
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e392e302f32342d3234203d3e203338373539.roa
File: 3230322e3138302e392e302f32342d3234203d3e203338373539.roa (raw, json)
Hash identifier: Q4I1ovKyT16FiPygNOO0hXygDOJfZQA7jOOYPptFFvM=
Subject key identifier: 42:DE:49:82:98:9A:05:8D:CB:77:19:5D:B3:EF:C3:9B:14:EB:4F:0F
Certificate issuer: /CN=02062A0A8A708F654606A252EFBD31F81D738315
Certificate serial: 434559908354953E8F0C93B3C382ADC70156077D
Authority key identifier: 02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e392e302f32342d3234203d3e203338373539.roa
Signing time: Sun 03 May 2026 02:55:47 +0000
ROA not before: Sun 03 May 2026 02:50:47 +0000
ROA not after: Sun 02 May 2027 02:55:47 +0000
asID: 38759
IP address blocks: 202.180.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl
rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:45:59:90:83:54:95:3e:8f:0c:93:b3:c3:82:ad:c7:01:56:07:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02062A0A8A708F654606A252EFBD31F81D738315
Validity
Not Before: May 3 02:50:47 2026 GMT
Not After : May 2 02:55:47 2027 GMT
Subject: CN=42DE4982989A058DCB77195DB3EFC39B14EB4F0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:1a:11:79:40:eb:6b:01:c4:bc:51:e2:0a:
14:68:26:ef:d5:6a:d0:f5:cb:9c:3b:9a:9a:fa:d9:
2f:12:07:58:92:2e:aa:55:4f:ff:5f:a0:7d:b8:a3:
93:f3:67:24:ab:d1:8a:5f:4d:c8:53:df:78:4c:24:
58:1b:39:07:5a:13:91:52:88:70:a3:76:d4:df:fc:
3e:6e:53:b3:d2:20:eb:86:ba:72:26:00:80:8c:88:
51:d0:47:d6:bb:8c:1f:6a:85:59:50:fc:4f:9a:33:
95:1a:46:3d:d9:5f:3a:8d:35:6e:67:9b:b3:4a:53:
91:b1:77:de:b4:af:f1:22:8c:a1:70:41:bf:a7:a6:
90:7e:e4:9d:5c:fe:1d:00:0a:0c:af:4c:56:f6:36:
7b:ef:61:8b:41:25:b3:1e:00:64:fa:ee:ce:4e:aa:
dd:94:b1:41:72:86:31:eb:fc:08:59:f9:1f:21:6a:
5a:cd:c9:0e:3d:c6:31:4e:5c:b7:05:98:63:39:c3:
54:7c:4c:93:8a:37:70:f7:56:fd:7e:b4:e1:3f:61:
74:8e:74:34:b1:86:f0:34:6a:80:3b:3c:db:2a:c5:
7a:d9:44:ed:45:76:ab:44:fc:56:81:64:f2:c7:f8:
77:58:2c:a7:2a:cc:e8:fd:8e:73:88:ad:36:7f:6f:
05:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DE:49:82:98:9A:05:8D:CB:77:19:5D:B3:EF:C3:9B:14:EB:4F:0F
X509v3 Authority Key Identifier:
keyid:02:06:2A:0A:8A:70:8F:65:46:06:A2:52:EF:BD:31:F8:1D:73:83:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/02062A0A8A708F654606A252EFBD31F81D738315.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/02062A0A8A708F654606A252EFBD31F81D738315.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e392e302f32342d3234203d3e203338373539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.180.9.0/24
Signature Algorithm: sha256WithRSAEncryption
