
$ rpki-client -vvf rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234382e302f32342d3234203d3e20313432333834.roa
File: 3230322e3136392e3234382e302f32342d3234203d3e20313432333834.roa (raw, json)
Hash identifier: UgF21NpBezbd1n4PIKEBvvLIFw9TBgmMt/brebiyI5Y=
Subject key identifier: 77:10:D4:86:D7:8F:07:33:24:ED:F2:72:A0:92:6C:F5:12:B5:6C:39
Certificate issuer: /CN=930E7788E3DC483DC5F85C12B8BB0C4F41312BC1
Certificate serial: 3B1ACBFE6C3D16B0B87987FEBA0EA5E7DAA45F2E
Authority key identifier: 93:0E:77:88:E3:DC:48:3D:C5:F8:5C:12:B8:BB:0C:4F:41:31:2B:C1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234382e302f32342d3234203d3e20313432333834.roa
Signing time: Sun 03 May 2026 02:58:43 +0000
ROA not before: Sun 03 May 2026 02:53:43 +0000
ROA not after: Sun 02 May 2027 02:58:43 +0000
asID: 142384
IP address blocks: 202.169.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.crl
rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:07:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:1a:cb:fe:6c:3d:16:b0:b8:79:87:fe:ba:0e:a5:e7:da:a4:5f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930E7788E3DC483DC5F85C12B8BB0C4F41312BC1
Validity
Not Before: May 3 02:53:43 2026 GMT
Not After : May 2 02:58:43 2027 GMT
Subject: CN=7710D486D78F073324EDF272A0926CF512B56C39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:96:b9:70:90:6a:ce:71:76:f3:ee:3c:7f:23:
7f:e6:8b:cd:2c:39:fc:e0:76:a7:61:bb:eb:90:a9:
6d:f8:13:00:7f:d2:57:49:e3:6f:74:89:b9:18:7f:
f9:f2:77:0e:56:9c:49:41:e6:05:46:ad:ca:e4:c5:
1c:0a:29:41:55:17:91:54:a3:50:8d:2e:e9:26:4b:
07:71:a0:d9:f8:a3:d5:c7:84:dd:0c:40:e8:fa:d5:
c9:bf:d6:fe:f2:bd:57:83:6a:23:46:dc:d0:f8:3d:
a8:a3:fa:42:bb:ce:d6:b6:dd:08:10:e6:67:fa:01:
a1:43:c5:15:fe:a0:a2:6a:c9:ca:f0:48:72:ef:7f:
f5:55:5a:d2:b6:a2:86:e1:b3:8a:26:a9:28:6f:2c:
a1:66:b8:ba:38:ac:53:b8:2c:ed:e6:cd:fa:8c:68:
f4:72:70:fd:77:7a:91:6c:dd:8c:d4:68:48:43:63:
64:bc:d8:3c:bb:83:3d:51:3b:6b:3f:a7:93:3c:38:
1d:e9:4b:18:89:f4:ae:30:1c:ed:0b:46:cc:0e:94:
f6:36:8e:e8:ed:7d:a4:7b:61:d6:1b:54:1b:cf:38:
6b:d0:68:59:78:bb:ed:6f:32:4d:8e:40:59:2e:7b:
e9:3a:ee:b0:2f:fe:87:a8:04:53:d8:24:8c:74:7f:
38:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:10:D4:86:D7:8F:07:33:24:ED:F2:72:A0:92:6C:F5:12:B5:6C:39
X509v3 Authority Key Identifier:
keyid:93:0E:77:88:E3:DC:48:3D:C5:F8:5C:12:B8:BB:0C:4F:41:31:2B:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/930E7788E3DC483DC5F85C12B8BB0C4F41312BC1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3234382e302f32342d3234203d3e20313432333834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.169.248.0/24
