
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139372e302f32342d3234203d3e203138303539.roa
File: 3230322e37382e3139372e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier: L7TYHVHQET6CzubBavDmZhhk2BGEVd2C6X1TzDwm/IY=
Subject key identifier: B3:F1:0F:14:5E:84:D7:6A:40:21:A2:41:82:39:3B:C8:CE:1B:D8:35
Certificate issuer: /CN=67239F5E47D123019D26807163E6542441401507
Certificate serial: 56114181E9EF2140207D2F3F16C08E03AF1BF750
Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139372e302f32342d3234203d3e203138303539.roa
Signing time: Sun 03 May 2026 03:03:35 +0000
ROA not before: Sun 03 May 2026 02:58:35 +0000
ROA not after: Sun 02 May 2027 03:03:35 +0000
asID: 18059
IP address blocks: 202.78.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:10:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:11:41:81:e9:ef:21:40:20:7d:2f:3f:16:c0:8e:03:af:1b:f7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67239F5E47D123019D26807163E6542441401507
Validity
Not Before: May 3 02:58:35 2026 GMT
Not After : May 2 03:03:35 2027 GMT
Subject: CN=B3F10F145E84D76A4021A24182393BC8CE1BD835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b5:9b:cb:09:d3:e6:53:9a:a0:89:0f:b3:0b:
c3:6c:ae:b6:a2:f7:57:e3:5b:45:1d:ee:69:42:b4:
58:7a:75:50:f4:46:92:94:10:f2:2a:ef:a8:f3:10:
c3:c6:38:a1:f8:e1:09:dc:98:48:79:bd:42:b1:ae:
4b:95:85:1c:aa:17:a2:0c:3d:28:5f:ed:20:21:aa:
e2:88:c1:1c:b5:5f:1c:de:ac:a9:e9:76:d4:03:91:
a5:c7:d9:b0:80:8b:29:0f:1f:fd:f8:17:64:0d:f4:
d8:c7:52:51:54:19:b2:ba:01:a4:a9:2f:8b:df:ed:
dc:74:96:fc:2d:9d:71:ac:d1:e4:30:46:db:40:69:
2f:85:7a:2e:0f:34:62:47:93:30:1a:91:33:20:51:
87:79:b2:3a:3e:78:a7:d8:de:36:72:5e:2a:56:ad:
52:13:b5:65:eb:9b:2b:47:c0:f1:4c:8d:f2:4d:5c:
81:7b:18:85:8c:a9:e0:86:35:2a:fb:c0:1c:18:ff:
9b:1e:b0:9e:f4:40:1a:a0:d2:4c:50:f5:a0:b8:d3:
eb:2d:4a:d2:ba:06:65:58:f1:79:a8:1d:4d:75:15:
17:ba:5f:b2:44:17:11:5d:23:f9:4a:0c:7f:55:e3:
d3:fa:e1:75:f1:e5:96:92:80:f4:74:e5:93:e8:fa:
95:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F1:0F:14:5E:84:D7:6A:40:21:A2:41:82:39:3B:C8:CE:1B:D8:35
X509v3 Authority Key Identifier:
keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139372e302f32342d3234203d3e203138303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.78.197.0/24
Signature Algorithm: sha256WithRSAEncryption
93:2b:28:72:8f:f7:d0:df:38:c1:15:98:e6:57:e5:a8:94:37:
00:bd:47:0b:12:21:4c:ad:dd:be:09:b4:0b:d9:49:18:b3:44:
fc:4f:c4:21:29:e2:3a:29:7e:a5:7a:ec:c5:23:a3:7e:0e:51:
3c:3e:76:ea:62:ab:52:fc:76:e8:1a:94:83:9a:dd:34:6b:a3:
a3:9f:0f:d7:25:fb:cb:64:3c:75:d8:88:d1:e4:df:e5:6a:8b:
db:e4:56:43:ea:d1:12:d5:c9:1c:c4:0b:01:e2:58:0b:64:19:
14:26:19:3e:d5:0b:fd:af:40:1d:86:4b:51:19:4a:b2:32:ed:
51:0f:69:67:1e:f7:c0:d6:c7:71:8a:e4:3c:b8:1a:ec:bc:ed:
7c:6e:7e:94:3c:26:d8:5c:10:c6:e5:6c:41:ed:1a:b7:17:68:
ea:f1:28:cf:a4:63:60:af:1c:ca:65:e8:9c:b3:de:11:64:43:
76:0f:38:42:c6:23:fa:d9:72:64:3c:db:10:6e:d8:28:13:11:
4c:a3:ec:d6:08:39:ed:5f:56:2d:74:35:fc:5f:95:bd:27:ce:
8c:14:78:77:63:a2:86:8f:5f:3f:58:9c:63:89:60:f3:b2:0e:
44:f6:c0:51:e9:dc:84:fa:c3:30:45:ed:ea:03:01:dc:c3:7f:
6d:86:9f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:43:24 2026 by rpki-client