:32:fd:0e:06:e2:fb:76:f7:d0:
b8:e2:0c:cb:41:c9:6b:9b:24:92:7d:78:1b:77:50:56:f8:06:
38:f1:aa:dc:be:20:17:cb:b4:51:ad:77:7d:da:a2:d9:99:21:
65:a0:73:18:44:01:78:8f:ad:33:0f:e2:10:61:31:ac:fd:2f:
bb:51:ac:e6:72:19:6f:0d:75:b8:87:ac:69:77:8c:34:15:1a:
0e:05:1d:b0:18:aa:15:02:70:6c:15:3a:ec:15:30:24:b8:40:
86:37:e5:2d:f0:b2:2c:4a:f9:d8:cf:ca:8f:8e:77:cb:48:7c:
b2:e5:39:fa
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUQwXhBzGnw3R0RWFGQMgDGJUSilkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ4QjAwODJERjNBRjUwRjREQUExNDI2QTc2RUJCMzlE
MkExMEZBMDAeFw0yNjA1MDMwMjQ3NTJaFw0yNzA1MDIwMjUyNTJaMDMxMTAvBgNV
BAMTKDQ2RTIxMTA2MTE5OEU2RjhGNUIwMjNEN0EyRTVEMENCQ0I3QkNBNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7N7lXm4DloaumXVPUqmnL3lBK
UWlIOIrYu1SKA7vY/oz4Moe6NDlprRyuutLcbsS/V2psZ2X5XvVuym74yhn3O5rG
Yl1mmpzhiQocyg6JET3kwN3beAVCsWEllqItrW41OqhfRY37ErW4Q1UAhslH1n8/
maR3lrSe87MCKjnJcXeVgvlkvMWIJcQViaLmX5aizAuBD4TIlHe+VDp580j0MNy6
2mjmDmnviwpAQIOX4+u6Q4fxut5CqEGk6Us7ews7Nne4AZaV2tcGVLjtWmG+p5Cl
rZG8bO259wPmUP8NJsAc9lipp5h/EXnPKfB3SULzyWBdOiAEcBNkS80TeExJAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQURuIRBhGY5vj1sCPXouXQy8t7yl4wHwYDVR0j
BBgwFoAUhIsAgt869Q9NqhQmp267OdKhD6AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTUzNjY2ZTEtMWU0MS00MmVkLWFiYmMtYThjMDg3ZjNmMzM5LzAvODQ4QjAwODJE
RjNBRjUwRjREQUExNDI2QTc2RUJCMzlEMkExMEZBMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84NDhCMDA4MkRGM0FGNTBGNERBQTE0MjZBNzZFQkIzOUQyQTEw
RkEwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzk1MzY2NmUxLTFlNDEtNDJlZC1h
YmJjLWE4YzA4N2YzZjMzOS8wLzMyMzAzMzJlMzEzNDJlMzEzODJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMjMwMzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMsOEjANBgkqhkiG
9w0BAQsFAAOCAQEAqeicZPLqwok7FWVG4LtlxqwOz9qOklCNekXNYENV33eiLcfM
6WDcUhsvDVRuyOxVOy52w0E9ChqfLgdZQtsD040cP/VlnDfUpGNrUwZb6Srko3Dp
bxCdXOdj41MvVPLsFh8CFWVWtKMXlJZdS3ANAqjblZd0sf59PvbSYS46+mKq6JTC
ufCnMv0OBuL7dvfQuOIMy0HJa5skkn14G3dQVvgGOPGq3L4gF8u0Ua13fdqi2Zkh
ZaBzGEQBeI+tMw/iEGExrP0vu1Gs5nIZbw11uIesaXeMNBUaDgUdsBiqFQJwbBU6
7BUwJLhAhjflLfCyLEr52M/Kj453y0h8suU5+g==
-----END CERTIFICATE-----
Generated at Wed May 13 02:12:46 2026 by rpki-client