
$ rpki-client -vvf rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36302e302f32342d3234203d3e20323031333431.roa
File: 3230322e35312e36302e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: q58scCW7sBCYqA/7Gndz9LKwymI96P89Wvy+Agpx7Mc=
Subject key identifier: 86:C9:4B:0C:25:D9:6C:D7:63:7E:F2:DC:DD:A7:1C:49:26:4D:2E:D0
Certificate issuer: /CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093
Certificate serial: 09A9457D3297FE9BE8119494292616ABAEEA1E92
Authority key identifier: 4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36302e302f32342d3234203d3e20323031333431.roa
Signing time: Sun 03 May 2026 03:02:50 +0000
ROA not before: Sun 03 May 2026 02:57:50 +0000
ROA not after: Sun 02 May 2027 03:02:50 +0000
asID: 201341
IP address blocks: 202.51.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl
rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:37:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:a9:45:7d:32:97:fe:9b:e8:11:94:94:29:26:16:ab:ae:ea:1e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D8CAFECBF12EF792F1EFD722767E5FE74282093
Validity
Not Before: May 3 02:57:50 2026 GMT
Not After : May 2 03:02:50 2027 GMT
Subject: CN=86C94B0C25D96CD7637EF2DCDDA71C49264D2ED0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:20:ed:7b:c9:09:1c:4f:c3:1d:83:cc:6e:d9:
2f:6e:c7:b9:c9:0b:3e:86:33:9a:1c:51:e9:43:0b:
3e:d6:c0:63:f9:d4:ea:b4:9c:6d:60:c3:5e:29:25:
4e:02:65:d4:3b:b7:ce:4c:ae:f5:92:9b:7a:ba:11:
06:fe:28:ea:12:90:35:f2:64:92:45:1c:32:82:fa:
ab:63:71:94:78:43:a8:78:4e:c6:71:5c:df:02:16:
f1:8d:69:54:9a:2c:63:48:5c:6f:5b:cf:21:c4:32:
e6:c4:de:00:b5:66:df:62:f3:85:3f:34:b7:32:7d:
0c:27:d2:b7:c9:e6:43:0b:9d:73:9e:c4:40:5c:7f:
67:f1:bd:24:59:1d:3a:f3:0b:fa:c7:36:de:34:08:
39:c1:52:d6:de:d2:96:b9:a7:35:80:fb:c6:56:69:
4d:b4:68:7d:19:95:f4:46:ae:51:5c:9c:77:47:fa:
32:08:ab:f9:9b:32:5d:e0:85:f9:55:48:3a:1f:9e:
56:ba:bc:bd:70:9a:3f:e9:94:5a:47:8b:cf:0f:de:
2d:74:78:fc:b4:67:17:da:15:55:14:8f:c6:f6:4e:
25:63:a0:57:f6:40:99:99:3a:db:f6:84:72:da:cc:
ee:5b:35:e0:c0:54:0a:b0:e2:ae:59:2e:ef:20:d4:
4d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C9:4B:0C:25:D9:6C:D7:63:7E:F2:DC:DD:A7:1C:49:26:4D:2E:D0
X509v3 Authority Key Identifier:
keyid:4D:8C:AF:EC:BF:12:EF:79:2F:1E:FD:72:27:67:E5:FE:74:28:20:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/4D8CAFECBF12EF792F1EFD722767E5FE74282093.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D8CAFECBF12EF792F1EFD722767E5FE74282093.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36302e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.51.60.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:aa:cd:64:c3:11:ed:bf:dc:3b:3c:35:86:b9:d0:f1:48:9c:
