
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e31302e302f32342d3234203d3e203338373539.roa
File: 3230322e3138302e31302e302f32342d3234203d3e203338373539.roa (raw, json)
Hash identifier: vHjz5UdeUqbHIkQCC7AtvSrK78oHvCl0MOtP2/FpEcs=
Subject key identifier: AA:CF:51:A5:1D:3C:22:BB:1F:36:AF:07:43:16:F6:A3:13:E5:6A:1F
Certificate issuer: /CN=02062A0A8A708F654606A252EFBD31F81D738315
Certificate serial: 2D1E5424CDE4BA1EEB9FC34ED92923B7A0DF6BF5
Authority key identifier: 02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e31302e302f32342d3234203d3e203338373539.roa
Signing time: Sun 03 May 2026 02:55:50 +0000
ROA not before: Sun 03 May 2026 02:50:50 +0000
ROA not after: Sun 02 May 2027 02:55:50 +0000
asID: 38759
IP address blocks: 202.180.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl
rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:1e:54:24:cd:e4:ba:1e:eb:9f:c3:4e:d9:29:23:b7:a0:df:6b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02062A0A8A708F654606A252EFBD31F81D738315
Validity
Not Before: May 3 02:50:50 2026 GMT
Not After : May 2 02:55:50 2027 GMT
Subject: CN=AACF51A51D3C22BB1F36AF074316F6A313E56A1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ac:b8:50:e8:0c:ae:0c:69:19:16:c6:d3:13:
2f:74:7f:87:51:21:4e:c4:13:05:d2:7b:0c:97:4b:
45:2f:b4:2b:2c:0e:8a:f7:17:0b:10:bd:09:3d:2b:
d4:a6:e6:eb:f6:ad:17:a4:30:ca:e3:08:3f:ac:d8:
18:b1:46:fc:0f:77:03:94:d8:90:18:61:53:37:b5:
72:a4:49:7c:7c:ab:c9:1b:eb:6a:27:30:94:24:1e:
49:b3:76:74:0c:75:16:29:ca:f0:95:e2:c7:9f:8e:
d0:7b:6d:69:f8:b8:65:17:a5:1d:7d:d7:1e:05:8b:
23:ca:80:a2:ba:de:b7:bf:97:c4:68:12:05:01:1b:
47:51:4b:84:4d:5a:6b:b7:dd:c9:a9:11:cd:d0:c4:
44:f1:8c:e6:2f:c9:fa:7f:41:92:a9:fd:2b:ee:c4:
29:28:a9:67:40:80:9a:82:36:e4:32:59:a9:ce:b9:
eb:3b:ce:c8:5e:97:62:6b:fb:70:52:fd:6a:e8:12:
17:01:4e:fd:b1:be:b6:3d:c7:20:c3:75:c5:35:d5:
fb:bd:5f:9e:0a:a9:19:48:9b:44:48:e8:8d:87:2b:
39:fc:38:96:f7:09:84:e2:24:81:05:c1:db:09:6c:
41:09:32:fb:f9:46:02:9c:c4:b1:6f:a0:d7:1c:4b:
d0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CF:51:A5:1D:3C:22:BB:1F:36:AF:07:43:16:F6:A3:13:E5:6A:1F
X509v3 Authority Key Identifier:
keyid:02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e31302e302f32342d3234203d3e203338373539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.180.10.0/24
Signature Algorithm: sha256WithRSAEncryption
02:2b:8b:0e:78:5e:21:01:11:f1:8f:28:88:f2:ce:d4:a2:8e:
e8:d4:d6:ea:da:0e:76:ed:9b:ea:b6:4f:61:6c:7c:da:2c:a1:
c8:15:9e:f6:44:53:a1:a4:e0:5d:ce:79:32:c9:d8:f9:63:c8:
7c:46:c8:00:ca:45:c6:29:d7:a2:b9:bc:4d:fe:6c:5e:60:57:
ac:04:cb:c8:b2:be:5b:33:f9:f7:3c:c2:98:01:50:c6:7a:13:
9f:7c:d7:e9:9b:8d:78:46:e4:42:00:38:15:61:6d:85:82:95:
72:09:d0:b9:5e:db:03:43:1e:8a:e3:6e:df:0f:c1:09:6f:ee:
dd:68:cc:31:55:b4:66:2c:66:d3:ef:ef:8a:a0:1e:f1:92:7d:
a7:49:c0:08:72:48:32:9e:54:b6:a2:a0:83:bb:78:85:ad:94:
dd:ae:aa:73:a8:fa:30:38:a4:05:71:fb:3f:37:63:80:09:b5:
5e:0e:a9:08:b7:63:47:0f:34:ec:3a:6a:d1:20:58:70:38:23:
be:30:02:e8:31:ed:32:f0:4a:dd:24:d4:a9:d8:a1:f7:00:a7:
d8:08:87:9e:54:72:f8:3e:9a:53:7f:9b:b9:d9:57:3a:cb:21:
eb:4c:e8:08:76:9c:5c:64:30:b3:1a:9f:50:e8:ed:06:c0:b1:
aa:bc:53:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:08 2026 by rpki-client