
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3230322e35322e31322e302f32342d3234203d3e203535363533.roa
File: 3230322e35322e31322e302f32342d3234203d3e203535363533.roa (raw, json)
Hash identifier: gb1IwBwgBC3bVtPwvnx/RPu7Ia6Ag29mP7Tz4sfDgHE=
Subject key identifier: B4:B2:7F:A4:14:11:25:3D:9A:4B:9F:08:7C:07:C7:67:50:CE:B5:30
Certificate issuer: /CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
Certificate serial: 176FD818DCE9198E1F865EA6E3FF441F58356E2A
Authority key identifier: 0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3230322e35322e31322e302f32342d3234203d3e203535363533.roa
Signing time: Sun 03 May 2026 03:06:22 +0000
ROA not before: Sun 03 May 2026 03:01:22 +0000
ROA not after: Sun 02 May 2027 03:06:22 +0000
asID: 55653
IP address blocks: 202.52.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl
rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:6f:d8:18:dc:e9:19:8e:1f:86:5e:a6:e3:ff:44:1f:58:35:6e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0BD738D9C7AB72C813EB893E3955A68B3190CFD2
Validity
Not Before: May 3 03:01:22 2026 GMT
Not After : May 2 03:06:22 2027 GMT
Subject: CN=B4B27FA41411253D9A4B9F087C07C76750CEB530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:08:b4:a8:96:4c:d9:40:77:bd:8d:4a:b3:44:
31:f6:46:72:3b:0d:09:0b:6a:54:21:35:17:46:e6:
d2:d9:cc:2f:92:8d:61:68:d4:5c:65:36:64:3a:91:
a5:c9:bc:41:b6:10:b6:cd:a0:83:b3:14:6c:f8:4d:
a2:7b:a8:39:2a:66:d3:f8:0b:ba:5b:b6:59:5a:d6:
2b:33:2e:12:38:8a:45:a0:5f:80:26:df:75:ab:d1:
f1:12:8d:07:1f:0c:c9:78:d4:54:9b:17:60:5d:88:
eb:8c:81:bd:01:db:da:0d:b7:48:4e:7d:53:be:f5:
dc:07:5e:01:e4:38:af:28:0e:91:1c:2e:ab:6f:3e:
fb:06:6e:b9:b2:40:7c:ab:2a:7a:b0:ff:78:08:0c:
9b:fa:30:f2:2b:fb:c5:ef:92:48:2d:41:08:3c:96:
5b:af:7c:58:fd:4c:2b:46:77:9b:37:d1:60:93:f8:
f7:c9:90:76:30:6d:27:d5:e8:58:bb:df:48:ec:e2:
e9:40:99:1c:68:cd:67:01:60:d4:95:07:a7:cf:b5:
63:ef:33:7c:f5:8b:5c:49:17:cc:d9:e8:33:ba:96:
ce:04:b4:23:4c:34:7d:08:05:8b:bc:e3:5d:c9:1f:
33:a5:82:50:9d:e2:2f:91:84:73:bc:6f:6a:21:f8:
57:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B2:7F:A4:14:11:25:3D:9A:4B:9F:08:7C:07:C7:67:50:CE:B5:30
X509v3 Authority Key Identifier:
keyid:0B:D7:38:D9:C7:AB:72:C8:13:EB:89:3E:39:55:A6:8B:31:90:CF:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BD738D9C7AB72C813EB893E3955A68B3190CFD2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3230322e35322e31322e302f32342d3234203d3e203535363533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.52.12.0/24
Signature Algorithm: sha256WithRSAEncryption
88:24:e8:a5:6f:1a:a8:34:1f:ea:5d:83:5c:d0:03:13:82:ad:
