
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e33302e302f32342d3234203d3e203138303539.roa
File: 3132322e3132382e33302e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier: FiLh0Dh3Kv56ePaur48u+pWTUlZhklRI8x5WvkEGDZg=
Subject key identifier: BA:4A:92:8F:F7:D4:64:67:80:E6:19:9E:83:5C:23:1C:51:7A:21:1B
Certificate issuer: /CN=67239F5E47D123019D26807163E6542441401507
Certificate serial: 6D5A933BD793311D67848759E58F3D27073939A5
Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e33302e302f32342d3234203d3e203138303539.roa
Signing time: Sun 03 May 2026 03:03:40 +0000
ROA not before: Sun 03 May 2026 02:58:40 +0000
ROA not after: Sun 02 May 2027 03:03:40 +0000
asID: 18059
IP address blocks: 122.128.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:10:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:5a:93:3b:d7:93:31:1d:67:84:87:59:e5:8f:3d:27:07:39:39:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67239F5E47D123019D26807163E6542441401507
Validity
Not Before: May 3 02:58:40 2026 GMT
Not After : May 2 03:03:40 2027 GMT
Subject: CN=BA4A928FF7D4646780E6199E835C231C517A211B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:61:0b:54:b9:a5:a4:82:41:5f:25:43:0c:e0:
e4:4c:fa:95:6e:6f:de:d4:34:ab:5f:16:ea:df:54:
98:7e:a5:ad:07:1d:07:fa:d2:5f:3d:f7:8e:af:82:
32:41:6e:84:3e:e7:68:58:58:c9:2e:c5:a7:ef:eb:
cb:02:60:e2:63:09:b5:3c:22:ba:13:78:ec:d4:a6:
35:23:a2:65:60:8e:26:03:3a:d5:70:11:98:9f:b7:
35:98:b7:ac:24:80:a5:9d:6e:72:73:3e:38:7d:a7:
33:42:e6:99:b0:8e:dc:ed:b1:5c:7d:71:84:a0:12:
ac:93:65:93:da:da:71:aa:4a:5c:e1:c4:5f:50:00:
db:78:6d:74:c0:02:d7:4b:13:82:48:bd:d2:15:f0:
1b:7c:8d:fe:97:bc:b6:a0:e0:0f:45:b8:a5:d0:a9:
a4:05:66:40:ac:07:a1:82:20:32:3a:b2:c2:a4:fb:
75:24:13:94:e7:ba:b3:23:67:bf:77:49:0e:9e:f4:
68:15:1e:26:9b:71:47:ab:f0:e8:5f:06:73:bd:38:
97:bd:4a:dd:30:c1:5b:31:ef:6a:cf:a4:c6:07:83:
be:1a:76:72:a2:46:eb:be:f4:6c:0b:f7:bb:f9:01:
fd:40:f5:0d:86:f2:12:75:05:c3:0d:c2:58:f8:c3:
be:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4A:92:8F:F7:D4:64:67:80:E6:19:9E:83:5C:23:1C:51:7A:21:1B
X509v3 Authority Key Identifier:
keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e33302e302f32342d3234203d3e203138303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.128.30.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:d9:68:65:79:91:1a:3e:04:d3:07:a2:68:cd:7d:5d:0a:00:
a7:20:63:b2:85:01:7a:a2:43:b4:fb:69:12:39:93:ab:d2:2b:
a1:34:ba:97:5c:5f:b9:da:f2:93:7c:99:21:1f:06:df:ff:c7:
