
$ rpki-client -vvf rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234302e302f32312d3234203d3e203338313433.roa
File: 3230322e3136392e3234302e302f32312d3234203d3e203338313433.roa (raw, json)
Hash identifier: KvMuUE0z8nYV0xU0ADop4StlWgJyErA/jBV532swhY0=
Subject key identifier: FC:7F:29:FC:D4:6E:BB:63:AA:8F:15:50:C2:27:1C:5D:B5:BE:2E:01
Certificate issuer: /CN=930E7788E3DC483DC5F85C12B8BB0C4F41312BC1
Certificate serial: 1A56F2B366035B9756F16D5C1D90D11C6D4713FA
Authority key identifier: 93:0E:77:88:E3:DC:48:3D:C5:F8:5C:12:B8:BB:0C:4F:41:31:2B:C1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234302e302f32312d3234203d3e203338313433.roa
Signing time: Sun 03 May 2026 02:58:47 +0000
ROA not before: Sun 03 May 2026 02:53:47 +0000
ROA not after: Sun 02 May 2027 02:58:47 +0000
asID: 38143
IP address blocks: 202.169.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.crl
rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:07:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:56:f2:b3:66:03:5b:97:56:f1:6d:5c:1d:90:d1:1c:6d:47:13:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930E7788E3DC483DC5F85C12B8BB0C4F41312BC1
Validity
Not Before: May 3 02:53:47 2026 GMT
Not After : May 2 02:58:47 2027 GMT
Subject: CN=FC7F29FCD46EBB63AA8F1550C2271C5DB5BE2E01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:62:14:e2:d4:ba:5b:92:d7:65:44:5c:30:86:
5a:56:3b:f5:fa:43:93:b0:e7:6b:bb:fa:7e:3b:52:
71:9a:9f:08:29:f3:13:84:a0:c4:50:86:ef:66:9d:
99:44:bc:96:7e:9b:de:2e:c5:c4:78:8c:00:63:2d:
ae:35:02:e9:af:27:54:ff:ae:fe:18:57:81:1d:de:
5d:5f:23:5b:38:6b:86:79:63:db:65:e7:a8:51:6a:
17:ae:4b:c7:46:46:bc:90:fc:41:44:f4:db:fb:fc:
40:a6:5c:d3:7c:2c:f5:31:c7:b3:db:87:c3:9a:cb:
43:b6:ab:cd:5e:87:5d:bf:c5:eb:a5:c7:03:fb:a3:
cb:6d:46:92:53:e3:56:37:61:06:ae:1e:77:fe:b0:
57:ca:c2:de:09:f9:83:41:e4:82:56:8c:cd:c3:a8:
85:a2:e4:b1:32:01:e2:e5:9b:48:67:59:2f:97:11:
17:e3:d7:ad:ef:d0:e9:22:ec:be:91:7d:a2:33:c1:
12:b4:25:c3:25:15:de:25:05:9f:b0:3a:6b:9d:4f:
31:fc:9c:c1:11:ad:35:76:8e:d6:a5:17:b3:4b:1e:
fa:be:ae:99:ea:9a:b2:d1:a8:b2:a6:df:fd:bc:e4:
27:cc:b3:34:3f:da:32:0c:b0:97:6b:ee:33:e7:28:
74:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7F:29:FC:D4:6E:BB:63:AA:8F:15:50:C2:27:1C:5D:B5:BE:2E:01
X509v3 Authority Key Identifier:
keyid:93:0E:77:88:E3:DC:48:3D:C5:F8:5C:12:B8:BB:0C:4F:41:31:2B:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234302e302f32312d3234203d3e203338313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.169.240.0/21
Signature Algorithm: sha256WithRSAEncryption
0a:1f:85:ee:f0:07:ad:84:e0:54:7d:85:a7:27:30:47:75:78:
9e:73:3a:53:f3:b2:dc:63:d1:31:2a:95:ba:2b:71:c7:23:b7:
30:41:02:84:be:a8:a5:65:e3:85:83:94:5f:14:3c:8a:fc:5d:
06:4d:d9:f7:04:3a:d8:7d:a1:71:d1:d9:73:40:39:48:1d:c5:
5c:5b:4a:a5:0f:52:b4:9d:bd:99:4f:47:d0:3c:ec:1e:be:66:
a6:66:8c:93:73:40:5e:b3:15:9c:1b:38:86:9f:07:8d:2a:3d:
af:2c:99:7e:e9:6b:a8:2b:81:e3:99:9d:bf:68:42:0b:53:8f:
32:40:b7:d1:fd:59:a8:28:a0:b0:96:91:2b:80:1c:60:f4:bc:
c2:a1:11:0d:9e:1c:63:fe:bc:69:80:c3:9a:0f:5e:a7:c4:54:
3f:d6:17:b9:66:23:69:11:8e:56:f7:f9:a7:ec:e4:c3:21:17:
58:89:e0:6b:b4:c0:5c:22:28:8a:ec:69:4c:98:0a:fa:7e:5f:
45:29:53:d0:7c:dd:47:dd:60:a5:2d:3f:ca:08:bc:43:76:7c:
b0:d9:4c:e2:89:77:69:e0:aa:f0:96:23:4a:ee:81:0d:7a:95:
7b:b5:21:fe:98:ca:b2:bb:16:54:96:7b:50:0e:36:d5:ae:4d:
18:03:ad:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:35:43 2026 by rpki-client