
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3230332e3137332e38392e302f32342d3234203d3e203338333230.roa
File: 3230332e3137332e38392e302f32342d3234203d3e203338333230.roa (raw, json)
Hash identifier: W4OxxH0PyquWwT3oVoi6TfL9I1tMai3D4cWcBmXRIg8=
Subject key identifier: 81:44:01:0A:EF:F8:F4:0C:55:CC:8A:E8:CF:0F:06:E3:32:96:FA:85
Certificate issuer: /CN=1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD
Certificate serial: 485BF8A03BFA2C972A2E8FA035F5B81B565340CC
Authority key identifier: 1D:AC:DC:41:C2:8C:E5:C3:8F:42:51:C6:14:DE:10:0A:3F:1E:FC:AD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3230332e3137332e38392e302f32342d3234203d3e203338333230.roa
Signing time: Sun 03 May 2026 02:58:03 +0000
ROA not before: Sun 03 May 2026 02:53:03 +0000
ROA not after: Sun 02 May 2027 02:58:03 +0000
asID: 38320
IP address blocks: 203.173.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.crl
rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:5b:f8:a0:3b:fa:2c:97:2a:2e:8f:a0:35:f5:b8:1b:56:53:40:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD
Validity
Not Before: May 3 02:53:03 2026 GMT
Not After : May 2 02:58:03 2027 GMT
Subject: CN=8144010AEFF8F40C55CC8AE8CF0F06E33296FA85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:27:78:61:05:c8:12:44:fc:2c:ce:8a:03:cd:
8f:92:8e:89:c7:de:59:35:58:23:dd:d1:ac:89:16:
fb:10:f2:89:3d:9f:be:e8:94:a4:4d:1b:18:55:b1:
3d:da:94:b2:92:36:a4:f4:77:7b:8e:39:3f:a1:94:
0c:6a:06:a0:ae:4a:2a:0b:85:a5:d4:e3:d1:e8:c3:
74:c9:5d:ec:2c:26:16:8a:52:84:1c:bd:24:f2:25:
4c:73:f9:dc:1c:28:df:58:58:6c:d0:fd:be:b5:9f:
1f:65:e6:5b:5e:87:7d:a3:75:0f:df:10:4b:bc:37:
7e:a6:72:a1:53:e9:31:1a:b4:b4:f9:33:a4:0b:de:
ae:79:83:b4:ea:4e:69:96:34:73:f6:0e:4b:0f:01:
fe:5c:cf:db:c3:a9:9e:da:ee:94:35:1e:65:63:59:
05:64:90:65:3a:c6:16:81:a2:ae:7e:e7:19:d5:f0:
4d:5e:24:9e:94:db:79:0d:a9:03:c5:06:46:33:4c:
a5:75:14:a1:87:a3:71:ae:12:b6:7b:c8:0f:9a:63:
1a:eb:2c:91:70:23:e7:cc:87:b3:d5:7e:4e:cf:b3:
8c:84:f5:49:08:75:9d:27:9e:6c:82:39:ca:1c:ab:
08:69:e8:ba:29:cd:71:e2:87:25:44:4e:79:cd:ed:
d1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:44:01:0A:EF:F8:F4:0C:55:CC:8A:E8:CF:0F:06:E3:32:96:FA:85
X509v3 Authority Key Identifier:
keyid:1D:AC:DC:41:C2:8C:E5:C3:8F:42:51:C6:14:DE:10:0A:3F:1E:FC:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3230332e3137332e38392e302f32342d3234203d3e203338333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.173.89.0/24
Signature Algorithm: sha256WithRSAEncryption
84:1f:75:50:de:bd:20:e2:90:44:9c:22:30:a7:b1:61:ae:10:
72:49:45:fc:93:55:df:5e:5a:b0:be:3f:34:aa:ab:49:87:fc:
47:83:86:3d:c2:ae:83:ab:9b:06:eb:f6:8c:af:da:a6:af:6e:
30:33:b6:22:66:b8:df:68:d9:02:23:0d:64:f5:ab:0b:ac:66:
a0:84:0b:f4:e7:29:23:5c:f2:cf:db:e0:6f:45:c4:73:35:16:
b0:44:2f:03:de:cd:70:fe:df:3b:ed:37:3b:5b:61:e7:81:73:
24:9e:60:9a:84:ce:b0:ab:d5:68:38:a6:ce:ab:e8:76:09:59:
f7:2c:7f:5b:59:26:91:dd:97:c6:89:42:dd:d7:d9:b0:a0:3d:
64:bb:a8:39:91:59:98:5f:dc:b7:93:35:ae:4b:75:9c:d6:4d:
fe:56:0a:13:b7:7e:99:ae:99:3b:c1:58:7b:c0:b5:0f:f3:36:
48:c4:7d:a6:18:29:0e:94:0b:3c:01:65:cf:ac:03:58:be:50:
0b:1e:ec:40:73:e1:93:1f:ad:44:04:c9:67:39:24:bb:33:5e:
96:cc:bd:d3:a6:2b:19:fe:98:e8:40:03:5b:59:73:41:27:c0:
e0:94:7a:52:d2:4d:4b:72:cb:50:f1:44:b0:3b:40:21:46:1a:
15:09:99:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:55:02 2026 by rpki-client