
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3137332e39322e302f32322d3234203d3e203138303539.roa
File: 3230332e3137332e39322e302f32322d3234203d3e203138303539.roa (raw, json)
Hash identifier: ShpPPdc1P7Hz2gDoLjtMBOFv2E9ULkBQUBAP27ShUlk=
Subject key identifier: 4F:EE:FA:21:23:35:AE:20:FF:FB:ED:89:F2:DC:5C:2F:56:17:9E:B0
Certificate issuer: /CN=67239F5E47D123019D26807163E6542441401507
Certificate serial: 5849974F45D2F4C4D359C06DDB550BF9B3B1870D
Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3137332e39322e302f32322d3234203d3e203138303539.roa
Signing time: Sun 03 May 2026 03:03:31 +0000
ROA not before: Sun 03 May 2026 02:58:31 +0000
ROA not after: Sun 02 May 2027 03:03:31 +0000
asID: 18059
IP address blocks: 203.173.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:10:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:49:97:4f:45:d2:f4:c4:d3:59:c0:6d:db:55:0b:f9:b3:b1:87:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67239F5E47D123019D26807163E6542441401507
Validity
Not Before: May 3 02:58:31 2026 GMT
Not After : May 2 03:03:31 2027 GMT
Subject: CN=4FEEFA212335AE20FFFBED89F2DC5C2F56179EB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5b:2c:94:00:3d:2f:74:f4:f0:82:2e:d8:95:
7d:3a:74:38:94:e0:87:21:d4:35:40:3e:73:65:3f:
67:f1:f4:02:4e:e6:95:f1:d5:ec:3f:00:aa:35:89:
d9:a4:7d:20:33:a1:59:0b:6c:af:f8:38:74:89:04:
b1:fa:2e:62:d1:0b:8a:41:1a:b7:1f:8b:84:5a:ce:
79:51:43:ef:3c:ff:ad:be:70:88:33:8c:12:84:05:
f9:d8:77:7e:b7:bb:d2:87:b5:09:b1:0c:a0:17:0f:
83:88:5d:04:60:2c:9f:af:c9:e6:ad:dc:9f:2e:09:
73:52:89:16:99:d3:bb:1e:86:f4:0a:1e:81:4d:5d:
17:4c:2e:40:02:8a:45:03:b4:c1:36:c8:44:92:5b:
0f:26:a4:ee:d4:47:a4:71:3c:63:f7:49:bf:71:27:
b5:7c:ff:a7:3c:cb:b6:86:52:40:8e:23:06:56:fe:
21:61:6b:61:2e:75:5f:58:76:6f:48:b6:99:26:42:
93:14:12:c2:4d:34:c9:e7:34:30:f2:99:90:65:45:
e7:89:41:90:6e:ec:1f:b0:0b:e8:c2:c7:1a:a0:38:
2b:0e:93:87:e7:38:c7:00:d3:86:b9:44:0f:41:6c:
b4:80:a0:51:fd:e3:28:6b:bf:b6:55:18:c9:03:70:
be:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EE:FA:21:23:35:AE:20:FF:FB:ED:89:F2:DC:5C:2F:56:17:9E:B0
X509v3 Authority Key Identifier:
keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3137332e39322e302f32322d3234203d3e203138303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.173.92.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:47:31:19:be:46:c3:ee:14:bb:08:14:58:b2:77:90:b4:52:
ee:6d:52:c6:48:e1:f4:02:dd:c4:a4:09:5d:59:e2:39:b6:1a:
c7:bc:81:92:eb:c7:ec:6b:ba:e1:f4:64:51:13:a2:1b:09:26:
5b:50:8a:3f:75:d0:91:bb:ee:ed:d0:48:57:d1:1f:41:d7:47:
5e:71:10:84:1c:40:fa:f4:db:d3:70:11:b4:f4:d3:ab:90:00:
94:f7:39:64:67:39:25:b1:f5:a6:92:8d:d2:c2:4d:a7:18:ef:
b0:92:37:2f:fa:af:9e:b5:6c:85:5f:66:36:3e:b8:14:8f:36:
ac:a3:c8:9c:31:91:f4:f2:e8:b7:34:5a:e9:2e:39:0e:6e:b8:
27:11:33:cd:b8:69:60:4f:2c:aa:eb:1e:db:52:d3:59:80:f0:
50:ec:4e:84:16:4a:10:db:8c:51:53:d4:b0:b5:2c:3c:28:0d:
50:e7:26:3e:64:c5:6f:b4:c3:fe:3f:10:88:02:8e:66:1e:a6:
79:36:c0:5f:82:fb:9b:04:6a:ed:c5:0a:04:8e:01:ca:fa:fa:
b1:b9:66:c8:c8:f4:0c:c4:ce:1b:22:86:4a:7f:d0:6e:93:8b:
eb:9e:15:1a:0e:d7:9b:1e:25:35:b2:99:bd:37:9b:c9:d8:72:
85:0d:1e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:47:51 2026 by rpki-client