
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3235312e302f32342d3234203d3e20313333373938.roa
File: 3230332e3132382e3235312e302f32342d3234203d3e20313333373938.roa (raw, json)
Hash identifier: NjSyotIHcPelkVVIFH8LvqCRswpv+1UraG8F1KssoUo=
Subject key identifier: 5F:2A:5D:8A:33:FC:48:4A:FE:DF:0B:C6:2D:4B:46:1C:A8:EE:73:E5
Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial: 0E45E10FE46A672AA7AD80F7D206E2C00F661742
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3235312e302f32342d3234203d3e20313333373938.roa
Signing time: Sun 03 May 2026 03:04:33 +0000
ROA not before: Sun 03 May 2026 02:59:33 +0000
ROA not after: Sun 02 May 2027 03:04:33 +0000
asID: 133798
IP address blocks: 203.128.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:45:e1:0f:e4:6a:67:2a:a7:ad:80:f7:d2:06:e2:c0:0f:66:17:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Validity
Not Before: May 3 02:59:33 2026 GMT
Not After : May 2 03:04:33 2027 GMT
Subject: CN=5F2A5D8A33FC484AFEDF0BC62D4B461CA8EE73E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:87:4d:d4:79:0f:da:6b:ae:5a:79:84:35:51:
1b:3a:df:8c:45:30:5e:5e:fc:e2:ef:37:03:9c:34:
dc:49:06:9e:d4:84:73:34:31:71:75:a4:09:9e:de:
51:da:52:d4:15:c5:1f:51:a1:18:82:0c:3b:42:ee:
fd:44:c0:e4:55:33:32:53:81:a7:07:be:8e:5b:c1:
cd:a8:18:95:cf:c6:6a:e8:25:8b:56:19:9c:94:e1:
06:8c:b6:4c:cb:ac:1c:e9:00:3e:2b:b8:2e:1c:1f:
ac:90:df:8d:15:e3:16:b8:65:f9:ae:ff:41:f0:48:
44:6e:ac:8a:8c:0e:07:8c:c6:87:8a:59:cb:9d:65:
92:53:50:c1:0c:c3:c4:f3:c4:f9:29:e4:07:6c:b1:
46:19:96:c3:45:0f:da:87:4d:b0:9f:6c:de:3f:a8:
24:23:9d:59:a7:30:1b:81:03:16:85:b3:2b:c2:0e:
d8:93:3e:b9:73:bd:bc:05:07:92:95:e8:5b:eb:e4:
4d:99:7e:67:9e:58:c2:02:2b:fc:d4:79:b3:d0:75:
cd:d7:2c:75:ea:a1:64:50:04:40:03:14:e0:d3:a2:
b8:2b:86:8c:dd:de:a9:6b:5f:f5:37:28:9f:08:58:
79:69:e9:b3:f9:d4:a8:fa:d5:94:90:54:e7:78:47:
77:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2A:5D:8A:33:FC:48:4A:FE:DF:0B:C6:2D:4B:46:1C:A8:EE:73:E5
X509v3 Authority Key Identifier:
keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3235312e302f32342d3234203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.128.251.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:08:f9:e5:b0:36:da:ab:79:c3:e2:24:47:4e:97:a6:25:17:
4a:bf:f9:83:31:84:79:5c:6e:73:19:02:ce:cb:50:2c:16:b6:
a4:26:2a:43:e5:66:1d:25:02:cf:e3:8d:25:63:e2:6e:66:a3:
