
$ rpki-client -vvf rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa
File: 3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa (raw, json)
Hash identifier: YR0HydfCaE7NfKFCxJE82bjiC0S/odVbb40NJ2tVJg8=
Subject key identifier: 98:D0:AE:E4:88:57:95:B9:3F:43:31:1B:82:8A:82:11:B8:C1:2F:21
Certificate issuer: /CN=207EA811568CF1DB9A757936B650F6F68EBB08B5
Certificate serial: 7F86F2252EDFB065335DDFEBC79B0690D7AFA3C8
Authority key identifier: 20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa
Signing time: Sun 03 May 2026 02:53:13 +0000
ROA not before: Sun 03 May 2026 02:48:13 +0000
ROA not after: Sun 02 May 2027 02:53:13 +0000
asID: 140405
IP address blocks: 210.247.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.crl
rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 16:14:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:86:f2:25:2e:df:b0:65:33:5d:df:eb:c7:9b:06:90:d7:af:a3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=207EA811568CF1DB9A757936B650F6F68EBB08B5
Validity
Not Before: May 3 02:48:13 2026 GMT
Not After : May 2 02:53:13 2027 GMT
Subject: CN=98D0AEE4885795B93F43311B828A8211B8C12F21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:48:86:65:de:cc:e8:93:67:fb:77:a9:e8:4d:
03:64:c8:60:e5:d0:a2:5d:35:fa:60:1b:56:ab:45:
b7:4f:75:80:d4:05:ca:1d:c5:24:99:de:2c:b4:76:
af:e6:0b:e2:50:dc:24:13:ec:a7:df:5e:e8:0e:de:
51:57:41:76:d7:c2:99:0a:ec:3b:d8:70:d8:30:98:
f5:2f:e7:05:05:fa:aa:21:5a:bc:4b:db:61:c5:13:
6b:13:3d:17:75:0e:1a:5e:70:7f:a0:3b:41:c2:69:
f0:39:bf:99:b3:75:3c:83:90:c2:98:3d:b6:2f:26:
32:ba:68:52:8f:32:1f:e7:40:be:46:22:45:a7:2d:
27:4d:72:b0:87:b1:00:89:3e:bc:9c:8b:11:44:d9:
49:ab:68:fa:3a:b7:59:3a:48:4e:7c:49:bc:28:93:
9f:1b:09:59:05:97:91:3f:12:65:2f:26:6d:74:7d:
4b:d9:51:06:5b:f7:aa:93:29:40:1b:d5:a1:4e:a7:
38:15:f1:40:9b:f0:cb:b5:c5:f0:96:8a:2d:24:ec:
a8:ee:bc:73:d5:8f:61:54:83:72:cc:77:28:2d:e5:
1e:37:4b:e7:ce:a5:b5:24:cb:f0:94:50:50:a2:f8:
bd:de:5d:d9:75:89:e1:e2:84:09:41:66:23:d6:4d:
d2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D0:AE:E4:88:57:95:B9:3F:43:31:1B:82:8A:82:11:B8:C1:2F:21
X509v3 Authority Key Identifier:
keyid:20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.247.241.0/24
Signature Algorithm: sha256WithRSAEncryption
80:7b:18:56:12:5f:5e:bd:03:10:fa:4c:37:db:03:c7:39:89:
c4:a2:50:3e:89:da:db:7f:9c:9f:74:b9:95:e0:7d:f3:a6:b2:
92:c4:66:9c:09:38:4c:68:5e:a5:55:96:63:78:b4:5f:67:72:
