
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139392e302f32342d3234203d3e203138303539.roa
File: 3230322e37382e3139392e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier: sEoEbNlfZi1J9SkZzdp3x2kFCrzB86SwmE/6ZcCifGA=
Subject key identifier: 41:A0:47:56:E9:E1:7D:A9:1C:0E:BB:6C:7B:34:52:7B:9E:F4:B9:00
Certificate issuer: /CN=67239F5E47D123019D26807163E6542441401507
Certificate serial: 6211C5EA1D8570743D67524B53ED1E770EA8E08A
Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139392e302f32342d3234203d3e203138303539.roa
Signing time: Sun 03 May 2026 03:03:56 +0000
ROA not before: Sun 03 May 2026 02:58:56 +0000
ROA not after: Sun 02 May 2027 03:03:56 +0000
asID: 18059
IP address blocks: 202.78.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:10:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:11:c5:ea:1d:85:70:74:3d:67:52:4b:53:ed:1e:77:0e:a8:e0:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67239F5E47D123019D26807163E6542441401507
Validity
Not Before: May 3 02:58:56 2026 GMT
Not After : May 2 03:03:56 2027 GMT
Subject: CN=41A04756E9E17DA91C0EBB6C7B34527B9EF4B900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:82:52:40:b4:bb:55:10:88:b9:ac:33:f5:81:
84:69:e3:65:b6:2f:14:70:e8:83:47:76:70:3c:3e:
db:49:be:4f:94:5c:39:17:0b:db:29:b0:fd:75:03:
d6:31:60:b9:8d:18:5f:1b:a2:b1:d2:11:1a:53:a0:
15:6c:c4:49:af:a2:c2:81:56:60:7b:e5:fb:63:d8:
1e:0c:dd:c8:7c:77:11:fa:83:7d:ed:06:20:7a:af:
d1:a6:50:84:cd:b6:23:d7:46:2d:b0:b5:ae:64:06:
fa:67:7a:13:a3:7b:b2:fc:8a:d0:73:d0:ca:19:e7:
bc:80:bf:67:96:09:28:fc:df:01:bb:c1:d8:ff:a9:
6a:53:6e:dd:56:4f:fa:55:49:1a:3b:92:31:b6:40:
e3:fe:6a:1b:30:a6:0b:e4:07:6c:00:f4:40:8e:a6:
5f:75:fb:e5:f8:bd:10:dc:86:30:17:68:3d:7f:4a:
bb:db:a9:4f:39:0f:a9:68:34:48:07:f7:8b:8f:3e:
e0:37:1f:e0:83:82:0b:ae:76:1e:b7:72:77:0e:cf:
c2:22:36:b4:b0:d2:4e:9b:b4:6b:42:9b:6c:4f:7c:
6e:28:5f:fb:d6:cc:68:37:de:66:f6:5c:40:db:28:
b4:b8:49:35:93:68:bc:ae:4a:61:fd:f7:0f:27:80:
01:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A0:47:56:E9:E1:7D:A9:1C:0E:BB:6C:7B:34:52:7B:9E:F4:B9:00
X509v3 Authority Key Identifier:
keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3139392e302f32342d3234203d3e203138303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.78.199.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:63:32:d2:cf:1b:28:f1:af:9c:4f:5b:06:2f:23:ed:88:56:
f9:c9:8b:08:d0:9f:43:ef:d6:3e:f7:25:c9:f2:f5:57:34:d8:
0f:9e:f0:51:9e:57:5c:e5:db:5f:44:1b:07:d0:db:4e:4b:13:
e1:7e:e9:f1:db:b8:88:74:57:14:d1:f2:2d:46:59:a8:78:38:
c3:3c:af:28:bc:c7:c8:7c:90:a6:48:32:f2:e5:62:ba:11:94:
8a:40:e4:ec:e2:43:5e:f6:20:4e:b7:17:f1:57:28:09:f9:b5:
57:ef:cc:ff:cd:79:38:36:7d:50:73:53:50:31:18:b5:cb:6b:
5b:ef:b9:b5:26:0b:5a:8b:43:8b:00:a8:4b:79:37:fc:88:22:
94:45:e1:a8:1e:c9:45:7d:c6:33:11:61:9b:28:15:85:48:d9:
53:34:be:61:e9:a0:b3:69:c6:8c:64:db:95:f7:48:88:50:04:
51:0b:87:8d:d7:68:73:00:f9:ed:34:5d:4c:ae:97:8e:d5:2c:
2d:74:b0:19:fa:5d:40:6d:98:ed:ea:a1:f5:1b:9a:b9:53:10:
8e:93:d1:8d:dc:ac:b7:6d:6e:65:d5:f6:ac:09:70:17:e0:c0:
7a:8e:8a:6d:fd:50:34:eb:db:6f:8a:43:68:ea:65:14:f2:d6:
c3:5b:4d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:41:36 2026 by rpki-client