Signature Algorithm: sha256WithRSAEncryption
06:1d:99:75:af:5d:98:13:55:f1:58:fc:4d:ae:38:6d:e3:d8:
48:60:86:e6:65:12:bc:fe:e9:c8:58:d5:5a:76:33:9b:7c:05:
55:dc:a5:bc:19:0a:f3:8b:54:35:07:1b:69:b9:30:05:12:ef:
93:78:eb:a0:40:fb:bf:00:f7:a8:e7:5c:56:96:5b:23:73:8e:
8d:f7:5f:b1:05:0d:61:68:24:7e:2b:a6:36:60:38:25:3b:62:
eb:d3:80:f2:e9:3b:31:c1:38:96:1d:6d:05:03:4e:83:4a:56:
d2:97:ef:93:74:5f:bd:2f:b4:42:15:e0:ff:31:46:2b:db:10:
30:36:7d:de:1b:fa:89:20:0c:1a:c2:6a:9f:cc:2b:01:d0:9e:
bc:0e:91:7d:dc:81:0e:7d:b3:d6:ae:c9:90:23:80:9d:e2:c1:
71:a8:5b:9d:0f:50:83:83:a2:a4:b4:e4:99:30:48:95:d1:57:
12:5d:30:3f:57:cc:18:3d:47:20:0f:d6:8e:f5:d7:9d:42:eb:
61:3d:ef:36:b2:2a:0d:8c:76:44:f5:d5:a0:a4:a5:b1:36:c1:
af:bd:1d:12:4d:d2:82:89:3d:a3:f6:b1:ca:11:5f:21:a0:ec:
12:cd:29:58:1d:1a:9e:cb:50:68:6a:9e:08:5f:c1:3c:37:0e:
e9:5b:1b:ed
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUOxrL/mw9FrC4eYf+ug6l59qkXy4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTMwRTc3ODhFM0RDNDgzREM1Rjg1QzEyQjhCQjBDNEY0
MTMxMkJDMTAeFw0yNjA1MDMwMjUzNDNaFw0yNzA1MDIwMjU4NDNaMDMxMTAvBgNV
BAMTKDc3MTBENDg2RDc4RjA3MzMyNEVERjI3MkEwOTI2Q0Y1MTJCNTZDMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjlrlwkGrOcXbz7jx/I3/mi80s
Ofzgdqdhu+uQqW34EwB/0ldJ4290ibkYf/nydw5WnElB5gVGrcrkxRwKKUFVF5FU
o1CNLukmSwdxoNn4o9XHhN0MQOj61cm/1v7yvVeDaiNG3ND4Paij+kK7zta23QgQ
5mf6AaFDxRX+oKJqycrwSHLvf/VVWtK2oobhs4omqShvLKFmuLo4rFO4LO3mzfqM
aPRycP13epFs3YzUaEhDY2S82Dy7gz1RO2s/p5M8OB3pSxiJ9K4wHO0LRswOlPY2
jujtfaR7YdYbVBvPOGvQaFl4u+1vMk2OQFkue+k67rAv/oeoBFPYJIx0fzj5AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUdxDUhtePBzMk7fJyoJJs9RK1bDkwHwYDVR0j
BBgwFoAUkw53iOPcSD3F+FwSuLsMT0ExK8EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWNiOWE0YjktNGFlMy00NjdhLWI5MTktNDEwZTE0MmI2NzlmLzAvOTMwRTc3ODhF
M0RDNDgzREM1Rjg1QzEyQjhCQjBDNEY0MTMxMkJDMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MzBFNzc4OEUzREM0ODNEQzVGODVDMTJCOEJCMEM0RjQxMzEy
QkMxLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FjYjlhNGI5LTRhZTMtNDY3YS1i
OTE5LTQxMGUxNDJiNjc5Zi8wLzMyMzAzMjJlMzEzNjM5MmUzMjM0MzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM4MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKqfgwDQYJ
KoZIhvcNAQELBQADggEBAAYdmXWvXZgTVfFY/E2uOG3j2EhghuZlErz+6chY1Vp2
M5t8BVXcpbwZCvOLVDUHG2m5MAUS75N466BA+78A96jnXFaWWyNzjo33X7EFDWFo
JH4rpjZgOCU7YuvTgPLpOzHBOJYdbQUDToNKVtKX75N0X70vtEIV4P8xRivbEDA2
fd4b+okgDBrCap/MKwHQnrwOkX3cgQ59s9auyZAjgJ3iwXGoW50PUIODoqS05Jkw
SJXRVxJdMD9XzBg9RyAP1o71151C62E97zayKg2MdkT11aCkpbE2wa+9HRJN0oKJ
PaP2scoRXyGg7BLNKVgdGp7LUGhqnghfwTw3DulbG+0=
-----END CERTIFICATE-----
Generated at Wed May 13 13:25:16 2026 by rpki-client