0c:7b:7c:79:28:f9:1e:d0:62:75:10:35:fc:87:fe:d6:e8:23:
56:62:28:13:53:ff:a4:dd:4d:9b:3a:41:8e:1f:2f:82:90:d9:
3b:e4:77:12:09:48:34:e2:ac:b2:f2:d7:7b:3e:5e:47:44:40:
bd:f4:5a:ec:82:40:ad:90:07:2d:14:12:f3:af:5b:62:03:10:
98:d8:be:d6:e4:2c:6a:dd:f0:39:6c:cc:56:0c:b4:cb:92:4f:
62:a5:89:b4:50:dc:51:69:65:98:b6:6e:ec:a9:22:8e:ea:8e:
ab:e8:af:e3:f2:39:e0:1e:50:02:cd:00:05:a1:e1:5f:cf:17:
a8:fb:3d:72:c4:6d:a2:9b:76:9e:4a:a2:8d:7e:51:02:93:4a:
c9:82:9d:12:ed:02:63:da:84:a2:01:64:02:d2:4d:49:3b:81:
b6:f0:f4:14:cb:36:2f:fc:fb:55:75:dc:c6:f5:25:e1:a3:cf:
e0:ad:d2:1f:7a:ee:8c:5b:bc:6e:3a:e2:99:6c:ec:f6:ad:db:
fb:5d:14:ce
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUf4byJS7fsGUzXd/rx5sGkNevo8gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA3RUE4MTE1NjhDRjFEQjlBNzU3OTM2QjY1MEY2RjY4
RUJCMDhCNTAeFw0yNjA1MDMwMjQ4MTNaFw0yNzA1MDIwMjUzMTNaMDMxMTAvBgNV
BAMTKDk4RDBBRUU0ODg1Nzk1QjkzRjQzMzExQjgyOEE4MjExQjhDMTJGMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGSIZl3szok2f7d6noTQNkyGDl
0KJdNfpgG1arRbdPdYDUBcodxSSZ3iy0dq/mC+JQ3CQT7KffXugO3lFXQXbXwpkK
7DvYcNgwmPUv5wUF+qohWrxL22HFE2sTPRd1DhpecH+gO0HCafA5v5mzdTyDkMKY
PbYvJjK6aFKPMh/nQL5GIkWnLSdNcrCHsQCJPrycixFE2UmraPo6t1k6SE58Sbwo
k58bCVkFl5E/EmUvJm10fUvZUQZb96qTKUAb1aFOpzgV8UCb8Mu1xfCWii0k7Kju
vHPVj2FUg3LMdygt5R43S+fOpbUky/CUUFCi+L3eXdl1ieHihAlBZiPWTdIRAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUmNCu5IhXlbk/QzEbgoqCEbjBLyEwHwYDVR0j
BBgwFoAUIH6oEVaM8duadXk2tlD29o67CLUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTYxMjQzMjktZWMyMC00NDYwLWFjMzEtOWMzNmNmOTRmM2ZiLzAvMjA3RUE4MTE1
NjhDRjFEQjlBNzU3OTM2QjY1MEY2RjY4RUJCMDhCNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yMDdFQTgxMTU2OENGMURCOUE3NTc5MzZCNjUwRjZGNjhFQkIw
OEI1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzk2MTI0MzI5LWVjMjAtNDQ2MC1h
YzMxLTljMzZjZjk0ZjNmYi8wLzMyMzEzMDJlMzIzNDM3MmUzMjM0MzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzNDMwMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADS9/EwDQYJ
KoZIhvcNAQELBQADggEBAIB7GFYSX169AxD6TDfbA8c5icSiUD6J2tt/nJ90uZXg
ffOmspLEZpwJOExoXqVVlmN4tF9ncgx7fHko+R7QYnUQNfyH/tboI1ZiKBNT/6Td
TZs6QY4fL4KQ2TvkdxIJSDTirLLy13s+XkdEQL30WuyCQK2QBy0UEvOvW2IDEJjY
vtbkLGrd8DlszFYMtMuST2KlibRQ3FFpZZi2buypIo7qjqvor+PyOeAeUALNAAWh
4V/PF6j7PXLEbaKbdp5Koo1+UQKTSsmCnRLtAmPahKIBZALSTUk7gbbw9BTLNi/8
+1V13Mb1JeGjz+Ct0h967oxbvG464pls7Pat2/tdFM4=
-----END CERTIFICATE-----
Generated at Wed May 13 09:17:25 2026 by rpki-client