
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e372e302f32342d3234203d3e203338373539.roa
File: 3230322e3138302e372e302f32342d3234203d3e203338373539.roa (raw, json)
Hash identifier: k/z6SFQYMRP25rBny9yAVOgDZ8IEwiJ/5gKXdBpk2aI=
Subject key identifier: 22:AD:10:BF:5C:91:8A:B4:B5:77:95:03:42:28:59:A2:63:77:C8:1C
Certificate issuer: /CN=02062A0A8A708F654606A252EFBD31F81D738315
Certificate serial: 7F3CD65C5185FDD9D405A12F2C7B329BCCF90CCC
Authority key identifier: 02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e372e302f32342d3234203d3e203338373539.roa
Signing time: Sun 03 May 2026 02:55:50 +0000
ROA not before: Sun 03 May 2026 02:50:50 +0000
ROA not after: Sun 02 May 2027 02:55:50 +0000
asID: 38759
IP address blocks: 202.180.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl
rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:3c:d6:5c:51:85:fd:d9:d4:05:a1:2f:2c:7b:32:9b:cc:f9:0c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02062A0A8A708F654606A252EFBD31F81D738315
Validity
Not Before: May 3 02:50:50 2026 GMT
Not After : May 2 02:55:50 2027 GMT
Subject: CN=22AD10BF5C918AB4B5779503422859A26377C81C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d9:1d:b2:2d:bf:1e:fd:63:8c:44:68:51:c5:
6d:00:64:28:d6:d3:76:17:2b:dc:6b:70:e7:84:a1:
95:eb:b7:0a:7d:61:db:27:ae:4a:f8:7a:f2:5d:22:
85:ee:d8:4e:74:13:72:45:90:79:bd:ec:4d:ff:ae:
bd:c9:6c:3c:bb:b1:43:1b:ed:57:e0:9c:06:e6:ee:
99:05:c4:70:5d:49:f7:38:bb:a0:3b:bb:e7:91:3c:
97:26:c2:a8:3a:59:e2:b6:08:c8:e5:32:f7:72:87:
65:1d:ba:da:58:62:23:98:52:5c:c2:c2:03:71:25:
e5:1f:16:88:85:7f:31:9c:40:31:77:06:41:82:76:
b2:b6:1e:32:3a:92:13:cb:5b:dd:18:7b:6b:e6:c0:
bc:a4:66:96:18:61:5f:a1:b7:6b:40:39:59:41:f6:
01:d2:e9:4a:49:9e:bb:55:a8:4a:e2:fd:f2:ce:16:
c4:a5:05:03:c2:ea:77:af:fc:d8:64:1b:a4:de:b1:
0b:f9:2f:0b:7c:14:83:24:11:c9:cf:09:fc:71:7d:
96:a8:99:56:20:77:e6:78:91:cc:61:03:a2:ca:79:
6d:42:79:e2:ef:99:20:f3:af:4a:01:ce:f1:8b:c9:
f3:84:85:c6:e4:20:9a:d8:90:b1:a8:64:84:1d:c2:
af:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AD:10:BF:5C:91:8A:B4:B5:77:95:03:42:28:59:A2:63:77:C8:1C
X509v3 Authority Key Identifier:
keyid:02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e372e302f32342d3234203d3e203338373539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.180.7.0/24
Signature Algorithm: sha256WithRSAEncryption
74:ae:96:2e:fe:f1:37:29:b5:bf:61:70:62:20:cf:ad:12:25:
6b:85:95:08:ae:a3:d0:27:9c:aa:3d:16:fc:d9:5f:67:67:f1:
f6:ed:8a:b4:30:f8:8b:e8:1b:d1:f8:b7:cf:98:d4:36:42:ac:
1d:a1:ee:b1:88:78:ea:c5:b2:92:c1:87:c9:5e:e3:2d:db:53:
86:c4:79:82:77:f2:79:bb:69:14:06:4a:72:29:52:09:a4:00:
99:d9:92:d8:7c:a4:46:96:5d:41:2c:01:64:14:b1:93:f2:94:
00:57:20:54:cc:dd:0d:d3:04:4e:b1:75:b0:17:72:af:a8:c0:
e7:50:d6:a4:56:5f:90:d9:f6:70:8c:34:3e:9b:2e:7b:2b:ae:
9d:cc:32:06:75:c4:3b:60:26:8a:38:e6:9d:54:c1:6b:e3:75:
05:5e:75:43:8d:1a:b3:2a:a3:d7:fe:16:b5:e4:fc:94:ab:c4:
90:72:82:62:87:dd:ad:45:5e:89:ca:03:4b:a8:a6:17:ca:91:
6a:da:1d:02:1b:3f:0f:8a:b2:37:47:3c:a2:05:3b:bf:58:aa:
cd:f1:e1:a8:23:af:93:9c:a7:5b:8c:1a:be:ae:dc:ff:20:ad:
14:0e:e0:a3:c7:6a:2f:ab:30:11:58:b8:fc:f2:b5:fe:14:ba:
6b:5b:13:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:14 2026 by rpki-client