
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230352e302f32342d3234203d3e203138303539.roa
File: 3230322e37382e3230352e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier: 8v/AkNThw1q6SndEvHMEQO6HLCc7ZLY9OXWWoN9aRzI=
Subject key identifier: 1F:1A:AD:5D:4C:70:0E:A1:BD:17:F4:6B:4F:14:9B:7D:70:19:AE:24
Certificate issuer: /CN=67239F5E47D123019D26807163E6542441401507
Certificate serial: 3F2F5AEE64F0717EFAFE77D272BA0DFB4567D60E
Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230352e302f32342d3234203d3e203138303539.roa
Signing time: Sun 03 May 2026 03:03:48 +0000
ROA not before: Sun 03 May 2026 02:58:48 +0000
ROA not after: Sun 02 May 2027 03:03:48 +0000
asID: 18059
IP address blocks: 202.78.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:10:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:2f:5a:ee:64:f0:71:7e:fa:fe:77:d2:72:ba:0d:fb:45:67:d6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67239F5E47D123019D26807163E6542441401507
Validity
Not Before: May 3 02:58:48 2026 GMT
Not After : May 2 03:03:48 2027 GMT
Subject: CN=1F1AAD5D4C700EA1BD17F46B4F149B7D7019AE24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:47:42:65:96:93:97:3f:ee:88:4f:2f:83:33:
06:7b:f2:64:b6:bc:f1:48:61:6e:bd:2f:ab:7c:d8:
97:2b:7e:63:88:70:04:ad:d1:92:cc:38:ab:b8:f2:
d4:9b:49:29:3c:85:a7:77:30:fc:e3:8c:d4:cf:e6:
de:ae:df:90:76:5b:4d:2c:dc:21:2f:a5:06:53:d2:
01:2b:ed:cb:e9:f9:6b:5e:4e:5c:89:05:26:3d:b8:
21:cf:f6:43:7a:38:05:d6:39:44:21:ac:c2:0a:35:
86:88:69:42:cf:2b:ba:5c:34:18:74:14:8e:97:2c:
52:16:64:52:33:3a:4e:a7:b8:9f:fe:a7:4a:62:b9:
b8:ee:56:df:a0:f6:1e:dc:b5:ca:43:b4:07:67:b9:
a7:ad:60:a1:e9:2a:d5:2d:45:ab:59:3c:72:6f:51:
08:de:12:9c:2d:81:6e:ee:98:78:08:39:e9:7c:ce:
17:9c:c6:5e:1b:43:2a:b6:a4:ae:99:23:64:a2:08:
36:66:cc:44:4e:c3:e6:c9:68:22:d6:5e:8f:97:5d:
e9:4d:f4:e3:fc:8f:ad:f6:4e:2a:59:50:2c:95:9b:
25:bc:77:9b:52:01:88:ce:a6:06:de:0b:11:37:a6:
92:19:67:23:ea:8b:89:46:68:fb:f5:9a:23:97:72:
6c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1A:AD:5D:4C:70:0E:A1:BD:17:F4:6B:4F:14:9B:7D:70:19:AE:24
X509v3 Authority Key Identifier:
keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e37382e3230352e302f32342d3234203d3e203138303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.78.205.0/24
Signature Algorithm: sha256WithRSAEncryption
86:5c:48:42:64:b3:19:f2:cb:63:55:d4:8f:0c:09:28:f7:e3:
e6:9a:00:23:04:f3:a7:c2:aa:0a:da:98:c0:f4:73:a8:b2:82:
8f:2a:01:57:95:76:2e:95:06:21:76:df:bb:c8:8e:16:6c:c5:
12:e4:11:d7:15:f5:a4:6d:20:f8:5b:db:df:ae:1f:74:47:d4:
fe:d4:bc:c0:f2:eb:a9:b3:bf:bb:ee:6c:72:f4:24:d2:f5:60:
af:ed:ff:a7:4d:28:ed:82:a8:3e:62:bc:c9:93:ce:a3:cb:65:
7f:87:59:a4:2d:63:ba:80:12:6d:01:40:21:9b:da:22:d7:29:
f7:04:99:e6:f7:67:17:55:c0:7e:cd:6c:67:87:46:2c:10:7f:
e6:fa:96:8f:a8:27:97:93:99:7b:73:cc:f6:9d:34:22:9a:29:
d6:42:a5:22:b5:1e:3b:04:5f:c8:72:99:04:b4:bc:db:ca:0d:
99:4e:cc:4f:05:08:55:b6:c9:23:ad:8f:37:b3:8c:60:52:e5:
2e:3e:8c:ac:af:fe:48:45:1d:47:c6:a5:7e:83:50:97:f7:cb:
e7:76:e0:a2:4c:02:9c:4c:06:3a:08:fd:10:f6:4b:2e:c9:45:
25:ad:82:00:29:a7:62:38:9f:f0:49:42:b5:4c:7c:2f:4d:18:
90:93:c4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:28:53 2026 by rpki-client