
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3230332e3137332e38382e302f32342d3234203d3e20313339343630.roa
File: 3230332e3137332e38382e302f32342d3234203d3e20313339343630.roa (raw, json)
Hash identifier: Rpm98TP8lpn5L0MciL+HgBtsQPS4AoEpZ3E+uKifZME=
Subject key identifier: A4:C2:36:49:B9:50:DC:29:9F:06:08:E7:30:19:31:7F:B5:E6:E2:94
Certificate issuer: /CN=1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD
Certificate serial: 5CB1DC16BC72311F4567C960DA6AD331D5F87C11
Authority key identifier: 1D:AC:DC:41:C2:8C:E5:C3:8F:42:51:C6:14:DE:10:0A:3F:1E:FC:AD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3230332e3137332e38382e302f32342d3234203d3e20313339343630.roa
Signing time: Sun 03 May 2026 02:58:01 +0000
ROA not before: Sun 03 May 2026 02:53:01 +0000
ROA not after: Sun 02 May 2027 02:58:01 +0000
asID: 139460
IP address blocks: 203.173.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.crl
rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:b1:dc:16:bc:72:31:1f:45:67:c9:60:da:6a:d3:31:d5:f8:7c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD
Validity
Not Before: May 3 02:53:01 2026 GMT
Not After : May 2 02:58:01 2027 GMT
Subject: CN=A4C23649B950DC299F0608E73019317FB5E6E294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:7c:cd:41:e4:52:df:d3:45:6a:41:cf:69:
46:fd:e0:47:7e:86:5c:02:cd:e8:7b:07:3b:25:68:
8d:c7:76:f5:88:ab:a0:d8:61:9c:ac:19:89:57:f5:
5a:0f:89:4d:7b:9f:da:94:76:7c:94:65:d5:ad:da:
10:d2:3b:2f:a8:0c:17:8c:49:b6:5a:83:f5:6d:de:
b1:02:68:73:27:ad:68:c9:9f:48:17:77:48:6a:e3:
fc:2c:73:02:8b:d5:74:11:0f:13:c7:4f:7b:b1:03:
d1:6e:1f:bf:a4:de:25:24:8f:b2:df:c9:1a:ea:3b:
cf:8f:89:1a:00:06:d1:2b:2c:25:72:76:84:de:ab:
2a:38:34:37:63:f9:e7:b2:9a:6c:ae:b3:2d:00:86:
b2:e7:05:5b:45:ab:9d:6f:cc:1c:7a:3d:b1:93:63:
d4:aa:1c:d8:0c:6d:65:3f:bc:b4:4f:3e:8b:da:8c:
d9:f2:bd:5c:94:01:00:86:af:a5:af:60:69:d6:0e:
c0:63:96:5a:ab:91:16:43:27:ac:ae:b2:c6:95:7f:
2a:ac:54:9a:53:24:9a:54:eb:e0:fd:ae:47:2d:9e:
0e:99:bf:b7:de:a6:f7:d5:b8:6b:4c:c9:c5:5e:35:
e0:47:79:ab:a5:6e:23:54:e1:2c:75:7d:9b:de:28:
a5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C2:36:49:B9:50:DC:29:9F:06:08:E7:30:19:31:7F:B5:E6:E2:94
X509v3 Authority Key Identifier:
keyid:1D:AC:DC:41:C2:8C:E5:C3:8F:42:51:C6:14:DE:10:0A:3F:1E:FC:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3230332e3137332e38382e302f32342d3234203d3e20313339343630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.173.88.0/24
Signature Algorithm: sha256WithRSAEncryption
31:70:87:a2:78:7a:3b:5a:b1:01:2b:05:3f:5d:c1:b8:3d:91:
17:5c:65:18:75:67:4f:75:77:5f:7c:80:dc:21:93:e3:0f:cd:
7f:54:fe:c8:ae:2d:d2:c5:79:48:1f:0f:8d:c5:ed:1e:3c:fc:
3f:88:01:18:43:65:37:90:2b:0b:4a:48:14:35:bc:c4:67:df:
63:ad:49:ee:61:12:65:0f:c5:53:52:e4:d9:46:f5:8b:88:d1:
b6:e6:67:1e:76:89:8b:67:8b:ae:7f:fb:82:fd:d8:c3:00:84:
36:a8:99:83:68:c4:ce:32:97:47:38:19:e1:82:9a:e9:2a:77:
40:c2:55:56:40:49:20:70:b7:f9:21:94:96:52:bd:f9:94:e6:
b6:fd:45:78:f3:f8:7b:69:2c:c9:d6:39:49:79:a3:d9:a8:c4:
3c:32:78:cb:1c:9e:63:42:b8:a6:2f:b7:0c:b6:2b:58:2f:10:
6b:cc:a1:c5:a6:1c:02:e0:2d:e3:7d:58:da:ed:99:2f:d3:5b:
b4:87:90:52:10:d7:f8:f4:9a:1d:ba:e2:66:5c:11:55:3b:3f:
d4:cb:21:8f:6b:44:d3:0f:73:2b:f9:ae:52:55:cb:38:ea:a2:
cd:6a:b2:b0:20:01:c9:ea:c3:a2:13:56:59:d1:f1:60:76:b1:
14:5a:73:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:39:23 2026 by rpki-client