aa:5d:c4:2b:65:28:8d:b5:29:13:ae:87:df:13:5d:35:11:8e:
b7:85:07:03:0e:91:6f:d0:84:76:16:82:39:01:89:66:4a:37:
b3:cd:9a:67:3a:35:4f:ad:8f:d9:5f:98:19:be:c3:59:03:1e:
80:c3:6f:76:a5:bb:ac:b5:e9:b4:0c:df:0f:1e:5a:4e:f4:24:
c5:b3:99:6e:26:a9:b4:37:bf:c3:c9:dd:e5:a0:aa:05:3e:64:
f0:5a:ff:c2:9c:56:a8:58:dc:68:a9:51:41:34:e9:83:09:59:
58:9a:c8:49:2e:7a:ee:00:7c:48:5f:80:5a:47:3d:43:11:60:
76:51:06:e6:8c:27:92:b4:a5:fc:82:6e:31:61:5a:26:e4:86:
78:9d:9b:bd:28:e1:f4:48:49:c0:1c:e8:f6:40:a3:09:a4:d9:
81:e8:79:e3:2a:43:f0:5c:88:d1:ed:33:cd:b2:37:7e:f6:7d:
63:d8:92:5a:21:e1:10:df:db:8a:1c:76:23:19:a7:62:1a:32:
01:21:0f:a1:d8:f7:b4:b4:a3:d2:e5:bf:48:4d:a3:d4:8b:59:
6b:10:de:7e:85:01:86:b1:e7:bf:84:13:be:a6:86:3c:6b:a7:
9b:1a:13:61
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUF2/YGNzpGY4fhl6m4/9EH1g1biowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEJENzM4RDlDN0FCNzJDODEzRUI4OTNFMzk1NUE2OEIz
MTkwQ0ZEMjAeFw0yNjA1MDMwMzAxMjJaFw0yNzA1MDIwMzA2MjJaMDMxMTAvBgNV
BAMTKEI0QjI3RkE0MTQxMTI1M0Q5QTRCOUYwODdDMDdDNzY3NTBDRUI1MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6CLSolkzZQHe9jUqzRDH2RnI7
DQkLalQhNRdG5tLZzC+SjWFo1FxlNmQ6kaXJvEG2ELbNoIOzFGz4TaJ7qDkqZtP4
C7pbtlla1iszLhI4ikWgX4Am33Wr0fESjQcfDMl41FSbF2BdiOuMgb0B29oNt0hO
fVO+9dwHXgHkOK8oDpEcLqtvPvsGbrmyQHyrKnqw/3gIDJv6MPIr+8XvkkgtQQg8
lluvfFj9TCtGd5s30WCT+PfJkHYwbSfV6Fi730js4ulAmRxozWcBYNSVB6fPtWPv
M3z1i1xJF8zZ6DO6ls4EtCNMNH0IBYu8413JHzOlglCd4i+RhHO8b2oh+FfDAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUtLJ/pBQRJT2aS58IfAfHZ1DOtTAwHwYDVR0j
BBgwFoAUC9c42cercsgT64k+OVWmizGQz9IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Yzk3NDY1ZTMtNzhhMC00OTY1LWFlMTQtZTRjYjRkMGZjMTg1LzAvMEJENzM4RDlD
N0FCNzJDODEzRUI4OTNFMzk1NUE2OEIzMTkwQ0ZEMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wQkQ3MzhEOUM3QUI3MkM4MTNFQjg5M0UzOTU1QTY4QjMxOTBD
RkQyLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M5NzQ2NWUzLTc4YTAtNDk2NS1h
ZTE0LWU0Y2I0ZDBmYzE4NS8wLzMyMzAzMjJlMzUzMjJlMzEzMjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM1MzUzNjM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKNAwwDQYJKoZIhvcN
AQELBQADggEBAIgk6KVvGqg0H+pdg1zQAxOCrapdxCtlKI21KROuh98TXTURjreF
BwMOkW/QhHYWgjkBiWZKN7PNmmc6NU+tj9lfmBm+w1kDHoDDb3alu6y16bQM3w8e
Wk70JMWzmW4mqbQ3v8PJ3eWgqgU+ZPBa/8KcVqhY3GipUUE06YMJWViayEkueu4A
fEhfgFpHPUMRYHZRBuaMJ5K0pfyCbjFhWibkhnidm70o4fRIScAc6PZAowmk2YHo
eeMqQ/BciNHtM82yN372fWPYkloh4RDf24ocdiMZp2IaMgEhD6HY97S0o9Llv0hN
o9SLWWsQ3n6FAYax57+EE76mhjxrp5saE2E=
-----END CERTIFICATE-----
Generated at Wed May 13 02:13:45 2026 by rpki-client