
$ rpki-client -vvf rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/3230322e35312e31362e302f32332d3234203d3e203233393530.roa
File: 3230322e35312e31362e302f32332d3234203d3e203233393530.roa (raw, json)
Hash identifier: NFMSe8jpXIOrJJynKVDw112aSae0hUPV8Ycnly1ty30=
Subject key identifier: F5:2C:AB:3D:27:47:2A:3B:ED:E0:7B:7A:24:A2:32:72:EF:97:0D:2B
Certificate issuer: /CN=4D4BF84E7D6F39D627BE5B50A917315DFEBF1515
Certificate serial: 56564F739359604E5259EF2BDB020492731DE3BF
Authority key identifier: 4D:4B:F8:4E:7D:6F:39:D6:27:BE:5B:50:A9:17:31:5D:FE:BF:15:15
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/3230322e35312e31362e302f32332d3234203d3e203233393530.roa
Signing time: Sun 03 May 2026 02:53:48 +0000
ROA not before: Sun 03 May 2026 02:48:48 +0000
ROA not after: Sun 02 May 2027 02:53:48 +0000
asID: 23950
IP address blocks: 202.51.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.crl
rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:56:4f:73:93:59:60:4e:52:59:ef:2b:db:02:04:92:73:1d:e3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D4BF84E7D6F39D627BE5B50A917315DFEBF1515
Validity
Not Before: May 3 02:48:48 2026 GMT
Not After : May 2 02:53:48 2027 GMT
Subject: CN=F52CAB3D27472A3BEDE07B7A24A23272EF970D2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:16:10:13:d4:02:1a:f8:c7:1d:26:73:5a:07:
68:4a:71:e6:e3:e1:27:65:ba:2b:49:11:6b:74:6f:
07:59:e9:b5:95:c0:99:f3:1f:ab:9b:b5:3d:c4:07:
a2:40:fc:6b:4b:b1:86:4d:ba:f6:6c:88:12:1a:4f:
77:9a:2f:99:ef:0d:24:92:11:78:81:91:69:ab:54:
c1:55:83:38:7b:e4:57:6a:c7:f9:ba:b6:8a:56:82:
7d:4d:4d:1a:1b:d2:12:ab:44:f2:81:77:55:23:fb:
bd:af:5e:e2:b2:4e:d5:5d:d7:a8:cc:f4:e7:d1:45:
5f:91:f8:95:a4:52:3b:56:37:d9:13:c6:28:c2:62:
b0:8f:0a:3a:36:43:be:a7:e1:70:2f:14:c6:ac:39:
69:9c:6b:e4:75:88:37:7c:73:27:5c:31:3b:17:18:
ce:d0:f0:4b:4f:38:e1:0a:96:5f:dd:e2:35:11:5e:
14:f4:a3:c9:5c:77:af:29:cd:34:ad:d5:f1:38:fa:
61:86:42:76:c2:52:dc:28:c0:a2:66:7c:a0:96:89:
9c:21:8c:5e:46:66:22:0a:32:d3:5b:ea:8a:82:2b:
c1:e2:4e:6c:9f:32:9d:5b:37:e8:19:e0:3c:60:50:
68:d9:ad:0e:89:6e:34:95:71:6d:ea:d0:a2:60:a4:
6f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2C:AB:3D:27:47:2A:3B:ED:E0:7B:7A:24:A2:32:72:EF:97:0D:2B
X509v3 Authority Key Identifier:
keyid:4D:4B:F8:4E:7D:6F:39:D6:27:BE:5B:50:A9:17:31:5D:FE:BF:15:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/3230322e35312e31362e302f32332d3234203d3e203233393530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.51.16.0/23
Signature Algorithm: sha256WithRSAEncryption
91:90:b0:95:28:e4:0d:b9:a0:73:d8:94:d4:a7:ef:d2:bd:51:
05:13:7f:03:a5:95:4a:9e:5e:fa:ff:8e:9a:d9:31:19:89:35:
39:db:d7:49:b6:11:7a:7b:01:3c:81:ea:a6:6c:8c:0f:aa:a7:
bc:9e:7a:0f:6d:79:b1:af:24:77:8b:14:0d:fb:80:41:3f:9f:
59:79:35:cf:03:76:67:56:cf:e0:c0:12:28:85:0a:da:82:76:
91:e2:26:64:68:73:db:38:37:2e:fd:2a:7d:6c:57:a3:5c:85:
e2:cc:cc:98:7c:d7:75:b0:dd:ca:88:3c:b9:1d:e5:a7:72:6f:
a8:a1:47:3b:5e:e6:6f:73:ec:5b:65:3b:58:24:10:d2:1b:41:
51:06:99:97:b3:97:5b:6c:59:fe:ba:54:1e:e4:45:11:cf:2b:
ef:3b:99:67:ff:b1:36:8e:a8:f6:44:45:4d:00:f6:24:8a:ce:
46:9e:ac:d9:22:8b:06:35:3d:7c:48:b3:9d:fd:28:1b:fe:d2:
fa:07:7c:10:a2:ad:4e:1a:46:05:eb:3b:a9:a5:25:9f:4c:9d:
e8:99:13:38:e7:ad:dd:57:9b:11:7f:60:ee:b2:b2:df:24:f4:
1a:c3:63:e9:a2:68:e0:3c:9a:07:62:5f:fa:4b:14:da:4f:9f:
62:c6:89:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:39:55 2026 by rpki-client