
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/3230332e3132382e36342e302f31392d3234203d3e203138313033.roa
File: 3230332e3132382e36342e302f31392d3234203d3e203138313033.roa (raw, json)
Hash identifier: eBoaZqyr6WlSbN/AJF6RgzCQyG+1zBmzaFfb/7fN5dY=
Subject key identifier: 37:48:0D:35:BB:67:AE:10:D3:EB:A5:FC:9F:1E:D7:FE:02:F7:92:F3
Certificate issuer: /CN=CF677DC4A0E9F52E458D7F786C11004CBCC06BE6
Certificate serial: 1694EFA071B2FB540CA213CFE839EE73071ADBA2
Authority key identifier: CF:67:7D:C4:A0:E9:F5:2E:45:8D:7F:78:6C:11:00:4C:BC:C0:6B:E6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/3230332e3132382e36342e302f31392d3234203d3e203138313033.roa
Signing time: Sun 03 May 2026 03:00:20 +0000
ROA not before: Sun 03 May 2026 02:55:20 +0000
ROA not after: Sun 02 May 2027 03:00:20 +0000
asID: 18103
IP address blocks: 203.128.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.crl
rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 08:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:94:ef:a0:71:b2:fb:54:0c:a2:13:cf:e8:39:ee:73:07:1a:db:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF677DC4A0E9F52E458D7F786C11004CBCC06BE6
Validity
Not Before: May 3 02:55:20 2026 GMT
Not After : May 2 03:00:20 2027 GMT
Subject: CN=37480D35BB67AE10D3EBA5FC9F1ED7FE02F792F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e1:c5:a5:da:fa:45:72:c3:5e:c7:23:fe:99:
99:9d:7a:32:80:db:33:0a:74:85:25:86:94:90:29:
84:72:85:f5:22:05:7e:31:66:76:35:f4:1e:af:07:
16:0f:ee:67:ad:a0:56:0f:3f:3b:8c:8c:83:ee:6a:
e0:05:87:c3:5b:ea:68:71:90:b0:47:23:fe:d2:72:
01:4e:07:7e:83:58:b4:1e:78:58:15:d3:28:dd:80:
40:79:fe:b3:22:8e:37:14:6a:13:39:f1:48:6e:16:
ea:1c:df:31:b9:29:14:78:5f:c6:1e:59:a2:d2:2a:
b1:f1:18:51:4a:fd:95:ad:6b:e4:4a:af:c0:69:4f:
e4:79:9c:0c:bf:81:e4:89:ab:d2:5c:87:89:27:39:
58:ec:2e:ce:7d:4a:6e:f2:61:fb:a2:87:7e:c4:7d:
36:9c:02:50:a3:7b:f0:cf:54:8e:75:7b:1a:46:1d:
3f:1b:d5:d3:2e:79:90:c3:dd:e1:eb:45:c4:51:1d:
67:26:aa:37:74:e0:78:cb:41:c5:1d:7c:c7:f8:ef:
27:6b:13:34:38:fa:f3:98:7e:fd:da:2e:12:40:3c:
09:87:9c:8d:8f:48:26:77:6c:75:9f:1c:cd:1a:e7:
bb:c8:f4:cd:df:a0:fe:60:07:a5:38:75:c7:cd:02:
49:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:48:0D:35:BB:67:AE:10:D3:EB:A5:FC:9F:1E:D7:FE:02:F7:92:F3
X509v3 Authority Key Identifier:
keyid:CF:67:7D:C4:A0:E9:F5:2E:45:8D:7F:78:6C:11:00:4C:BC:C0:6B:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF677DC4A0E9F52E458D7F786C11004CBCC06BE6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/3230332e3132382e36342e302f31392d3234203d3e203138313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.128.64.0/19
