
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/3230332e32392e32362e302f32342d3234203d3e20313335343737.roa
File: 3230332e32392e32362e302f32342d3234203d3e20313335343737.roa (raw, json)
Hash identifier: 5DkSgMYDvgEBxCCplmwfDoevI8VI5H/bGiFDzCRHnts=
Subject key identifier: 6B:B3:7E:CD:4C:9B:7B:B2:EE:EA:13:1B:32:48:E5:D5:83:E9:13:20
Certificate issuer: /CN=EAF1BBC2E7852A08EC9726DF037B7A90020F613C
Certificate serial: 0814C370CD0EDBF82A2A8164130B95CE469523AC
Authority key identifier: EA:F1:BB:C2:E7:85:2A:08:EC:97:26:DF:03:7B:7A:90:02:0F:61:3C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/3230332e32392e32362e302f32342d3234203d3e20313335343737.roa
Signing time: Sun 03 May 2026 02:57:39 +0000
ROA not before: Sun 03 May 2026 02:52:39 +0000
ROA not after: Sun 02 May 2027 02:57:39 +0000
asID: 135477
IP address blocks: 203.29.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl
rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 05:44:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:14:c3:70:cd:0e:db:f8:2a:2a:81:64:13:0b:95:ce:46:95:23:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EAF1BBC2E7852A08EC9726DF037B7A90020F613C
Validity
Not Before: May 3 02:52:39 2026 GMT
Not After : May 2 02:57:39 2027 GMT
Subject: CN=6BB37ECD4C9B7BB2EEEA131B3248E5D583E91320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ca:0d:89:cb:fe:bb:cf:3d:5e:88:16:97:1f:
1f:dd:0d:db:97:94:63:c1:aa:eb:c1:58:50:e9:9f:
63:fd:ec:96:33:e6:37:29:e1:e3:e0:89:b2:cc:00:
f3:e3:ea:79:04:92:a3:87:44:61:b1:2b:50:6a:e1:
d5:9a:65:22:f5:c2:2c:5f:96:71:4d:f1:1b:92:bc:
90:98:1b:ba:47:fc:bd:20:8e:8f:69:c8:d7:fc:8b:
d4:8c:28:68:1b:e1:2b:d2:ae:ef:9a:c8:b3:4a:93:
b8:97:e9:76:69:9a:77:b3:45:b9:3a:31:18:0d:31:
d2:9c:3f:b5:d5:5e:7c:b6:c2:e9:f7:57:5b:32:40:
5b:98:10:03:d0:6f:f1:98:be:df:64:28:98:f6:e0:
5f:e4:61:08:64:46:66:92:35:50:1d:9c:11:3c:7d:
42:1e:1e:00:e6:2c:ca:11:90:0a:82:9e:04:57:75:
d9:40:e2:8a:b7:cf:9b:4e:17:8f:14:85:8b:14:6c:
77:3f:95:64:7d:f1:0a:d5:89:4a:91:b0:26:09:0f:
15:e9:7f:8b:b7:8b:90:8f:49:28:74:09:26:20:af:
e1:c5:e6:c0:22:85:08:15:ba:07:d3:1d:b0:ef:ef:
8c:a4:d2:29:5b:36:b8:a8:dd:3f:3d:28:86:35:01:
33:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B3:7E:CD:4C:9B:7B:B2:EE:EA:13:1B:32:48:E5:D5:83:E9:13:20
X509v3 Authority Key Identifier:
keyid:EA:F1:BB:C2:E7:85:2A:08:EC:97:26:DF:03:7B:7A:90:02:0F:61:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/3230332e32392e32362e302f32342d3234203d3e20313335343737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.29.26.0/24
Signature Algorithm: sha256WithRSAEncryption
37:f4:7b:de:88:77:90:c5:22:11:13:90:ca:9a:84:08:0c:19:
ae:3e:bd:69:d3:1b:59:da:a1:58:91:33:65:7c:b0:68:53:92:
11:e7:c6:63:39:9e:3b:af:65:45:da:7b:7c:24:71:c6:0a:85:
78:89:a4:92:da:96:b0:4e:b7:d3:4a:67:8c:d8:25:d5:43:5f:
56:2d:c8:51:91:24:78:22:c2:e1:db:59:a7:71:b2:7f:82:14:
97:39:09:93:09:08:6b:c4:bd:09:c6:4e:ef:2d:81:01:81:fc:
08:f9:05:53:71:c8:05:46:14:56:41:b6:c7:4b:4f:04:bc:bd:
20:73:83:0b:82:bb:fc:2b:37:30:aa:72:ed:06:19:f2:fa:3d:
5e:d2:3c:52:2c:87:2e:26:2f:81:56:65:b2:5d:95:eb:4e:72:
0b:7f:03:7b:57:87:d8:57:07:a9:9b:e2:76:a6:fd:31:d1:11:
03:4d:51:f4:21:bf:ce:32:7c:12:59:9f:d8:dd:22:33:04:1c:
8a:71:78:7c:bb:fa:4d:51:21:b3:3c:1b:98:31:6b:38:a3:1f:
5f:a9:61:35:89:04:95:a2:51:4a:b0:17:e9:f6:a0:9c:43:85:
9e:32:26:f4:88:de:d6:eb:13:49:46:28:14:92:e1:9d:fe:27:
77:a9:88:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:49:39 2026 by rpki-client