
$ rpki-client -vvf rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35392e302f32342d3234203d3e203330383630.roa
File: 3230322e35312e35392e302f32342d3234203d3e203330383630.roa (raw, json)
Hash identifier: JSmaKD9Eb9InTbBwEjQnvpvNRxQcyoooyCEpIv/JUMs=
Subject key identifier: 56:34:9A:49:F6:57:3D:D4:1E:B3:57:3B:98:58:44:7A:2D:D1:A7:AD
Certificate issuer: /CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093
Certificate serial: 0EA53D2B9AA1E9B9F66A298FD833DE4B2456D5C4
Authority key identifier: 4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35392e302f32342d3234203d3e203330383630.roa
Signing time: Sun 03 May 2026 03:02:53 +0000
ROA not before: Sun 03 May 2026 02:57:53 +0000
ROA not after: Sun 02 May 2027 03:02:53 +0000
asID: 30860
IP address blocks: 202.51.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl
rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:37:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:a5:3d:2b:9a:a1:e9:b9:f6:6a:29:8f:d8:33:de:4b:24:56:d5:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093
Validity
Not Before: May 3 02:57:53 2026 GMT
Not After : May 2 03:02:53 2027 GMT
Subject: CN=56349A49F6573DD41EB3573B9858447A2DD1A7AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:ae:c0:94:09:4d:26:e9:b5:82:b6:90:a9:
67:df:8b:13:fd:ae:e3:28:5e:de:bc:c9:f2:a0:5f:
ae:a3:8f:9e:e6:70:66:2a:e3:c4:5f:f4:91:43:74:
11:c3:6c:d3:bc:8f:cc:0c:1d:1d:77:d5:98:af:52:
8e:df:14:42:98:4f:8c:84:cc:59:a7:a5:81:84:0c:
1c:d4:29:45:4e:f2:76:cb:e4:eb:e1:8f:68:a3:f2:
d6:44:a8:8b:3b:eb:5b:cc:2a:a3:ba:3a:e8:a1:74:
e5:78:10:33:34:7d:c5:fc:b9:af:a7:f4:3b:7f:49:
02:7a:da:34:2c:e8:a5:10:8b:a7:91:90:82:eb:0f:
7a:71:f0:00:f4:1a:ce:c2:ec:8b:59:07:9d:13:fb:
88:20:ca:be:0e:51:a6:93:89:d7:de:37:f2:e5:7b:
b1:b3:7b:ad:c4:d5:e6:d9:b0:f2:d0:2e:97:56:88:
b3:3d:a8:78:b3:5b:db:09:28:be:95:c0:06:33:3e:
07:e5:1e:b3:da:ae:45:b1:4b:cf:93:8c:b5:c9:44:
7e:d3:16:d5:9c:e1:aa:ba:4a:92:16:f2:73:78:7e:
c6:cc:6b:44:5f:28:74:10:27:db:69:30:07:8b:a8:
c9:a7:e6:80:16:dd:7e:35:f3:63:d3:bd:d7:50:9f:
37:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:34:9A:49:F6:57:3D:D4:1E:B3:57:3B:98:58:44:7A:2D:D1:A7:AD
X509v3 Authority Key Identifier:
keyid:4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35392e302f32342d3234203d3e203330383630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.51.59.0/24
Signature Algorithm: sha256WithRSAEncryption
32:6a:4b:f5:6f:41:6b:30:fd:3d:8b:ba:87:de:64:57:77:84:
a3:44:23:72:dd:62:b6:dd:d8:81:d5:20:0d:13:ee:50:17:1e:
d3:d5:b0:9d:5b:21:ba:3a:52:6c:7f:73:5e:aa:79:2a:b1:a9:
9d:19:4e:89:49:8c:68:e2:a6:fa:12:ed:64:a9:1e:e5:e8:17:
8a:a3:10:46:d2:ce:3f:bf:5f:06:1c:e8:d5:2d:c1:2a:6d:7b:
4f:ad:1a:6d:9a:af:4e:bb:1a:78:92:cf:82:95:3e:15:cd:07:
7e:97:12:99:01:af:b5:ce:40:35:4d:a2:96:b9:43:18:ff:d1:
7c:2c:30:f9:ce:29:00:8f:74:7a:6f:d1:58:b8:2b:2d:3d:11:
2d:80:3a:bf:b3:e9:82:33:0c:4e:c2:ae:09:6b:fd:d7:ad:e9:
d4:52:f5:32:78:07:9f:fe:6c:3f:29:53:7d:1b:d2:77:77:a0:
f2:cf:de:b3:bc:d0:c7:e1:2f:93:dd:97:f4:6c:d1:b1:2f:3c:
73:f9:b4:b4:55:2a:f3:18:6a:15:fe:52:ef:34:35:b4:7e:ad:
c4:be:e8:ef:c9:a1:48:3e:28:8a:9a:ff:7e:fe:c3:3b:85:81:
6c:d3:b9:af:f1:ba:64:0b:d0:d7:7b:a3:db:61:e4:cd:c9:0b:
58:e1:e1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:51 2026 by rpki-client