
$ rpki-client -vvf rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/3230322e35312e32312e302f32342d3234203d3e20313439343039.roa
File: 3230322e35312e32312e302f32342d3234203d3e20313439343039.roa (raw, json)
Hash identifier: xBC6wC0qaSZA17wYqb5z2deY4tddRBLazqglI6ol9r0=
Subject key identifier: 05:58:89:44:BD:CB:68:1F:F2:91:C9:7C:5F:1F:51:DA:39:09:B1:DF
Certificate issuer: /CN=4D4BF84E7D6F39D627BE5B50A917315DFEBF1515
Certificate serial: 6ACC98DAD5B1B35E268B80048529ECBA606963BF
Authority key identifier: 4D:4B:F8:4E:7D:6F:39:D6:27:BE:5B:50:A9:17:31:5D:FE:BF:15:15
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/3230322e35312e32312e302f32342d3234203d3e20313439343039.roa
Signing time: Sun 03 May 2026 02:53:47 +0000
ROA not before: Sun 03 May 2026 02:48:47 +0000
ROA not after: Sun 02 May 2027 02:53:47 +0000
asID: 149409
IP address blocks: 202.51.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.crl
rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:58:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:cc:98:da:d5:b1:b3:5e:26:8b:80:04:85:29:ec:ba:60:69:63:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D4BF84E7D6F39D627BE5B50A917315DFEBF1515
Validity
Not Before: May 3 02:48:47 2026 GMT
Not After : May 2 02:53:47 2027 GMT
Subject: CN=05588944BDCB681FF291C97C5F1F51DA3909B1DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f2:61:f0:8b:91:60:4f:84:9f:94:ae:5f:a2:
ec:ad:57:06:2f:88:51:5d:71:a9:1f:90:a7:b8:6a:
26:81:07:72:07:cc:53:e1:80:60:e8:9f:7e:7c:3b:
67:bd:d5:5a:e3:56:05:00:8d:22:17:90:aa:c7:15:
fd:0a:cc:4a:d8:a8:fb:86:d4:93:4d:a7:8b:ca:6e:
ee:b3:2a:fb:8b:3f:23:98:a0:94:01:da:0e:e4:18:
94:31:e8:b3:bc:a2:7c:4b:2c:3c:a4:d4:bb:78:81:
74:fb:bb:ab:1a:a3:e7:d2:56:c7:4f:5d:ac:d9:22:
67:d9:ca:ab:f3:43:a6:01:f9:dd:f0:e2:08:42:8a:
7a:62:1b:d0:ea:e5:4a:aa:a8:22:c8:82:46:31:a9:
1d:41:d4:c8:10:3e:02:75:1e:ac:54:bd:47:96:de:
07:85:cf:72:9b:65:67:a1:22:00:8a:66:b8:9f:3b:
95:9c:0f:c4:b7:b3:d9:86:d4:73:a0:ab:65:a7:3c:
6e:40:17:50:aa:0a:a2:f4:2e:e6:24:d3:43:f1:e5:
d2:9a:88:36:3d:d3:53:b5:70:96:7f:92:f3:7f:ab:
f4:99:e4:da:db:bf:03:83:da:3e:d1:38:78:c6:31:
46:a2:79:6f:85:97:e0:7a:1f:ff:c9:93:7f:d3:65:
fd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:58:89:44:BD:CB:68:1F:F2:91:C9:7C:5F:1F:51:DA:39:09:B1:DF
X509v3 Authority Key Identifier:
keyid:4D:4B:F8:4E:7D:6F:39:D6:27:BE:5B:50:A9:17:31:5D:FE:BF:15:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D4BF84E7D6F39D627BE5B50A917315DFEBF1515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/3230322e35312e32312e302f32342d3234203d3e20313439343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.51.21.0/24
Signature Algorithm: sha256WithRSAEncryption
84:34:8d:f2:47:bf:56:6a:5f:25:9f:5a:0e:d2:12:37:ed:db:
43:a9:fd:3a:f6:56:d2:34:53:3f:9c:3a:4e:03:95:49:3f:26:
e4:17:0c:f3:49:62:71:98:9b:cb:f7:f7:dc:e8:53:0f:c1:9e:
eb:79:9c:09:83:88:84:c8:06:eb:8a:d0:b2:9d:4d:4c:5b:98:
a1:54:80:7b:bd:2e:2e:97:1f:83:b1:90:96:c4:fc:54:58:96:
ac:a4:0f:d3:08:3e:db:fd:53:26:06:e7:36:21:1a:1d:e6:38:
63:a0:51:75:e4:a4:27:72:81:c0:e2:88:ff:92:a5:bb:83:dc:
1a:c2:eb:81:05:d6:39:d1:b7:5a:e0:e8:94:e8:f1:00:4d:36:
92:c9:60:6f:a3:9b:de:54:29:e3:53:ee:e8:fb:8a:19:8a:4e:
fc:39:6c:c8:1a:e4:ff:a5:93:d0:3d:6a:ce:b3:31:c1:ef:80:
2b:89:6f:09:65:fa:dd:40:9d:9d:c7:de:15:04:5c:1b:09:f7:
32:ee:7a:04:14:c7:88:04:ed:90:7d:2b:8c:de:2b:87:6e:f0:
66:a8:25:c1:68:85:10:dc:77:04:88:1c:6d:19:ad:ec:1a:c7:
36:ad:96:9a:32:cf:26:42:a0:62:b9:2c:aa:d6:44:53:91:36:
1b:00:9b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:33 2026 by rpki-client