43:41:d1:0e:e3:71:44:6b:31:80:12:66:cd:54:ad:8b:83:59:
be:b6:73:8f:13:bc:f2:be:d1:66:85:89:8d:e6:12:99:a8:2e:
b1:77:ba:6f:f4:de:86:25:ba:cb:6b:a6:52:35:1e:20:c8:56:
23:2e:46:36:87:f3:d7:59:f5:58:d6:1e:92:53:a4:c4:d6:d4:
97:4f:13:81:fa:9d:96:11:a1:99:21:3d:5d:26:6e:49:46:f9:
ec:ee:b7:6e:53:8b:ff:ca:e4:d4:3b:fb:33:11:87:ca:fa:a2:
41:bb:03:f5:33:5d:fa:57:ef:37:fd:89:9d:88:65:46:47:95:
fb:7e:72:fb:54:ed:dd:5f:7f:0c:8d:c6:cf:1a:24:91:e2:a1:
6b:0f:78:65:0b:02:48:5c:ad:d7:c1:7b:a1:2a:06:86:c0:42:
26:e2:d5:ef:b0:fa:9d:a8:c9:2d:85:94:a6:61:af:de:c5:75:
26:67:ae:77:a3:67:67:9f:1b:42:6e:bb:1b:2a:68:0a:9b:e1:
8e:f3:be:2a:a4:a6:f7:25:5b:67:42:48:4e:83:a1:b6:8c:1d:
53:fc:a1:11:88:83:61:78:55:1a:4f:26:75:40:fe:4f:d8:6f:
4c:1d:7f:a2
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUCalFfTKX/pvoEZSUKSYWq67qHpIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ4Q0FGRUNCRjEyRUY3OTJGMUVGRDcyMjc2N0U1RkU3
NDI4MjA5MzAeFw0yNjA1MDMwMjU3NTBaFw0yNzA1MDIwMzAyNTBaMDMxMTAvBgNV
BAMTKDg2Qzk0QjBDMjVEOTZDRDc2MzdFRjJEQ0REQTcxQzQ5MjY0RDJFRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgIO17yQkcT8Mdg8xu2S9ux7nJ
Cz6GM5ocUelDCz7WwGP51Oq0nG1gw14pJU4CZdQ7t85MrvWSm3q6EQb+KOoSkDXy
ZJJFHDKC+qtjcZR4Q6h4TsZxXN8CFvGNaVSaLGNIXG9bzyHEMubE3gC1Zt9i84U/
NLcyfQwn0rfJ5kMLnXOexEBcf2fxvSRZHTrzC/rHNt40CDnBUtbe0pa5pzWA+8ZW
aU20aH0ZlfRGrlFcnHdH+jIIq/mbMl3ghflVSDofnla6vL1wmj/plFpHi88P3i10
ePy0ZxfaFVUUj8b2TiVjoFf2QJmZOtv2hHLazO5bNeDAVAqw4q5ZLu8g1E3fAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUhslLDCXZbNdjfvLc3accSSZNLtAwHwYDVR0j
BBgwFoAUTYyv7L8S73kvHv1yJ2fl/nQoIJMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YmU1NDAxNjQtM2Q0Ni00Nzk0LWJmNTUtYjZiMTM0ZDlhYjEzLzAvNEQ4Q0FGRUNC
RjEyRUY3OTJGMUVGRDcyMjc2N0U1RkU3NDI4MjA5My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80RDhDQUZFQ0JGMTJFRjc5MkYxRUZENzIyNzY3RTVGRTc0Mjgy
MDkzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2JlNTQwMTY0LTNkNDYtNDc5NC1i
ZjU1LWI2YjEzNGQ5YWIxMy8wLzMyMzAzMjJlMzUzMTJlMzYzMDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMyMzAzMTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMozPDANBgkqhkiG
9w0BAQsFAAOCAQEAL6rNZMMR7b/cOzw1hrnQ8UicQ0HRDuNxRGsxgBJmzVSti4NZ
vrZzjxO88r7RZoWJjeYSmagusXe6b/TehiW6y2umUjUeIMhWIy5GNofz11n1WNYe
klOkxNbUl08TgfqdlhGhmSE9XSZuSUb57O63blOL/8rk1Dv7MxGHyvqiQbsD9TNd
+lfvN/2JnYhlRkeV+35y+1Tt3V9/DI3GzxokkeKhaw94ZQsCSFyt18F7oSoGhsBC
JuLV77D6najJLYWUpmGv3sV1Jmeud6NnZ58bQm67GypoCpvhjvO+KqSm9yVbZ0JI
ToOhtowdU/yhEYiDYXhVGk8mdUD+T9hvTB1/og==
-----END CERTIFICATE-----
Generated at Wed May 13 05:51:08 2026 by rpki-client