17:aa:fe:6b:11:09:5d:63:8c:90:f4:43:fc:09:05:a9:67:47:
e2:7b:4a:da:a8:8d:79:3e:67:ec:0b:07:a4:12:aa:b5:bd:d6:
21:35:1e:c5:5b:50:49:db:d2:31:c4:14:56:e9:25:8b:97:1e:
a9:2d:85:99:76:6a:12:49:5c:14:40:d3:f0:74:cd:76:a1:7e:
13:d4:dc:2e:06:9e:71:86:49:bf:a8:60:cc:c6:6d:70:0f:f3:
4a:a0:f5:0a:e2:e8:db:07:b4:ee:fa:9a:12:c8:8b:2b:bd:30:
7f:63:52:30:20:c0:74:14:be:3c:03:53:68:e1:29:95:8e:21:
d3:53:45:e6:21:56:fa:c9:0b:3e:38:f3:e8:14:d7:eb:79:14:
76:96:76:58:3e:5a:55:2f:77:07:22:c9:df:85:45:62:7c:76:
a0:e3:1b:6d:4b:d6:21:3a:18:73:e2:06:05:fe:83:c3:8e:33:
57:2d:a8:50:2e:27:63:b0:0e:9d:c7:12:28:25:22:3f:cf:00:
8b:14:c1:8f:3f:f7:19:51:e4:cf:8f:49:30:2d:11:39:b3:2b:
86:c8:ea:56:55:d8:c1:14:31:c2:ad:4e:78:39:2f:a1:0a:21:
d6:c9:f9:03:5b:5b:9d:1a:d0:62:f9:ba:bd:a7:c3:66:55:e4:
9d:54:98:6f
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUQ0VZkINUlT6PDJOzw4KtxwFWB30wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIwNjJBMEE4QTcwOEY2NTQ2MDZBMjUyRUZCRDMxRjgx
RDczODMxNTAeFw0yNjA1MDMwMjUwNDdaFw0yNzA1MDIwMjU1NDdaMDMxMTAvBgNV
BAMTKDQyREU0OTgyOTg5QTA1OERDQjc3MTk1REIzRUZDMzlCMTRFQjRGMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyTxoReUDrawHEvFHiChRoJu/V
atD1y5w7mpr62S8SB1iSLqpVT/9foH24o5PzZySr0YpfTchT33hMJFgbOQdaE5FS
iHCjdtTf/D5uU7PSIOuGunImAICMiFHQR9a7jB9qhVlQ/E+aM5UaRj3ZXzqNNW5n
m7NKU5Gxd960r/EijKFwQb+nppB+5J1c/h0ACgyvTFb2NnvvYYtBJbMeAGT67s5O
qt2UsUFyhjHr/AhZ+R8halrNyQ49xjFOXLcFmGM5w1R8TJOKN3D3Vv1+tOE/YXSO
dDSxhvA0aoA7PNsqxXrZRO1FdqtE/FaBZPLH+HdYLKcqzOj9jnOIrTZ/bwVjAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUQt5JgpiaBY3Ldxlds+/DmxTrTw8wHwYDVR0j
BBgwFoAUAgYqCopwj2VGBqJS770x+B1zgxUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTEyZjIyOGMtZGYyMC00NzI4LTlmOTYtOGZhYTEzNDAwMTdhLzAvMDIwNjJBMEE4
QTcwOEY2NTQ2MDZBMjUyRUZCRDMxRjgxRDczODMxNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wMjA2MkEwQThBNzA4RjY1NDYwNkEyNTJFRkJEMzFGODFENzM4
MzE1LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2ExMmYyMjhjLWRmMjAtNDcyOC05
Zjk2LThmYWExMzQwMDE3YS8wLzMyMzAzMjJlMzEzODMwMmUzOTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMzMzgzNzM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKtAkwDQYJKoZIhvcN
AQELBQADggEBABeq/msRCV1jjJD0Q/wJBalnR+J7StqojXk+Z+wLB6QSqrW91iE1
HsVbUEnb0jHEFFbpJYuXHqkthZl2ahJJXBRA0/B0zXahfhPU3C4GnnGGSb+oYMzG
bXAP80qg9Qri6NsHtO76mhLIiyu9MH9jUjAgwHQUvjwDU2jhKZWOIdNTReYhVvrJ
Cz448+gU1+t5FHaWdlg+WlUvdwciyd+FRWJ8dqDjG21L1iE6GHPiBgX+g8OOM1ct
qFAuJ2OwDp3HEiglIj/PAIsUwY8/9xlR5M+PSTAtETmzK4bI6lZV2MEUMcKtTng5
L6EKIdbJ+QNbW50a0GL5ur2nw2ZV5J1UmG8=
-----END CERTIFICATE-----
Generated at Wed May 13 12:40:10 2026 by rpki-client