
$ rpki-client -vvf rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234322e302f32342d3234203d3e20313331373435.roa
File: 3231302e3234372e3234322e302f32342d3234203d3e20313331373435.roa (raw, json)
Hash identifier: uY61y6kRV9wHYHvH9+Wx4Yw9pW9DegwzHAT0nI2wisE=
Subject key identifier: 0B:BB:E3:64:45:B2:D6:96:8F:DB:C2:39:AB:7B:4B:D2:88:AD:94:A9
Certificate issuer: /CN=207EA811568CF1DB9A757936B650F6F68EBB08B5
Certificate serial: 6FAC525F1ADC0C429137CCFE930A03E942D8AFC5
Authority key identifier: 20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234322e302f32342d3234203d3e20313331373435.roa
Signing time: Sun 03 May 2026 02:53:08 +0000
ROA not before: Sun 03 May 2026 02:48:08 +0000
ROA not after: Sun 02 May 2027 02:53:08 +0000
asID: 131745
IP address blocks: 210.247.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.crl
rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:ac:52:5f:1a:dc:0c:42:91:37:cc:fe:93:0a:03:e9:42:d8:af:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=207EA811568CF1DB9A757936B650F6F68EBB08B5
Validity
Not Before: May 3 02:48:08 2026 GMT
Not After : May 2 02:53:08 2027 GMT
Subject: CN=0BBBE36445B2D6968FDBC239AB7B4BD288AD94A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:97:39:18:83:e3:e3:3f:4b:78:aa:50:d8:e6:
41:2e:b5:d8:9a:22:53:d2:6a:48:0f:7e:e8:77:e6:
ac:7f:75:d8:29:5c:12:02:d7:a3:8a:21:b3:f2:47:
cf:12:fc:11:c7:a7:3e:44:4b:67:fc:fb:5a:f4:48:
a9:e9:23:d7:6f:bf:54:d5:ef:31:93:a7:81:f0:3e:
19:42:a1:84:20:72:d2:5c:67:8b:93:d4:2b:27:aa:
df:8a:53:2f:ac:f5:f7:fd:62:fa:c2:ed:67:df:bd:
31:7e:b7:17:93:9f:84:3e:c8:3a:6a:c2:79:78:62:
71:5f:3b:0b:d0:53:0f:d2:67:ae:1a:73:29:e9:5d:
f7:77:7c:b0:58:2a:a3:ba:f1:7d:ae:b2:60:b8:1a:
36:a6:62:4e:e1:79:ec:d3:83:fe:19:17:f1:35:51:
cc:89:c2:00:d7:fb:12:5c:ab:39:4b:ce:38:84:2b:
3c:db:50:d1:b7:c8:ab:7b:d3:4f:d7:b0:ba:88:19:
1e:02:84:17:cf:9d:54:65:be:09:9e:de:69:83:8e:
a0:95:df:50:50:b2:fe:72:17:47:43:c0:30:5a:91:
70:1f:48:2f:39:1b:e4:30:bb:cd:7c:65:c2:3b:7b:
e1:d7:30:48:6d:b8:d7:17:26:1d:1a:99:90:20:a1:
37:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BB:E3:64:45:B2:D6:96:8F:DB:C2:39:AB:7B:4B:D2:88:AD:94:A9
X509v3 Authority Key Identifier:
keyid:20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234322e302f32342d3234203d3e20313331373435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.247.242.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:3a:fc:1c:99:54:68:b2:59:5d:d9:cf:3b:ff:fb:52:2f:69:
ae:f5:46:c3:fb:84:40:8d:a7:ba:a3:37:0a:96:3c:3c:1f:c7:
bc:55:ef:e6:84:66:02:0d:9b:c7:24:c1:93:22:3b:b6:76:b8:
1d:b7:07:9e:6c:1d:54:c5:f9:1b:75:c7:ae:a7:df:84:99:44:
eb:f3:65:ea:9a:02:85:59:8b:9b:5d:9c:db:22:7a:15:66:10:
82:e5:ff:fd:ef:9d:fd:c6:62:94:cc:dd:5c:77:9f:19:10:be:
ec:8d:83:4a:97:e0:ba:1f:88:6c:d9:b0:03:4b:ce:7c:45:df:
45:fe:62:39:97:c9:b9:f1:92:a9:17:0d:55:65:83:96:69:25:
2c:ad:81:a9:b0:a1:5c:e7:4f:6d:a8:6c:18:c1:c4:3e:0d:c2:
ca:81:13:fb:79:cd:7c:c2:50:f2:3c:97:15:26:12:c4:5d:92:
71:12:47:75:6a:7a:82:d5:0a:2e:e5:71:dd:72:50:00:ad:80:
f7:30:69:94:9f:9e:39:53:da:dc:20:56:3c:c0:f9:1d:3d:a8:
20:9e:47:c1:a9:8b:c8:e1:b6:5f:c2:05:7d:68:38:ed:81:8e:
55:56:b9:93:5c:93:54:8f:cf:a4:94:15:3f:96:a8:6d:5d:da:
6a:9b:c9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:47:03 2026 by rpki-client