
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3234382e302f32342d3234203d3e20313333373938.roa
File: 3230332e3132382e3234382e302f32342d3234203d3e20313333373938.roa (raw, json)
Hash identifier: NGdOdmAQUHwHd34KsXEy6l67onyp9pOfFnPkewmt4q8=
Subject key identifier: 15:97:10:19:9D:1F:DB:7B:F5:00:EF:71:DE:72:E6:A2:16:10:8C:D8
Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial: 02452975604519BF95CE21FB25057C2215BF1D22
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3234382e302f32342d3234203d3e20313333373938.roa
Signing time: Sun 03 May 2026 03:04:27 +0000
ROA not before: Sun 03 May 2026 02:59:27 +0000
ROA not after: Sun 02 May 2027 03:04:27 +0000
asID: 133798
IP address blocks: 203.128.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:45:29:75:60:45:19:bf:95:ce:21:fb:25:05:7c:22:15:bf:1d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Validity
Not Before: May 3 02:59:27 2026 GMT
Not After : May 2 03:04:27 2027 GMT
Subject: CN=159710199D1FDB7BF500EF71DE72E6A216108CD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c2:09:77:7f:4e:a8:71:23:77:e5:4a:39:79:
47:84:80:5a:6f:58:f0:01:c0:98:9b:06:0b:e1:de:
60:1c:dd:f0:8b:d5:22:34:19:dd:1b:70:f1:d1:02:
0a:ee:19:30:f2:ce:7f:db:19:c7:5e:7c:d5:13:5c:
f0:61:85:7f:c8:77:95:a3:ac:3a:79:80:cc:6f:67:
a6:c6:b1:ab:4b:5d:19:c7:13:35:ae:18:a4:0a:25:
b3:87:f1:0f:f7:c8:04:85:61:56:42:00:bf:ca:f2:
94:34:3c:e4:e2:e6:36:93:10:75:c8:60:8e:d3:da:
e9:96:d3:14:2b:22:e5:95:91:eb:77:4c:c4:fd:0f:
8d:7c:30:e8:75:c8:50:43:b9:b6:ad:b9:5e:66:f6:
c8:5b:d1:44:1b:fe:6c:75:d4:43:27:bf:4b:0b:d1:
e1:3b:08:d2:51:16:2a:1f:09:9b:75:f2:98:2c:41:
2c:27:ff:b6:4e:69:9c:70:1f:6c:ec:5b:0f:f9:ee:
04:a5:ee:88:ec:e9:43:58:39:d7:4c:e3:d4:05:90:
f3:3f:7d:69:88:ee:f6:4b:59:49:72:8b:13:bd:58:
e7:0f:2a:4f:4f:d3:17:41:64:ec:d4:5c:89:4e:4a:
94:ad:11:17:8a:02:cc:f4:d8:28:a6:ef:73:a3:71:
79:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:97:10:19:9D:1F:DB:7B:F5:00:EF:71:DE:72:E6:A2:16:10:8C:D8
X509v3 Authority Key Identifier:
keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3234382e302f32342d3234203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.128.248.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:62:45:97:70:26:6b:1c:d9:f2:b0:d8:07:da:01:bc:54:cd:
66:0e:bf:4c:d5:b4:ae:e9:45:3e:d8:90:57:c8:8a:96:c4:ce:
e3:65:8f:01:f0:7b:27:d8:51:1e:a8:15:ba:67:4b:83:48:37:
cb:38:ad:99:dd:01:e8:82:aa:0f:75:d5:e2:40:89:03:eb:7e:
4d:f5:a8:8f:e1:35:ac:9d:93:69:21:b2:9b:7f:5f:b7:e8:00:
e9:d2:d0:f1:99:f1:82:34:c8:db:4c:c2:f4:56:59:77:24:d9:
f5:77:24:9a:a3:d9:9b:f3:f0:54:c6:af:02:ab:a9:49:ee:aa:
59:3a:94:7a:86:32:96:13:8c:7d:be:78:3c:99:64:4d:a2:3f:
ed:e7:fb:1f:00:96:2b:4b:49:01:4a:fb:b7:da:64:bb:72:2f:
89:f5:a7:1b:5c:bc:4e:df:93:fd:72:05:64:35:f5:e4:bc:35:
18:e9:19:90:c1:f4:eb:bb:4d:df:56:9e:23:59:af:d7:64:6a:
3b:62:80:b4:86:75:ff:8f:40:e8:e4:db:89:8c:96:c0:90:f3:
6e:cf:a0:26:46:f0:f0:8d:a3:4f:95:61:2c:1d:e3:b8:f9:d4:
b1:d2:96:d1:b8:20:79:c9:92:0e:a2:f1:32:13:40:e0:df:a7:
e8:aa:0d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:15:26 2026 by rpki-client