
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3234382e302f32322d3232203d3e20313333373938.roa
File: 3230332e3132382e3234382e302f32322d3232203d3e20313333373938.roa (raw, json)
Hash identifier: QQR0qXT73Ove2fGy0Mtcf+JzjFm3fYpB5qgDaSt6D/c=
Subject key identifier: 48:5A:19:7D:BA:08:E7:B1:E6:0C:B6:88:7A:3F:78:57:81:F5:4B:0F
Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial: 20F112081DEBC0C314164379E986EC5CE9DB4F0D
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3234382e302f32322d3232203d3e20313333373938.roa
Signing time: Sun 03 May 2026 03:04:21 +0000
ROA not before: Sun 03 May 2026 02:59:21 +0000
ROA not after: Sun 02 May 2027 03:04:21 +0000
asID: 133798
IP address blocks: 203.128.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:f1:12:08:1d:eb:c0:c3:14:16:43:79:e9:86:ec:5c:e9:db:4f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Validity
Not Before: May 3 02:59:21 2026 GMT
Not After : May 2 03:04:21 2027 GMT
Subject: CN=485A197DBA08E7B1E60CB6887A3F785781F54B0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6d:ad:ad:09:89:a1:87:fb:11:f9:ae:de:03:
d7:99:56:b8:04:72:04:b2:35:f1:01:3e:bb:7e:a7:
9b:f8:9d:c8:5e:0a:08:0d:e8:9a:d3:33:32:7b:40:
ff:02:a4:b1:34:97:25:61:43:00:51:0e:e2:e7:9d:
a1:5a:7f:31:8d:e1:5d:db:74:83:1b:6f:23:26:2c:
b6:c7:f1:35:8d:62:5b:ac:14:0e:ca:ec:e2:e6:86:
ea:4e:fc:73:a9:5d:88:98:0f:2c:16:c7:b3:18:b4:
ce:31:98:f2:e9:8a:93:c3:99:5c:d0:ac:b1:f8:d7:
34:45:b3:18:77:ef:6f:a3:ea:a0:16:f5:c1:a4:56:
7e:c4:4d:dd:2c:4d:c7:a5:23:96:41:29:b3:fe:eb:
23:cd:4f:38:b7:04:e3:e0:61:f0:62:5a:e1:48:9d:
58:b7:d7:ce:3d:64:9c:5c:8a:0b:b2:b1:66:8e:b7:
99:55:09:00:03:c8:9f:1e:0e:38:18:5f:2a:ef:d1:
6f:ce:30:ec:3f:da:71:ea:d2:6a:ac:34:ab:65:82:
76:12:90:39:96:38:4f:3d:43:d5:73:c1:e4:16:a4:
dd:4a:a7:1d:c3:9f:2f:20:99:71:c2:40:ff:74:65:
6f:84:cf:36:1c:aa:73:39:b9:36:4f:16:d8:e5:3c:
a8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5A:19:7D:BA:08:E7:B1:E6:0C:B6:88:7A:3F:78:57:81:F5:4B:0F
X509v3 Authority Key Identifier:
keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3234382e302f32322d3232203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.128.248.0/22
Signature Algorithm: sha256WithRSAEncryption
28:8c:bf:c4:e3:4b:90:c3:6d:63:31:f8:88:35:f7:59:ae:0f:
92:23:85:3f:90:d0:b5:67:0b:5b:1c:0d:2e:55:c5:e3:45:d5:
b7:8a:e2:f4:c0:b2:bd:99:e0:81:cd:d1:11:e8:d4:3f:1d:a8:
99:76:4a:3b:4a:4b:97:b8:a9:8a:52:26:86:de:9c:45:f6:a8:
da:c4:b3:06:4c:4c:b3:b3:8f:76:ab:e0:86:34:71:02:9f:00:
ac:5f:7c:d4:46:e7:66:72:94:b2:d3:21:ca:f0:ca:0e:e6:ed:
b7:bc:b3:6d:fd:14:51:81:f9:22:35:5f:f1:d0:ee:45:37:9b:
d3:51:7c:58:a2:cd:55:f3:5f:7b:e4:6c:fc:63:c1:b2:cd:34:
39:fb:75:b0:04:bc:87:40:c0:d9:27:de:67:a9:ce:2e:d3:4f:
7c:86:e5:12:3f:84:a4:d6:cb:a5:3a:ef:0d:c6:f0:c7:cd:98:
80:33:0d:a9:ea:52:76:2a:f1:c8:b2:92:42:ae:b6:5e:1b:5b:
3b:28:54:11:51:af:d7:3b:47:6c:a1:c8:b7:0e:1e:36:cf:61:
2e:dd:cc:59:13:4e:c9:29:27:63:6c:45:64:d1:21:2d:7c:55:
92:a5:e7:44:35:1a:b6:4e:2e:4a:86:0d:16:6b:0d:af:59:5c:
1b:94:14:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:11:53 2026 by rpki-client