
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3230322e31302e36332e302f32342d3234203d3e203535363533.roa
File: 3230322e31302e36332e302f32342d3234203d3e203535363533.roa (raw, json)
Hash identifier: aTFM/g9W9unRb/uZnofVUS9SPuRIxxAlxUviQTXpEaI=
Subject key identifier: 82:03:9E:C2:0F:5F:84:EA:DA:9A:BF:23:58:FD:B4:CD:0B:ED:D1:73
Certificate issuer: /CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
Certificate serial: 4559889BC06FF3E1556293C6FF7EEF39FF0D5820
Authority key identifier: 0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3230322e31302e36332e302f32342d3234203d3e203535363533.roa
Signing time: Sun 03 May 2026 03:06:21 +0000
ROA not before: Sun 03 May 2026 03:01:21 +0000
ROA not after: Sun 02 May 2027 03:06:21 +0000
asID: 55653
IP address blocks: 202.10.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl
rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:59:88:9b:c0:6f:f3:e1:55:62:93:c6:ff:7e:ef:39:ff:0d:58:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
Validity
Not Before: May 3 03:01:21 2026 GMT
Not After : May 2 03:06:21 2027 GMT
Subject: CN=82039EC20F5F84EADA9ABF2358FDB4CD0BEDD173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:80:2c:1f:06:8c:67:88:4e:a8:01:31:e8:fa:
fa:88:81:c8:ff:ac:26:27:22:21:c8:82:ab:fb:87:
c4:00:4d:f3:37:a4:d9:6f:fc:7f:27:3d:80:ab:46:
10:30:e3:83:73:69:91:3a:2a:1c:7c:e2:da:c7:28:
13:71:1e:d8:8f:75:62:01:2b:29:c3:d6:5e:c7:3f:
91:b3:67:b6:03:d1:06:5d:d7:48:df:35:c9:e8:cf:
71:54:7a:bc:cb:20:cd:5f:23:3a:da:fd:b1:1d:bf:
7d:5a:5e:7e:79:f8:f5:f5:a6:82:f8:f7:f7:d3:fc:
04:31:dd:c3:74:e1:82:c3:fe:53:17:18:51:2e:23:
7f:bc:6b:0f:a9:b7:b2:07:9d:59:5a:94:4f:a1:2b:
8a:a5:46:58:e5:69:70:29:fd:8c:48:43:e0:c1:be:
ff:57:e8:08:35:45:a0:01:a4:35:63:ba:58:c6:db:
49:e6:e0:96:22:d3:a2:20:15:07:ac:64:4e:69:8f:
90:57:6e:8c:7f:6b:c8:03:80:7c:58:2c:00:bf:c1:
5a:a0:d4:25:8f:85:ea:a1:e8:a1:08:b6:81:86:4c:
89:91:66:6e:90:a5:41:7e:22:fb:58:a5:b8:b5:d6:
8b:a1:8e:c9:b6:ed:56:97:d1:16:36:43:0f:9b:84:
08:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:03:9E:C2:0F:5F:84:EA:DA:9A:BF:23:58:FD:B4:CD:0B:ED:D1:73
X509v3 Authority Key Identifier:
keyid:0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3230322e31302e36332e302f32342d3234203d3e203535363533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.10.63.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:a6:36:b8:7e:95:f0:7a:24:b3:bc:90:a1:b8:45:9f:d1:87:
c0:70:49:21:38:46:c4:5d:ed:cb:26:0f:87:c8:29:74:36:95:
48:47:4d:2c:e2:f1:2c:58:2c:52:01:9c:8b:ce:18:0d:f7:dd:
db:49:37:78:dc:1b:28:5c:de:3d:88:a1:7e:a5:d3:5d:b9:3c:
2f:96:c4:c8:6d:a3:39:65:65:10:07:92:9c:0c:95:ad:d9:76:
93:df:c1:f7:a6:2e:32:03:cf:4d:5d:3e:11:13:9b:06:11:80:
be:2d:3a:67:bc:cc:a7:c6:3d:96:71:42:a5:f9:86:0c:ca:02:
81:d8:9a:60:a1:76:c3:b0:2c:c6:d6:01:f5:d8:90:45:9c:72:
46:d8:db:ba:a6:7a:c3:4c:c1:cc:a6:d0:31:cf:ac:a7:4a:29:
0a:4b:74:9a:28:07:16:6f:54:13:c1:65:b1:cd:5c:7a:00:07:
72:aa:96:cd:c2:96:d3:14:3b:d4:9e:4d:b6:6d:37:79:2d:91:
a0:09:2c:2f:34:58:49:14:51:50:82:e8:09:1f:90:0b:ba:00:
c3:45:1c:79:ba:0a:b6:2b:f5:10:68:52:e2:27:ea:8d:80:91:
31:15:9a:98:78:c8:46:4c:eb:93:6d:13:58:c5:7a:31:46:41:
dc:7a:0c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:12:35 2026 by rpki-client