Signature Algorithm: sha256WithRSAEncryption
59:35:13:66:30:bd:f9:2f:a5:52:26:d2:2c:df:3f:3b:79:53:
f3:68:06:31:36:50:9e:64:50:bf:31:63:7e:ef:55:fc:e7:96:
1e:19:88:d8:10:b6:14:90:2a:36:31:b2:8d:a1:5c:53:9f:3c:
64:33:22:e4:1b:ed:fe:b8:42:98:64:5f:13:79:a5:53:44:96:
5b:5a:34:84:6c:86:26:d4:1d:ba:8e:cf:7d:a5:1a:96:e9:b0:
6c:89:b9:dc:5c:6d:15:f9:1b:42:b8:a9:87:eb:14:ec:dc:07:
3c:c6:be:b3:0c:0c:bf:3d:bc:64:10:50:55:19:9e:62:d8:82:
ea:60:57:b3:de:a6:a2:40:49:ba:9e:e8:8e:24:88:98:04:32:
1a:9d:d9:9d:20:8d:dc:b6:89:57:5d:7e:8f:75:20:19:85:70:
b6:ef:38:ea:7e:75:9b:63:6c:95:cc:40:bf:e4:84:b8:2b:24:
c3:ea:04:ef:0b:e5:8f:9f:56:a0:89:b0:e4:24:57:c9:5b:a6:
fa:9d:ea:88:b6:27:22:72:65:c8:89:c6:65:19:9b:a0:ed:f4:
79:53:45:25:a1:8b:1a:62:f3:25:9f:df:90:de:68:9e:6a:75:
c7:19:b2:46:1b:fb:7c:9b:d9:a5:60:08:70:cc:2f:f9:56:fe:
a4:a0:3d:27
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUFpTvoHGy+1QMohPP6Dnucwca26IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Y2NzdEQzRBMEU5RjUyRTQ1OEQ3Rjc4NkMxMTAwNENC
Q0MwNkJFNjAeFw0yNjA1MDMwMjU1MjBaFw0yNzA1MDIwMzAwMjBaMDMxMTAvBgNV
BAMTKDM3NDgwRDM1QkI2N0FFMTBEM0VCQTVGQzlGMUVEN0ZFMDJGNzkyRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ4cWl2vpFcsNexyP+mZmdejKA
2zMKdIUlhpSQKYRyhfUiBX4xZnY19B6vBxYP7metoFYPPzuMjIPuauAFh8Nb6mhx
kLBHI/7ScgFOB36DWLQeeFgV0yjdgEB5/rMijjcUahM58UhuFuoc3zG5KRR4X8Ye
WaLSKrHxGFFK/ZWta+RKr8BpT+R5nAy/geSJq9Jch4knOVjsLs59Sm7yYfuih37E
fTacAlCje/DPVI51expGHT8b1dMueZDD3eHrRcRRHWcmqjd04HjLQcUdfMf47ydr
EzQ4+vOYfv3aLhJAPAmHnI2PSCZ3bHWfHM0a57vI9M3foP5gB6U4dcfNAkmLAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUN0gNNbtnrhDT66X8nx7X/gL3kvMwHwYDVR0j
BBgwFoAUz2d9xKDp9S5FjX94bBEATLzAa+YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjE5OWMxYWYtZDljNy00ZmZkLWJhMDMtYTNlMWNkZDhhZWUwLzAvQ0Y2NzdEQzRB
MEU5RjUyRTQ1OEQ3Rjc4NkMxMTAwNENCQ0MwNkJFNi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DRjY3N0RDNEEwRTlGNTJFNDU4RDdGNzg2QzExMDA0Q0JDQzA2
QkU2LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2IxOTljMWFmLWQ5YzctNGZmZC1i
YTAzLWEzZTFjZGQ4YWVlMC8wLzMyMzAzMzJlMzEzMjM4MmUzNjM0MmUzMDJmMzEz
OTJkMzIzNDIwM2QzZTIwMzEzODMxMzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcuAQDANBgkqhkiG
9w0BAQsFAAOCAQEAWTUTZjC9+S+lUibSLN8/O3lT82gGMTZQnmRQvzFjfu9V/OeW
HhmI2BC2FJAqNjGyjaFcU588ZDMi5Bvt/rhCmGRfE3mlU0SWW1o0hGyGJtQduo7P
faUalumwbIm53FxtFfkbQriph+sU7NwHPMa+swwMvz28ZBBQVRmeYtiC6mBXs96m
okBJup7ojiSImAQyGp3ZnSCN3LaJV11+j3UgGYVwtu846n51m2NslcxAv+SEuCsk
w+oE7wvlj59WoImw5CRXyVum+p3qiLYnInJlyInGZRmboO30eVNFJaGLGmLzJZ/f
kN5onmp1xxmyRhv7fJvZpWAIcMwv+Vb+pKA9Jw==
-----END CERTIFICATE-----
Generated at Wed May 13 00:44:08 2026 by rpki-client