
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/3230332e332e39302e302f32342d3234203d3e20313531353938.roa
File: 3230332e332e39302e302f32342d3234203d3e20313531353938.roa (raw, json)
Hash identifier: 8ZFSRd4IMl+7UA1+qh6mSwLg2Ure6CZXxSWgxu+4aBo=
Subject key identifier: EF:C5:C2:E9:C4:05:3A:CE:0B:EF:4A:20:CC:BA:42:85:CE:1C:A4:D3
Certificate issuer: /CN=0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE
Certificate serial: 5B3748B406CD1606A5607E78A8FD14C3D23A5CA4
Authority key identifier: 0B:EF:C1:EC:59:3B:16:C7:9B:C5:60:0E:F5:81:3B:0C:C6:E2:48:BE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/3230332e332e39302e302f32342d3234203d3e20313531353938.roa
Signing time: Sun 03 May 2026 03:02:40 +0000
ROA not before: Sun 03 May 2026 02:57:40 +0000
ROA not after: Sun 02 May 2027 03:02:40 +0000
asID: 151598
IP address blocks: 203.3.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.crl
rsync://rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:37:48:b4:06:cd:16:06:a5:60:7e:78:a8:fd:14:c3:d2:3a:5c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE
Validity
Not Before: May 3 02:57:40 2026 GMT
Not After : May 2 03:02:40 2027 GMT
Subject: CN=EFC5C2E9C4053ACE0BEF4A20CCBA4285CE1CA4D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0d:0c:87:82:c6:2f:81:ef:d5:6d:95:9d:4f:
3d:38:0d:89:30:dc:d7:aa:08:0f:c7:33:64:c9:6e:
04:61:b2:73:36:ea:f0:25:1a:70:cb:e6:85:18:d1:
1d:58:d4:25:9b:54:7e:0c:41:80:7a:7f:22:d0:12:
e0:35:be:f7:c5:9f:9f:0b:ba:ba:de:71:b0:47:da:
c1:e2:27:31:bc:75:f9:cf:a9:98:8f:d6:e9:bd:65:
b7:54:d0:94:51:89:d4:98:8a:6b:e1:bf:56:5f:c9:
83:23:90:1d:ba:5d:1e:61:e5:26:8e:e6:d1:0e:e4:
e9:b2:e5:b0:e7:05:8b:08:87:02:29:c0:d2:6d:fa:
9d:cb:40:4c:8c:ef:ed:d7:73:18:44:4e:5f:a5:62:
80:e6:f5:7d:43:7d:1f:9f:11:bb:14:d5:bb:11:64:
39:4a:13:da:0a:1a:dc:64:de:45:0b:bc:45:17:3f:
0f:ec:3f:29:5c:4b:87:4e:5b:18:69:1e:03:e3:52:
8b:8f:2f:03:75:ed:4a:e1:07:cd:dc:17:72:f2:b5:
d6:86:22:b7:43:99:19:62:34:8b:4e:ca:74:bc:9e:
ad:bc:93:f8:b5:c1:82:bd:db:6e:77:a5:d0:ce:2b:
30:f4:f1:67:4f:21:45:c7:d9:e5:ee:39:c3:71:0f:
05:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C5:C2:E9:C4:05:3A:CE:0B:EF:4A:20:CC:BA:42:85:CE:1C:A4:D3
X509v3 Authority Key Identifier:
keyid:0B:EF:C1:EC:59:3B:16:C7:9B:C5:60:0E:F5:81:3B:0C:C6:E2:48:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/3230332e332e39302e302f32342d3234203d3e20313531353938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.3.90.0/24
Signature Algorithm: sha256WithRSAEncryption
35:0f:e4:3a:a8:f4:0f:62:e2:3c:f4:f7:71:e1:f5:19:32:59:
fb:35:36:cc:e5:77:fa:ad:61:ce:be:21:ee:be:74:c4:06:ee:
d7:41:1f:3a:af:4b:82:df:4d:9f:a7:da:c0:c0:5e:cd:ab:ba:
22:ce:8f:dc:1d:4e:c6:0e:07:93:43:4f:aa:41:c5:9c:9a:b5:
73:f0:6a:fc:9b:50:8d:f7:8b:cd:64:21:23:0d:dc:74:f4:28:
91:70:d8:51:38:72:1c:84:f6:d2:01:7c:bf:4e:54:9b:04:d9:
b4:64:91:9b:cf:67:4d:b9:67:cb:af:65:bf:c1:f0:51:60:c8:
0e:21:12:c6:99:e4:76:14:b8:00:4d:f9:9d:e1:62:7d:d4:3d:
95:10:cb:95:53:03:91:b1:90:9a:ed:1d:90:f7:11:c0:54:8a:
37:c5:dd:d6:42:ee:f2:8d:b6:36:c9:10:05:d9:f0:f4:4d:10:
2d:2c:a3:9a:f1:88:97:b0:cb:13:fe:86:ac:f3:ca:7a:8c:c7:
63:80:bb:fd:92:78:1b:84:64:84:1f:81:6c:e6:b0:fd:99:24:
d0:10:d3:2d:e4:3c:f8:0b:9b:98:cf:9b:2f:c4:f0:70:09:6b:
53:69:34:05:9e:bc:0f:b0:f8:ec:ee:19:bd:8b:ed:8e:da:0b:
8d:2a:9c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:51:18 2026 by rpki-client