
$ rpki-client -vvf rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234332e302f32342d3234203d3e20313331373435.roa
File: 3231302e3234372e3234332e302f32342d3234203d3e20313331373435.roa (raw, json)
Hash identifier: 3+hZdoJvV0leVOsq8DNlWEWL3yYnq4+zSQ1hc+4P+6k=
Subject key identifier: DB:A3:09:20:97:51:64:21:A2:6E:AD:18:12:8C:D3:F2:6D:09:95:51
Certificate issuer: /CN=207EA811568CF1DB9A757936B650F6F68EBB08B5
Certificate serial: 48D88BA51EA4B66A6CFE1E565FFC8AF178F6F85F
Authority key identifier: 20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234332e302f32342d3234203d3e20313331373435.roa
Signing time: Sun 03 May 2026 02:53:07 +0000
ROA not before: Sun 03 May 2026 02:48:07 +0000
ROA not after: Sun 02 May 2027 02:53:07 +0000
asID: 131745
IP address blocks: 210.247.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.crl
rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:d8:8b:a5:1e:a4:b6:6a:6c:fe:1e:56:5f:fc:8a:f1:78:f6:f8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=207EA811568CF1DB9A757936B650F6F68EBB08B5
Validity
Not Before: May 3 02:48:07 2026 GMT
Not After : May 2 02:53:07 2027 GMT
Subject: CN=DBA3092097516421A26EAD18128CD3F26D099551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e4:3f:16:4a:44:bc:0c:e1:bc:3b:90:ab:9c:
b8:bd:1a:d6:d2:e3:29:aa:f5:a6:56:16:1c:bf:e0:
3b:e5:94:4e:98:1c:7e:60:74:88:c2:e1:f8:31:e3:
8b:7a:44:ab:70:68:45:7f:4a:b7:c1:4c:bb:c2:0f:
4b:a2:b1:49:47:3d:5f:29:1e:e7:1c:c1:8b:d0:6b:
51:ac:c0:97:b7:74:41:94:df:03:d6:74:06:2e:fc:
a0:f9:4c:ca:a0:cb:81:f5:a6:32:ea:62:6a:3f:3e:
ad:c4:cb:2c:13:80:23:cc:f8:93:8c:8d:4a:f8:bb:
18:61:f1:45:97:2e:b8:d3:33:ad:ff:6f:45:a8:e6:
64:7d:23:40:03:bd:c0:79:6f:26:14:8c:10:23:be:
67:4a:2f:fc:31:0b:46:a8:ef:e8:47:d8:bb:9a:24:
0d:dd:9f:87:a0:0f:9a:af:a6:4c:18:b4:0d:e9:17:
d6:d6:08:e2:d5:08:e7:0f:ac:95:8c:a6:e3:f9:45:
24:6d:88:c1:01:41:66:75:79:53:d3:c5:55:1e:00:
2a:6f:70:70:71:62:bd:77:b2:bd:f5:47:02:24:be:
a6:d7:c3:91:0c:f6:a6:be:66:c8:24:96:6c:99:0b:
f9:10:79:11:41:a9:bd:fa:93:a0:a1:2b:17:2d:0a:
d7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A3:09:20:97:51:64:21:A2:6E:AD:18:12:8C:D3:F2:6D:09:95:51
X509v3 Authority Key Identifier:
keyid:20:7E:A8:11:56:8C:F1:DB:9A:75:79:36:B6:50:F6:F6:8E:BB:08:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/207EA811568CF1DB9A757936B650F6F68EBB08B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207EA811568CF1DB9A757936B650F6F68EBB08B5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234332e302f32342d3234203d3e20313331373435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.247.243.0/24
Signature Algorithm: sha256WithRSAEncryption
60:25:f2:98:ea:34:1a:1d:a1:23:f2:a6:15:61:30:19:51:7c:
58:a2:e3:f3:d6:22:3b:18:52:bd:d8:f1:00:d9:fd:2c:23:b5:
92:49:be:6e:e2:22:d8:94:9f:8e:06:10:a0:72:af:52:0e:ad:
ef:76:f5:e3:4c:90:0e:4f:b2:f1:af:16:f4:a2:fe:75:45:ec:
66:18:c3:4b:01:f1:6d:59:6a:f2:24:87:25:18:26:5b:3b:e4:
fe:cd:bf:48:65:86:ff:d2:cc:97:c0:bd:88:2d:4c:a4:bd:08:
6e:3f:bd:78:03:20:01:b9:06:22:c5:5a:67:5a:f2:ce:65:57:
2e:f5:66:31:2c:3c:94:6e:70:1f:ad:88:44:6f:7a:2c:57:2e:
df:11:99:af:dd:5e:97:89:7e:a8:ca:9f:97:29:fd:4e:8d:a7:
c9:15:96:41:b3:35:fe:85:5e:bc:ad:e9:8d:07:8c:3a:a6:5c:
66:5e:b6:0b:34:ba:99:a8:ef:50:c5:a6:33:6c:83:47:4c:6e:
e5:1b:48:d3:ee:86:a4:8a:66:d0:0b:8c:4c:16:ed:09:15:73:
2f:48:7c:c0:97:24:43:bf:c6:9c:1c:ca:fe:4f:a5:32:b0:4e:
bc:4d:7f:15:ba:2e:d2:09:a4:8c:3c:f2:42:1c:6d:c6:65:90:
22:08:ed:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:56:01 2026 by rpki-client