
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36302e302f32342d3234203d3e203435333132.roa
File: 3230322e38312e36302e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier: G6+jLX2/BJBCVbxIwEE4bywS7b/5wQD74gZvpTObL0M=
Subject key identifier: 45:AB:7E:10:E3:17:F1:8A:A2:AA:B3:B2:9F:8D:72:9E:8D:18:57:AA
Certificate issuer: /CN=E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4
Certificate serial: 7430A187C39FE0F8095B7AE410D478ADD4D08EFD
Authority key identifier: E3:C1:16:D9:16:0B:6F:21:F7:B6:47:D6:FB:8E:C1:43:6C:AD:88:D4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36302e302f32342d3234203d3e203435333132.roa
Signing time: Sun 03 May 2026 03:05:20 +0000
ROA not before: Sun 03 May 2026 03:00:20 +0000
ROA not after: Sun 02 May 2027 03:05:20 +0000
asID: 45312
IP address blocks: 202.81.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.crl
rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:30:a1:87:c3:9f:e0:f8:09:5b:7a:e4:10:d4:78:ad:d4:d0:8e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4
Validity
Not Before: May 3 03:00:20 2026 GMT
Not After : May 2 03:05:20 2027 GMT
Subject: CN=45AB7E10E317F18AA2AAB3B29F8D729E8D1857AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:88:4e:42:e8:e6:81:f1:bc:38:62:03:33:87:
d0:23:38:a1:5c:18:bb:1f:f1:49:5a:1f:28:f9:65:
f8:28:cf:60:77:2d:83:75:73:ee:8d:e1:d9:4b:e7:
94:4f:e1:2e:16:1f:ff:26:b1:9f:e1:0e:97:71:98:
ec:85:20:49:79:e8:ba:15:47:37:a7:ad:0d:f9:ef:
ee:c5:13:8f:a9:bc:1b:96:40:70:e1:e2:4d:4b:50:
a8:70:1f:d6:61:25:8a:96:76:fd:db:61:35:90:d0:
5b:66:33:4f:e0:c5:f4:e9:2f:c4:bd:c3:e2:04:4c:
95:61:96:94:7b:d1:0f:93:dd:0e:07:2b:3c:ac:39:
84:38:78:5d:47:1c:58:74:d9:d9:97:49:a9:d1:e0:
0e:4b:cd:59:7a:58:92:4e:16:21:06:b3:b1:39:5a:
71:74:0b:a1:48:58:0a:ac:6c:c1:69:c8:2e:04:cd:
59:a1:ba:e4:c3:06:04:13:fb:7f:de:ca:d6:50:2b:
81:9d:03:74:ac:a7:1f:0a:a8:23:a0:19:89:71:0a:
24:d0:af:0c:6b:05:e2:05:e5:0b:0a:1e:b7:91:20:
73:23:83:5b:3e:b0:ac:bf:55:c0:f0:83:04:01:da:
80:f7:ff:81:53:ad:fb:46:1f:74:83:0d:52:0b:9e:
d3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AB:7E:10:E3:17:F1:8A:A2:AA:B3:B2:9F:8D:72:9E:8D:18:57:AA
X509v3 Authority Key Identifier:
keyid:E3:C1:16:D9:16:0B:6F:21:F7:B6:47:D6:FB:8E:C1:43:6C:AD:88:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E3C116D9160B6F21F7B647D6FB8EC1436CAD88D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e36302e302f32342d3234203d3e203435333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.81.60.0/24
Signature Algorithm: sha256WithRSAEncryption
63:ea:ca:49:d5:fa:90:14:0f:3f:f2:26:de:15:3d:31:98:40:
6c:31:b0:ce:94:5a:99:4b:36:cc:05:ab:4c:6f:b7:45:8c:13:
55:a4:1d:a7:e0:df:35:35:a5:45:64:23:4b:bd:74:80:09:5b:
80:e2:4f:25:46:06:d2:63:7c:ad:63:b5:34:91:75:2a:78:98:
5e:77:d4:f5:f5:48:a2:fa:9c:ea:b7:5e:b3:1a:d1:62:11:40:
fe:2c:ca:64:35:ab:fd:9f:3d:5f:9c:f2:85:fc:63:69:c8:4e:
72:0f:f4:ba:e0:6f:51:f9:f6:2a:75:0f:0d:99:90:24:25:01:
2b:87:d2:91:13:89:ef:75:88:de:36:e4:eb:14:55:a8:49:c3:
29:02:3d:43:bf:d1:b6:00:2a:7a:46:0a:35:98:3c:6a:a8:9d:
9a:1b:a8:22:28:5b:ef:b4:5a:61:84:59:3d:aa:a7:c5:d8:74:
5b:3d:4c:0d:1b:00:cd:e9:14:9c:79:6c:f1:1e:72:71:86:fe:
5d:91:9f:34:a0:8d:b1:38:5e:a5:ec:58:74:fc:33:62:51:21:
21:68:1b:df:8f:d8:23:cb:be:82:88:83:3b:87:b2:5b:f3:a8:
f1:96:6a:06:22:86:d7:af:fa:02:a1:c9:fc:5e:25:85:1d:e8:
94:81:64:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:17:13 2026 by rpki-client