
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136392e302f32342d3234203d3e203138303539.roa
File: 3230322e34332e3136392e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier: RKPIRSTRJ6ovskZLy7e961DIA/8J6FLcVr0Iq/M/VKY=
Subject key identifier: 05:3C:DF:5A:02:5B:BC:61:2D:7C:C5:89:B2:23:61:83:BF:52:2C:71
Certificate issuer: /CN=67239F5E47D123019D26807163E6542441401507
Certificate serial: 7298E3F6A7FE45397542E2FC4B7478310714FF78
Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136392e302f32342d3234203d3e203138303539.roa
Signing time: Sun 03 May 2026 03:03:49 +0000
ROA not before: Sun 03 May 2026 02:58:49 +0000
ROA not after: Sun 02 May 2027 03:03:49 +0000
asID: 18059
IP address blocks: 202.43.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:10:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:98:e3:f6:a7:fe:45:39:75:42:e2:fc:4b:74:78:31:07:14:ff:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67239F5E47D123019D26807163E6542441401507
Validity
Not Before: May 3 02:58:49 2026 GMT
Not After : May 2 03:03:49 2027 GMT
Subject: CN=053CDF5A025BBC612D7CC589B2236183BF522C71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:23:ad:05:42:47:12:14:dc:63:92:e9:2d:a7:
e4:dc:55:ff:17:47:53:d6:b3:08:6c:31:7f:31:8c:
bf:7d:1c:ee:ab:b3:95:87:e7:d6:00:ef:30:24:dd:
1f:ee:b9:27:45:2f:9e:c5:dd:42:b9:81:93:0d:85:
df:5c:ea:80:3e:be:c5:ce:84:cb:29:a2:bc:a7:31:
62:09:ae:14:fb:b1:5c:80:12:f2:08:f0:6f:79:c4:
7f:a0:88:ba:79:07:00:1f:be:82:15:89:58:96:a3:
73:60:a3:a6:33:78:7b:fd:75:93:5b:8a:5c:8e:50:
36:05:18:20:ba:1f:06:46:2d:9b:47:08:e1:4a:59:
e2:0b:e3:66:f1:80:8e:1a:e0:d3:e2:fd:32:83:26:
81:7a:4f:07:9a:e9:9a:75:86:6d:43:7e:19:ac:88:
5a:e3:76:b2:27:5b:c6:ed:40:ce:72:78:60:4f:42:
a6:62:cc:e3:25:2d:9d:c4:4b:f6:34:22:05:d8:d6:
42:a8:f4:38:cd:86:39:70:3a:38:8e:4e:14:9c:60:
f7:af:4c:87:5a:11:eb:6e:82:09:1d:43:27:6e:2e:
2f:56:fd:4e:61:b7:c2:97:e0:d3:77:ff:83:cc:b2:
9e:c1:cf:16:be:57:f7:8f:19:b2:f6:92:49:cd:10:
d0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3C:DF:5A:02:5B:BC:61:2D:7C:C5:89:B2:23:61:83:BF:52:2C:71
X509v3 Authority Key Identifier:
keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136392e302f32342d3234203d3e203138303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.43.169.0/24
Signature Algorithm: sha256WithRSAEncryption
47:06:e6:eb:0b:4a:cf:f9:e6:e6:fb:35:01:71:66:2e:f0:31:
93:61:3d:aa:54:5c:9e:d4:20:64:02:42:7e:48:35:90:e1:e5:
e2:9d:5c:0d:4f:f4:16:88:e9:37:f6:b2:58:29:a2:32:00:8f:
d8:b8:64:0b:06:ba:82:dd:81:a2:81:7c:13:c5:31:62:34:fa:
04:d1:25:32:fc:30:cd:55:96:43:b5:12:aa:74:88:28:99:72:
73:d7:d2:ef:57:6b:36:08:c4:6d:1b:dc:4f:44:e6:48:9f:9b:
26:0a:9c:7a:9f:98:5a:f3:99:e7:94:fe:0f:b1:ed:9e:00:43:
62:a8:a0:5a:79:90:3e:b2:ec:d0:a2:a9:fe:ae:fb:1c:7c:eb:
00:a8:e8:43:65:02:6c:05:4c:43:fa:ea:89:90:92:08:06:0f:
0d:2d:0e:16:6b:3c:20:2f:4a:a4:fe:60:f6:e7:45:2a:d1:a4:
3d:5e:7e:21:20:33:79:33:03:e1:83:29:30:d1:a1:52:73:29:
46:a8:a6:55:fb:6c:0b:b3:b6:21:e6:75:54:5c:b1:ba:4d:22:
39:a0:64:95:83:d5:ed:3a:eb:04:23:d9:0c:0a:99:af:23:df:
f8:a3:57:05:53:93:74:c1:13:d5:62:52:08:ca:c2:87:f7:fb:
4b:00:d9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:22:16 2026 by rpki-client