
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3134312e302f32342d3234203d3e203234323036.roa
File: 3230332e38342e3134312e302f32342d3234203d3e203234323036.roa (raw, json)
Hash identifier: R8XsLLiQgeiVikjmq/bw0lBjlifQX0sveTtDTyBFbNw=
Subject key identifier: 21:46:48:F9:24:4D:15:D9:02:9E:ED:B4:B8:B1:32:E1:A5:C2:35:57
Certificate issuer: /CN=E6B678AE8DC843399DF534610764D871D4D698D8
Certificate serial: 2D4C1F360ADAD549AEEBAF35314977526E8EA587
Authority key identifier: E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3134312e302f32342d3234203d3e203234323036.roa
Signing time: Sun 03 May 2026 02:57:31 +0000
ROA not before: Sun 03 May 2026 02:52:31 +0000
ROA not after: Sun 02 May 2027 02:57:31 +0000
asID: 24206
IP address blocks: 203.84.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl
rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:4c:1f:36:0a:da:d5:49:ae:eb:af:35:31:49:77:52:6e:8e:a5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E6B678AE8DC843399DF534610764D871D4D698D8
Validity
Not Before: May 3 02:52:31 2026 GMT
Not After : May 2 02:57:31 2027 GMT
Subject: CN=214648F9244D15D9029EEDB4B8B132E1A5C23557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:df:54:e9:98:d3:cb:7b:cf:db:25:01:31:17:
c5:e5:74:0c:3d:61:a5:51:a5:4c:b9:35:83:f2:e8:
06:24:f2:b9:53:47:78:92:eb:a8:7a:25:b4:d7:ff:
b1:2f:e0:b9:43:0c:7f:27:d7:c6:1a:12:14:21:bf:
7a:34:9c:d9:07:72:76:ce:d5:6b:6e:48:62:49:de:
78:30:5c:eb:16:2e:d5:5f:72:2f:78:ca:f1:ad:f4:
e4:95:e9:aa:d7:81:d3:71:28:3c:c4:7b:d8:fa:2d:
b2:20:2c:2c:d3:f8:48:00:2b:ed:75:93:17:c7:0c:
4a:eb:55:52:1b:3e:7d:a2:bf:ec:3d:22:4a:9e:72:
a4:34:b5:aa:1f:7b:67:6d:00:1a:4c:f9:5d:4f:c7:
ed:a4:af:de:61:be:21:71:51:16:17:87:2b:cf:3b:
b4:d2:1d:f3:cb:13:6b:ff:bc:f3:76:8b:22:21:1c:
c3:20:b8:c3:6a:61:e2:a3:6b:11:e8:1c:27:18:8e:
ea:ee:b0:fd:43:38:bd:c9:31:dc:43:e1:f0:79:dd:
3c:6b:47:15:dc:09:5a:a4:cb:42:67:2d:0d:56:05:
17:4d:8d:3d:37:1a:f2:05:e5:7c:2b:db:25:a1:fa:
79:e6:f3:be:55:84:4f:5e:41:a3:88:92:9b:d4:99:
4a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:46:48:F9:24:4D:15:D9:02:9E:ED:B4:B8:B1:32:E1:A5:C2:35:57
X509v3 Authority Key Identifier:
keyid:E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3134312e302f32342d3234203d3e203234323036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.84.141.0/24
Signature Algorithm: sha256WithRSAEncryption
12:4c:ae:d1:a7:d5:d5:25:e0:a1:1b:a7:35:42:4c:7e:9d:34:
c3:16:df:5b:82:dc:10:12:79:41:16:b5:51:f2:d4:ce:c5:84:
e7:7e:ae:4b:17:b6:82:83:24:6a:a5:89:7d:68:0e:44:4b:f8:
93:76:3d:23:1a:28:a0:ef:cc:db:f9:86:90:2e:45:b8:91:ca:
23:5e:0c:63:b3:64:c7:94:55:94:98:7e:1b:b8:36:bf:a8:04:
da:99:8f:ca:6f:33:fc:51:42:cc:78:b5:ed:d1:02:19:17:7d:
5c:18:1e:1d:c0:45:d2:78:d6:e8:30:0a:02:81:d0:22:f3:01:
c6:de:17:cb:53:90:94:87:31:65:be:e9:11:23:b1:de:13:ab:
16:d3:24:65:02:0e:f0:f4:25:90:03:44:94:fc:ad:19:cd:76:
3a:87:82:1e:58:1d:f8:e2:bc:f9:a3:5a:4f:99:27:b0:10:13:
02:2b:09:99:88:6d:8e:6f:da:eb:20:da:8e:bc:04:9d:00:e6:
2f:ff:e0:a0:ee:78:85:28:17:65:49:c1:0d:ac:92:a0:fd:7c:
24:d2:2c:b3:1c:87:f7:d4:07:7a:e6:c6:30:c3:3a:1c:f1:a5:
2f:73:36:56:d5:2b:af:41:d2:13:21:39:c5:ca:07:fc:b9:ca:
e2:cd:9b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:35:46 2026 by rpki-client