
$ rpki-client -vvf rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3230332e33302e3233362e302f32332d3234203d3e203535363636.roa
File: 3230332e33302e3233362e302f32332d3234203d3e203535363636.roa (raw, json)
Hash identifier: N924KFBbNKaGBHgEpFzR4KDlXIesgFTKyMqUFZg/Phg=
Subject key identifier: 8C:57:B6:8C:0B:9A:43:6E:7D:9E:DB:33:99:58:46:5D:F2:20:2F:CB
Certificate issuer: /CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
Certificate serial: 7631DBE0836AF16F70C6DD917A05E02ED4D10AEF
Authority key identifier: 8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3230332e33302e3233362e302f32332d3234203d3e203535363636.roa
Signing time: Sun 03 May 2026 02:59:36 +0000
ROA not before: Sun 03 May 2026 02:54:36 +0000
ROA not after: Sun 02 May 2027 02:59:36 +0000
asID: 55666
IP address blocks: 203.30.236.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl
rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:31:db:e0:83:6a:f1:6f:70:c6:dd:91:7a:05:e0:2e:d4:d1:0a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B
Validity
Not Before: May 3 02:54:36 2026 GMT
Not After : May 2 02:59:36 2027 GMT
Subject: CN=8C57B68C0B9A436E7D9EDB339958465DF2202FCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:34:09:a6:04:b3:18:dd:b4:92:62:92:e0:d4:
03:19:1e:1e:0c:d1:41:f5:25:ca:13:0f:58:d3:90:
2e:57:73:f1:f3:d4:96:e9:4b:c0:02:6b:09:5c:96:
d4:3d:3f:88:3c:eb:e2:58:b4:ec:c7:bc:31:09:7e:
aa:e5:30:fa:68:3b:02:90:71:c3:c4:c3:4d:13:ce:
0a:5a:24:15:c3:68:c3:b1:35:d8:3d:9a:eb:be:fd:
2b:5e:71:c1:4a:c8:e9:29:79:c9:0e:47:c8:ca:af:
65:59:be:37:41:da:73:05:1e:6d:98:bb:6c:69:a3:
39:0d:e9:c6:37:3c:f4:04:c7:65:5f:fb:70:8e:8a:
29:41:e1:b3:db:f9:b4:f8:d7:e2:ea:d6:77:1d:65:
02:7a:67:34:7f:e5:d2:4d:74:2f:a8:cd:7c:23:06:
b5:ef:5a:6f:84:5a:63:ec:a2:de:d3:99:be:87:a9:
3e:fd:18:20:be:5a:8e:75:d8:9f:02:b9:f6:fb:af:
23:c0:5e:dd:b6:5c:b1:5c:ed:8f:70:e7:77:cc:69:
61:fd:29:ab:12:17:df:19:26:88:5f:b0:3e:20:71:
32:3d:7a:24:d1:65:30:85:36:fa:f5:41:b2:2c:fe:
80:82:11:28:5f:f8:e4:78:82:e0:4f:28:1b:21:26:
1f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:57:B6:8C:0B:9A:43:6E:7D:9E:DB:33:99:58:46:5D:F2:20:2F:CB
X509v3 Authority Key Identifier:
keyid:8C:8C:56:ED:1E:A0:C6:F9:39:1C:D9:00:8E:78:CD:F3:81:C2:72:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8C8C56ED1EA0C6F9391CD9008E78CDF381C2720B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3230332e33302e3233362e302f32332d3234203d3e203535363636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.30.236.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:d9:53:9b:e4:10:6c:57:35:8f:35:17:57:f0:90:0a:5f:52:
6a:7b:79:60:d3:0b:41:1c:6b:da:ab:de:cc:08:5c:9f:0a:a7:
a5:ba:1f:53:9f:1c:1a:45:6a:37:06:4d:9e:39:43:83:20:2e:
8c:c6:71:e8:3f:47:b4:4e:44:8e:ac:6c:e7:d9:7f:17:ba:6b:
30:5c:58:fe:7b:65:f4:69:90:67:99:0e:29:a0:3d:55:f8:b9:
23:8a:3c:a4:52:70:7c:cb:cc:60:f3:b5:be:73:ac:09:16:eb:
45:09:5c:a2:b7:55:22:06:cf:60:fd:38:73:5e:f0:75:ac:99:
18:b2:e9:a8:28:c9:c9:b4:65:c6:45:a0:62:b1:2a:2b:02:36:
af:c9:16:cb:db:f9:f2:23:9e:8a:50:16:fc:a2:99:77:a4:0d:
d8:05:4d:75:0f:84:33:d4:7b:5d:b1:5a:46:2d:64:c7:f2:90:
62:71:2f:ae:fa:78:0b:cc:b2:5e:24:3b:af:b9:92:35:60:5b:
bf:54:29:30:28:c9:53:9f:62:7f:ad:30:26:d8:48:6a:04:ab:
1e:51:e5:95:18:0f:fb:c7:cd:b7:be:20:66:00:5c:18:b7:ad:
a2:5b:58:9d:e6:29:dc:17:78:df:5e:3e:ec:58:df:d2:b5:c0:
b3:d6:26:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:38 2026 by rpki-client