
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35372e302f32342d3234203d3e203435333132.roa
File: 3230322e38312e35372e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier: YNLkjTQkG105OE/syp1GWHGqZ09ZNPBRni6eVtckJeI=
Subject key identifier: BD:AE:8A:97:1A:1E:17:8B:64:3A:2E:EF:60:7D:AE:78:92:90:83:38
Certificate issuer: /CN=E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4
Certificate serial: 2E65272520F67D585F7CF8D7F3F4DDD8D647A6E0
Authority key identifier: E3:C1:16:D9:16:0B:6F:21:F7:B6:47:D6:FB:8E:C1:43:6C:AD:88:D4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35372e302f32342d3234203d3e203435333132.roa
Signing time: Sun 03 May 2026 03:05:24 +0000
ROA not before: Sun 03 May 2026 03:00:24 +0000
ROA not after: Sun 02 May 2027 03:05:24 +0000
asID: 45312
IP address blocks: 202.81.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.crl
rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:65:27:25:20:f6:7d:58:5f:7c:f8:d7:f3:f4:dd:d8:d6:47:a6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4
Validity
Not Before: May 3 03:00:24 2026 GMT
Not After : May 2 03:05:24 2027 GMT
Subject: CN=BDAE8A971A1E178B643A2EEF607DAE7892908338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3a:f3:6a:ab:1d:84:58:fc:08:d3:48:be:6b:
a0:3f:f5:9e:dc:27:79:cf:5c:97:8a:70:59:20:52:
30:8c:e9:94:c6:a7:a0:cd:73:86:10:40:ff:b2:36:
35:7f:36:78:6d:88:b8:4c:83:f4:d6:a9:70:db:1c:
35:90:2d:bb:00:88:72:f9:b6:f1:c8:4b:78:6a:02:
07:81:7a:6a:45:34:d3:f3:29:de:bf:88:ce:d9:2e:
a7:c3:a2:0f:60:60:f6:3c:f0:d8:0b:1b:8f:71:02:
0e:75:64:c8:40:bd:52:73:e4:52:fb:ed:88:65:16:
66:e6:24:31:8e:93:3f:f8:6f:87:55:18:f4:41:79:
f2:4b:7b:c0:98:23:e3:85:52:e3:37:bc:47:dd:0a:
1b:02:d8:d6:c2:6c:92:40:c1:10:15:8d:d0:be:ef:
fc:61:c6:1f:dd:a5:ce:ae:72:0d:41:8b:a6:f7:0f:
a6:98:3b:55:17:8c:8e:8c:70:c0:f6:45:68:29:83:
c1:8e:c4:50:14:1e:12:b8:c3:0a:fc:0e:6c:15:0c:
ca:4d:32:b8:db:6d:f7:33:3e:ed:f0:39:e1:59:ce:
a0:83:8a:8a:a2:20:d3:9f:99:f1:d9:6e:25:7d:36:
da:40:5f:22:1b:ec:47:ae:59:2b:6d:dc:0d:50:1e:
72:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AE:8A:97:1A:1E:17:8B:64:3A:2E:EF:60:7D:AE:78:92:90:83:38
X509v3 Authority Key Identifier:
keyid:E3:C1:16:D9:16:0B:6F:21:F7:B6:47:D6:FB:8E:C1:43:6C:AD:88:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35372e302f32342d3234203d3e203435333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.81.57.0/24
Signature Algorithm: sha256WithRSAEncryption
08:b8:aa:57:4b:91:95:06:92:b1:0c:16:96:8a:27:d8:0b:b2:
2d:27:18:f9:7b:2c:de:d9:04:3d:8e:44:08:af:cc:5b:26:4d:
28:5e:5d:b9:83:ca:d8:31:8a:0d:e2:af:cd:ac:b8:c0:84:c3:
26:1e:74:9d:74:4d:e1:c8:8f:80:3e:71:34:32:68:9e:0b:13:
15:53:33:8f:3f:38:5f:34:52:b9:1b:8c:37:b2:70:c1:3f:66:
d1:69:78:a9:62:2d:6c:24:d1:c6:23:96:4a:20:e6:91:1e:ce:
b1:d4:3c:f9:64:5f:7c:07:00:28:e9:07:52:75:fb:7c:41:83:
87:e7:71:26:77:97:bd:be:2b:93:e1:16:7f:ed:bc:c9:fb:27:
5a:8e:e4:85:89:d4:e9:c6:c8:fa:66:3f:9c:16:1a:df:90:8e:
34:8e:ba:ac:d1:15:03:fe:89:ee:1a:b7:3e:ac:61:e9:5c:f7:
90:90:6e:53:2d:97:b9:c4:9c:58:a4:13:ea:fe:5e:d6:47:6b:
dc:8a:b8:b8:e3:ed:9d:be:66:2f:19:29:69:04:9f:6f:23:69:
82:93:b3:3d:38:19:cd:28:53:11:86:a4:8e:9a:5a:a9:7e:5f:
2c:92:d1:28:7f:48:42:b5:76:c5:ec:8e:94:09:0d:be:94:ba:
b6:bc:b4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:26:41 2026 by rpki-client