
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233372e302f32342d3234203d3e203138303539.roa
File: 3230332e3133342e3233372e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier: c3ZKRPW9kazF2hTTeKEw7P3lSlFD+kyeJbgDVHjkK14=
Subject key identifier: 61:B9:77:83:93:E6:E7:EA:61:6E:EF:31:F6:E2:82:04:2F:87:EF:68
Certificate issuer: /CN=67239F5E47D123019D26807163E6542441401507
Certificate serial: 654C6DFD7494A6BF35AFEECDDDB26C7343503103
Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233372e302f32342d3234203d3e203138303539.roa
Signing time: Sun 03 May 2026 03:03:47 +0000
ROA not before: Sun 03 May 2026 02:58:47 +0000
ROA not after: Sun 02 May 2027 03:03:47 +0000
asID: 18059
IP address blocks: 203.134.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:4c:6d:fd:74:94:a6:bf:35:af:ee:cd:dd:b2:6c:73:43:50:31:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67239F5E47D123019D26807163E6542441401507
Validity
Not Before: May 3 02:58:47 2026 GMT
Not After : May 2 03:03:47 2027 GMT
Subject: CN=61B9778393E6E7EA616EEF31F6E282042F87EF68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d5:35:39:4a:09:a2:18:fe:b8:57:ba:51:59:
33:11:eb:78:67:1a:ea:04:ab:32:16:5e:3a:cd:69:
eb:48:15:e4:1f:bb:d0:41:88:f0:9e:0e:65:20:36:
82:50:c5:58:e1:6d:c9:9e:58:88:c0:b0:74:75:dc:
32:ac:89:4b:b7:43:a5:ee:d1:06:a4:a8:e5:62:9b:
35:8d:a8:24:f9:f7:af:d2:93:bc:bc:52:c6:b2:e8:
29:b5:37:04:0e:7b:ea:4b:69:5d:e9:45:6f:42:ea:
b3:14:d8:52:41:a3:d9:d3:aa:85:c8:e5:74:f1:9a:
99:a3:da:9e:ee:3a:75:d8:b4:37:c8:2c:32:f9:a7:
53:82:d1:9e:f5:75:69:77:8a:d8:90:74:7e:f9:62:
c1:b4:9f:b9:12:09:d3:40:b3:dd:58:48:55:96:9b:
3e:45:b6:15:53:0e:d9:4d:ad:f8:d0:e8:4f:0e:30:
f5:5a:0d:54:d2:27:9a:b6:3a:21:ee:7d:b4:58:34:
4e:d8:02:e0:d8:19:75:de:82:bd:64:9e:86:b0:0a:
57:b9:ad:04:bf:44:00:5e:c3:9d:8c:27:bc:da:e7:
79:94:40:13:68:9f:f5:57:45:7f:dc:fd:30:24:1e:
9a:a3:1a:5c:3e:ac:78:be:39:03:c8:9a:17:29:f2:
74:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B9:77:83:93:E6:E7:EA:61:6E:EF:31:F6:E2:82:04:2F:87:EF:68
X509v3 Authority Key Identifier:
keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233372e302f32342d3234203d3e203138303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.134.237.0/24
Signature Algorithm: sha256WithRSAEncryption
70:82:3c:11:28:b0:8d:91:25:46:51:3d:25:eb:9c:f4:1a:db:
fe:72:5e:ea:80:23:35:97:72:11:ef:54:96:13:c0:b0:da:ad:
ee:f3:0f:c5:78:70:3b:93:b9:07:b4:5b:84:dc:bc:ef:05:51:
12:e1:ff:5c:55:08:a8:fa:08:37:fd:c6:c0:45:0b:c8:77:b9:
75:5d:fc:6f:67:63:a9:89:43:21:c4:6b:57:50:db:5d:fa:82:
7b:54:74:5f:9c:86:4f:9b:e2:98:46:7b:25:a1:57:80:9f:d1:
08:c0:4c:9a:a9:ce:84:c0:0f:2c:66:5e:a1:97:01:ca:f1:0a:
2c:f4:eb:14:a6:74:1c:c6:77:f7:e6:d1:40:f6:4d:f0:62:70:
2f:59:85:c1:b8:0f:c3:e7:96:17:a5:50:80:a7:8c:0e:03:38:
60:81:95:ac:f3:6d:66:1b:10:cd:2e:f8:c8:45:66:ab:71:a9:
1f:b1:40:f9:81:76:30:cb:24:4d:9e:37:cc:c3:20:d8:d4:37:
cf:d2:c1:40:7f:99:bf:a1:81:d6:6c:9d:57:84:57:9c:f1:10:
93:d6:5b:09:0a:81:ef:e9:8e:66:ae:cd:b3:72:76:38:7e:65:
21:51:18:72:34:c9:67:fc:90:d9:b9:15:9d:f4:72:82:aa:f5:
01:aa:f0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:23:46 2026 by rpki-client