
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233322e302f32342d3234203d3e203138303539.roa
File: 3230332e3133342e3233322e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier: UEc2zMAG5assPwSwjz3cROoi21DbTvw7uqXOrDwJUA8=
Subject key identifier: 81:E6:A6:C5:FC:FB:79:A0:46:4C:C9:C6:48:45:02:5C:D6:19:FA:74
Certificate issuer: /CN=67239F5E47D123019D26807163E6542441401507
Certificate serial: 343F06A38DA97D002B2FB69E6860047C17555681
Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233322e302f32342d3234203d3e203138303539.roa
Signing time: Sun 03 May 2026 03:03:47 +0000
ROA not before: Sun 03 May 2026 02:58:47 +0000
ROA not after: Sun 02 May 2027 03:03:47 +0000
asID: 18059
IP address blocks: 203.134.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:10:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:3f:06:a3:8d:a9:7d:00:2b:2f:b6:9e:68:60:04:7c:17:55:56:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67239F5E47D123019D26807163E6542441401507
Validity
Not Before: May 3 02:58:47 2026 GMT
Not After : May 2 03:03:47 2027 GMT
Subject: CN=81E6A6C5FCFB79A0464CC9C64845025CD619FA74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b7:39:40:93:81:69:dc:df:50:98:67:ea:4d:
f8:c7:b9:59:82:57:e9:a3:f5:b7:98:ba:de:ed:94:
6c:9c:c0:ba:6e:d1:86:25:d6:ff:a6:0c:df:9b:6b:
72:8f:0f:06:f0:48:52:07:56:b7:68:6e:d2:db:52:
d9:5f:0e:0f:d3:40:86:95:25:78:14:1b:86:36:cb:
c2:31:db:eb:fb:dd:4c:f8:b0:f9:71:90:76:c6:d9:
ce:78:ce:f0:69:f9:45:14:3c:80:b3:23:f1:63:5a:
35:15:92:7b:ee:37:ba:19:2c:a7:d6:19:3d:1b:b3:
ff:db:72:21:cf:68:eb:6d:ae:0a:80:b1:79:ba:e6:
93:d8:7e:80:08:33:df:ee:20:1e:bb:71:f9:8e:19:
52:6f:99:b7:a0:72:d2:9d:bb:35:39:06:67:d1:76:
8d:33:2f:43:dc:53:14:1f:b7:5b:dc:7a:96:04:77:
71:82:d1:1f:86:da:6f:df:56:45:11:01:0c:53:d0:
d0:9b:16:bc:ad:47:39:1f:d3:1f:9c:b5:8a:89:9d:
cb:35:47:6c:b4:f0:8a:a3:6c:5d:e9:9a:19:ac:92:
55:61:c6:4e:65:7a:45:47:89:0d:7a:e2:bc:7a:a2:
44:2c:5b:7f:24:0c:cd:06:64:ef:66:d9:5f:95:52:
e9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E6:A6:C5:FC:FB:79:A0:46:4C:C9:C6:48:45:02:5C:D6:19:FA:74
X509v3 Authority Key Identifier:
keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233322e302f32342d3234203d3e203138303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.134.232.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:dd:70:55:b3:99:fc:f9:b6:b8:b1:43:3e:82:5f:33:bd:90:
62:56:00:77:fb:f6:06:e4:e4:89:5a:c6:b7:44:f6:63:da:47:
bf:4b:a1:30:5b:54:f9:e1:af:01:65:b1:53:c3:88:4e:1a:a9:
10:4a:de:20:3f:0c:e7:b0:e2:bd:2d:df:07:a0:26:b0:d8:0c:
90:73:fb:a7:82:82:53:2b:9a:ef:93:04:23:cc:47:1b:b0:5d:
1b:aa:89:4b:a0:f6:86:d6:80:7a:c3:3a:cf:ab:13:c7:94:d7:
26:80:2d:2a:ff:d2:97:46:83:48:32:fb:c0:ed:b4:8f:7f:0f:
de:6b:c8:cb:22:3c:85:f2:af:88:20:6c:c9:a7:d4:2a:bb:58:
80:52:de:85:65:ce:f0:d1:31:1a:57:61:8d:07:da:c7:f8:f9:
23:d8:f3:65:e9:65:72:5e:87:1d:41:a0:29:0c:87:9a:2a:64:
d8:63:17:9a:4f:84:7c:ad:22:10:f2:04:95:94:a8:2a:42:02:
29:e9:b8:08:10:3c:b1:a5:a6:d5:0f:28:ea:71:3c:e8:e2:bd:
c6:34:20:f1:94:68:4d:3a:92:52:07:35:0f:67:9a:6c:fb:f2:
37:02:9f:a0:c1:26:9a:c8:21:59:f9:e6:c2:c3:b9:ed:b3:90:
89:5c:61:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:58:41 2026 by rpki-client