
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/3230332e3139302e3131382e302f32342d3234203d3e203338313536.roa
File: 3230332e3139302e3131382e302f32342d3234203d3e203338313536.roa (raw, json)
Hash identifier: GpjHek9a827cy//pNFDcORXn2t6JzxU+p9J93Ct0LZo=
Subject key identifier: 60:56:C1:45:65:4A:DB:4D:3F:B0:46:6E:7C:16:EF:BF:2A:74:F8:BC
Certificate issuer: /CN=43E1CC61CDE59968FE0810D4937130A67D6541DC
Certificate serial: 2743A2AF2A6AF226D064593BD6F1220AE902B954
Authority key identifier: 43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/3230332e3139302e3131382e302f32342d3234203d3e203338313536.roa
Signing time: Sun 03 May 2026 03:05:06 +0000
ROA not before: Sun 03 May 2026 03:00:06 +0000
ROA not after: Sun 02 May 2027 03:05:06 +0000
asID: 38156
IP address blocks: 203.190.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.crl
rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:43:a2:af:2a:6a:f2:26:d0:64:59:3b:d6:f1:22:0a:e9:02:b9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43E1CC61CDE59968FE0810D4937130A67D6541DC
Validity
Not Before: May 3 03:00:06 2026 GMT
Not After : May 2 03:05:06 2027 GMT
Subject: CN=6056C145654ADB4D3FB0466E7C16EFBF2A74F8BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2c:fc:22:72:c9:4f:15:5c:20:f6:b2:ae:8f:
da:1f:45:3f:42:fa:51:78:3b:36:de:f2:b3:61:40:
35:1e:8a:79:f6:99:9f:83:c2:42:73:0f:2f:8b:66:
c6:5c:f1:fc:7c:c6:58:0b:9e:06:6e:39:0c:0e:dc:
ad:42:04:3a:ff:1e:fc:07:2b:3b:06:b1:b4:de:21:
fd:19:13:b3:4e:8c:15:ed:9d:aa:50:a6:98:58:8e:
25:d8:a3:d9:46:b2:8e:cd:e1:56:c5:97:a9:b7:86:
13:b3:61:fd:a5:1d:75:48:fc:49:ec:d8:23:b7:c7:
b9:c2:34:f3:6e:a0:be:46:96:20:13:86:15:93:44:
84:26:77:5a:c4:54:e3:d9:66:eb:41:25:c9:94:d5:
36:42:0b:1f:ab:35:6d:cc:7c:92:68:e5:c5:81:71:
d8:52:3e:7c:b8:33:16:4d:7a:11:c9:47:1f:c6:68:
3b:71:46:c8:53:28:29:20:16:5b:98:9b:a0:28:d6:
52:e8:27:8e:1f:59:d3:98:fe:fb:f2:d6:50:f1:6c:
50:bd:de:c9:a5:65:56:98:49:f8:bb:df:bb:31:b4:
05:36:b9:ae:be:33:32:4a:33:a7:02:b8:55:5f:91:
18:53:59:7a:d2:45:68:2b:26:16:26:fd:e3:30:0e:
83:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:56:C1:45:65:4A:DB:4D:3F:B0:46:6E:7C:16:EF:BF:2A:74:F8:BC
X509v3 Authority Key Identifier:
keyid:43:E1:CC:61:CD:E5:99:68:FE:08:10:D4:93:71:30:A6:7D:65:41:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/43E1CC61CDE59968FE0810D4937130A67D6541DC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/43E1CC61CDE59968FE0810D4937130A67D6541DC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/3230332e3139302e3131382e302f32342d3234203d3e203338313536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.190.118.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:8e:71:a6:94:b0:12:63:a8:24:00:25:96:32:bd:e4:01:b9:
e9:d1:9f:97:10:44:53:fa:7b:e5:27:ff:0f:8b:89:25:f0:03:
14:37:50:4e:aa:da:79:fd:99:80:9e:60:40:c6:97:6b:6c:bb:
a7:df:a8:c7:1f:ea:26:e1:45:d5:91:6d:49:69:db:36:5b:61:
8a:51:3b:d4:df:7b:d5:6a:73:4d:71:64:88:27:44:a1:cd:cd:
8b:1b:29:e4:5a:cf:27:de:18:72:90:91:88:23:e6:cf:3d:90:
f9:f0:34:14:5b:20:32:9c:50:ae:61:6e:cf:4d:01:13:f8:a0:
81:df:9d:3c:39:55:25:c8:7b:d2:c5:75:e5:de:f2:e4:49:dd:
a3:67:25:0f:3e:e4:65:02:20:c8:e7:9b:59:43:f7:68:2a:42:
3d:90:ef:7e:ac:ac:3a:37:53:18:97:2c:68:ee:88:1a:3e:3f:
15:4e:a0:79:55:25:42:3d:1f:bc:b3:5b:c2:03:48:26:07:ea:
a7:68:9a:4e:5b:fe:eb:bd:c3:f7:4a:31:73:82:38:e8:e5:7a:
58:5a:b6:fe:b5:a6:a5:90:75:3b:fc:d8:77:4e:bb:5e:8f:c9:
2c:c9:16:dd:4b:56:44:0d:b5:05:08:f8:4f:85:e3:07:e8:02:
e7:dc:0a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:02:44 2026 by rpki-client