e7:72:3d:c9:98:52:9f:8f:46:f5:ee:22:bf:bd:87:92:4f:e3:
97:99:b0:0f:b7:c4:2a:7d:7d:cc:db:d6:c3:a6:67:3a:6c:f5:
a5:2a:7d:85:26:b8:0c:d5:5d:5f:00:15:0b:59:76:61:2d:d6:
2f:0b:ed:8b:23:6a:3b:f3:62:ae:49:ac:df:c0:e9:da:28:a3:
a4:2d:e4:bd:2c:ff:ab:d5:da:ca:0d:af:33:8d:ea:68:46:79:
19:e0:4a:b4:15:34:32:c9:e9:a4:f1:8b:fd:4d:e8:09:43:8e:
2f:18:38:0d:a4:56:4e:cb:97:6d:89:43:53:ed:53:42:96:e9:
4a:d1:99:f5:ee:73:ba:f7:ef:da:a6:74:84:a5:aa:6c:03:8f:
10:ea:be:7b:f2:a4:ed:27:70:89:4a:5e:fc:f3:90:fd:b8:a1:
2c:4e:a6:0d:f9:3a:1a:b4:b5:ec:68:93:3b:61:bc:d0:4b:5b:
94:91:db:b4:eb:dc:29:f4:e9:f6:d4:5d:a7:92:4e:c4:58:e5:
f0:49:03:a0
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUbVqTO9eTMR1nhIdZ5Y89Jwc5OaUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjcyMzlGNUU0N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0
MTQwMTUwNzAeFw0yNjA1MDMwMjU4NDBaFw0yNzA1MDIwMzAzNDBaMDMxMTAvBgNV
BAMTKEJBNEE5MjhGRjdENDY0Njc4MEU2MTk5RTgzNUMyMzFDNTE3QTIxMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChYQtUuaWkgkFfJUMM4ORM+pVu
b97UNKtfFurfVJh+pa0HHQf60l89946vgjJBboQ+52hYWMkuxafv68sCYOJjCbU8
IroTeOzUpjUjomVgjiYDOtVwEZiftzWYt6wkgKWdbnJzPjh9pzNC5pmwjtztsVx9
cYSgEqyTZZPa2nGqSlzhxF9QANt4bXTAAtdLE4JIvdIV8Bt8jf6XvLag4A9FuKXQ
qaQFZkCsB6GCIDI6ssKk+3UkE5TnurMjZ793SQ6e9GgVHiabcUer8OhfBnO9OJe9
St0wwVsx72rPpMYHg74adnKiRuu+9GwL97v5Af1A9Q2G8hJ1BcMNwlj4w76fAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUukqSj/fUZGeA5hmeg1wjHFF6IRswHwYDVR0j
BBgwFoAUZyOfXkfRIwGdJoBxY+ZUJEFAFQcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzI4MzY3NjMtMTJiNi00ZDhmLWFkMGItNGNkNWI2MTk1OWVmLzAvNjcyMzlGNUU0
N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0MTQwMTUwNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82NzIzOUY1RTQ3RDEyMzAxOUQyNjgwNzE2M0U2NTQyNDQxNDAx
NTA3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h
ZDBiLTRjZDViNjE5NTllZi8wLzMxMzIzMjJlMzEzMjM4MmUzMzMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzODMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHqAHjANBgkqhkiG
9w0BAQsFAAOCAQEAndloZXmRGj4E0weiaM19XQoApyBjsoUBeqJDtPtpEjmTq9Ir
oTS6l1xfudryk3yZIR8G3//H53I9yZhSn49G9e4iv72Hkk/jl5mwD7fEKn19zNvW
w6ZnOmz1pSp9hSa4DNVdXwAVC1l2YS3WLwvtiyNqO/Nirkms38Dp2iijpC3kvSz/
q9Xayg2vM43qaEZ5GeBKtBU0MsnppPGL/U3oCUOOLxg4DaRWTsuXbYlDU+1TQpbp
StGZ9e5zuvfv2qZ0hKWqbAOPEOq+e/Kk7SdwiUpe/POQ/bihLE6mDfk6GrS17GiT
O2G80EtblJHbtOvcKfTp9tRdp5JOxFjl8EkDoA==
-----END CERTIFICATE-----
Generated at Wed May 13 07:38:46 2026 by rpki-client