5f:33:5b:54:e6:82:9c:6d:af:a9:ed:54:22:a9:6b:9f:f0:63:
a4:ce:15:83:ea:81:86:f6:84:6b:e4:2a:3c:2f:9a:bd:64:f0:
29:b8:82:84:47:af:35:1c:55:11:2c:d4:dc:48:25:42:4d:91:
8e:c5:20:49:af:aa:a5:c6:0c:d1:c7:95:1b:7c:40:13:e2:d6:
e2:06:aa:da:22:f0:63:18:f2:b0:43:3c:1f:f9:46:4f:b0:be:
b5:e9:ff:83:fd:97:ba:e8:40:47:24:94:1a:1b:42:40:a7:1b:
7a:65:b4:5a:ab:76:38:03:3d:ad:35:28:be:63:5d:cf:e2:ae:
1a:45:28:76:70:1b:b3:34:df:ff:70:fe:43:27:6e:3a:5a:c3:
0e:df:61:1a:c1:2b:45:4d:12:c1:0a:1e:04:8d:a3:d2:9c:e3:
e7:0a:f6:97:0c:aa:60:61:f4:2e:5d:f0:1b:1a:33:28:db:66:
59:a8:68:de:8a:42:6f:3a:55:55:1a:1d:a1:55:bf:a7:66:1c:
4b:82:05:aa
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUDkXhD+RqZyqnrYD30gbiwA9mF0IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTVGQkVBQ0ZBRUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2
MzIxQTVDMDAeFw0yNjA1MDMwMjU5MzNaFw0yNzA1MDIwMzA0MzNaMDMxMTAvBgNV
BAMTKDVGMkE1RDhBMzNGQzQ4NEFGRURGMEJDNjJENEI0NjFDQThFRTczRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuh03UeQ/aa65aeYQ1URs634xF
MF5e/OLvNwOcNNxJBp7UhHM0MXF1pAme3lHaUtQVxR9RoRiCDDtC7v1EwORVMzJT
gacHvo5bwc2oGJXPxmroJYtWGZyU4QaMtkzLrBzpAD4ruC4cH6yQ340V4xa4Zfmu
/0HwSERurIqMDgeMxoeKWcudZZJTUMEMw8TzxPkp5AdssUYZlsNFD9qHTbCfbN4/
qCQjnVmnMBuBAxaFsyvCDtiTPrlzvbwFB5KV6Fvr5E2ZfmeeWMICK/zUebPQdc3X
LHXqoWRQBEADFODTorgrhozd3qlrX/U3KJ8IWHlp6bP51Kj61ZSQVOd4R3cFAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUXypdijP8SEr+3wvGLUtGHKjuc+UwHwYDVR0j
BBgwFoAUFfvqz67T+fMyWXM49ALIcmMhpcAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzMwM2U2YmItNzM0OS00N2FhLWE0Y2QtNTFkOGEwZTIyMmY2LzAvMTVGQkVBQ0ZB
RUQzRjlGMzMyNTk3MzM4RjQwMkM4NzI2MzIxQTVDMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNUZCRUFDRkFFRDNGOUYzMzI1OTczMzhGNDAyQzg3MjYzMjFB
NUMwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h
NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzAzMzJlMzEzMjM4MmUzMjM1MzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADLgPswDQYJ
KoZIhvcNAQELBQADggEBAJ8I+eWwNtqrecPiJEdOl6YlF0q/+YMxhHlcbnMZAs7L
UCwWtqQmKkPlZh0lAs/jjSVj4m5mo18zW1Tmgpxtr6ntVCKpa5/wY6TOFYPqgYb2
hGvkKjwvmr1k8Cm4goRHrzUcVREs1NxIJUJNkY7FIEmvqqXGDNHHlRt8QBPi1uIG
qtoi8GMY8rBDPB/5Rk+wvrXp/4P9l7roQEcklBobQkCnG3pltFqrdjgDPa01KL5j
Xc/irhpFKHZwG7M03/9w/kMnbjpaww7fYRrBK0VNEsEKHgSNo9Kc4+cK9pcMqmBh
9C5d8BsaMyjbZlmoaN6KQm86VVUaHaFVv6dmHEuCBao=
-----END CERTIFICATE-----
Generated at Wed May 13 05:15:10 2026 by rpki-client