
$ rpki-client -vvf rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35382e302f32342d3234203d3e203330383630.roa
File: 3230322e35312e35382e302f32342d3234203d3e203330383630.roa (raw, json)
Hash identifier: urgfoaYh1o6UsdX1mUmdbsm+CcX88/2KXBm9Z1HG15I=
Subject key identifier: 8C:CF:CC:7E:F6:61:71:11:71:B4:0A:C8:BC:49:F7:BD:2B:D1:F9:2C
Certificate issuer: /CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093
Certificate serial: 0C938FD825EDC000D12A5AF79D719BE6FF23C3C5
Authority key identifier: 4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35382e302f32342d3234203d3e203330383630.roa
Signing time: Sun 03 May 2026 03:02:50 +0000
ROA not before: Sun 03 May 2026 02:57:50 +0000
ROA not after: Sun 02 May 2027 03:02:50 +0000
asID: 30860
IP address blocks: 202.51.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl
rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:37:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:93:8f:d8:25:ed:c0:00:d1:2a:5a:f7:9d:71:9b:e6:ff:23:c3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093
Validity
Not Before: May 3 02:57:50 2026 GMT
Not After : May 2 03:02:50 2027 GMT
Subject: CN=8CCFCC7EF661711171B40AC8BC49F7BD2BD1F92C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:bf:7f:8e:a1:0e:5b:7f:c3:1a:23:c1:eb:f4:
ad:6d:59:74:03:79:43:1c:72:71:01:8f:a9:56:fb:
69:f6:cf:77:28:26:c8:c5:97:9b:61:d9:21:4e:90:
e9:c9:9c:0c:d5:0f:90:ea:a7:f3:4b:1a:f0:01:96:
db:de:52:f2:73:23:04:2c:62:38:85:08:43:09:14:
68:01:9c:27:45:8b:a5:c2:51:51:5b:4b:f1:75:79:
72:b7:42:5e:d0:fb:28:08:bb:53:8f:ef:8f:2d:4a:
12:c6:79:01:ec:f9:41:71:ee:d2:6e:1d:b4:63:d8:
1b:60:79:f7:2a:66:d5:98:d8:67:12:2d:1e:73:93:
00:2c:74:e4:92:c3:21:03:4d:21:f6:69:d1:51:91:
2c:1b:87:12:ea:60:1f:d1:7e:02:d8:ca:8c:a9:58:
f8:27:70:cd:fb:57:3b:6d:1a:76:5e:7a:09:dc:9d:
47:56:33:78:56:ba:14:1d:eb:63:43:12:96:de:1f:
41:f7:99:32:15:de:00:c4:c7:57:a6:66:a6:6a:f8:
51:18:1f:f5:35:8e:7c:82:df:eb:12:47:e5:9e:c3:
7c:ab:22:4c:d6:d9:24:96:0a:76:33:f7:00:d6:fa:
6d:53:a7:1f:f5:20:2f:50:e4:b2:3f:f0:41:44:ab:
b8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CF:CC:7E:F6:61:71:11:71:B4:0A:C8:BC:49:F7:BD:2B:D1:F9:2C
X509v3 Authority Key Identifier:
keyid:4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35382e302f32342d3234203d3e203330383630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.51.58.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:1c:7a:d9:56:6b:0b:6c:48:08:be:56:a4:ba:87:f0:2e:72:
d7:d9:30:26:5e:fe:ea:09:f6:a3:ac:fe:4e:c1:c8:92:4f:61:
9d:9e:c0:21:68:c1:b4:8c:c5:26:bd:d6:35:62:e8:2f:8b:b5:
e1:32:23:07:40:55:a1:4a:e7:84:c4:c5:ec:5c:0e:ef:c5:46:
aa:fb:88:f0:3a:85:d3:ab:3d:df:8b:a5:a5:41:be:66:03:2c:
ea:8c:cb:f5:d9:79:52:c6:73:43:95:66:b9:01:04:13:7c:87:
1b:21:62:78:4c:52:33:aa:f9:c3:cb:b0:de:f9:bd:0c:53:78:
0e:f1:4b:b0:9f:33:d4:e5:60:32:6d:7e:c3:e5:b4:e0:3a:ba:
db:a8:64:83:6c:c4:9e:49:2e:55:a2:67:aa:f0:25:2c:96:8e:
b5:9a:d8:d9:ea:6a:71:5e:65:3d:2b:3d:16:f2:34:b3:71:7b:
2f:ab:b1:8d:10:76:ba:a7:80:96:09:78:d4:6f:dd:cf:a1:8f:
bd:b8:85:7e:f9:0f:a9:8b:a3:e6:20:f3:d6:e1:90:93:84:06:
ab:3b:93:3f:97:73:a5:99:40:e3:84:b7:db:a1:35:07:21:04:
f0:fd:9f:97:7c:de:c0:d4:63:08:9d:db:32:f7:2e:24:98:80:
3e:72:17:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:51:36 2026 by rpki-client