
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32392e302f32342d3234203d3e203234353235.roa
File: 3230332e3135332e32392e302f32342d3234203d3e203234353235.roa (raw, json)
Hash identifier: mYQsOxCuu9botJ3dG0Amj0NYcFO+hXNB0oICKj0TTGo=
Subject key identifier: 99:B7:BC:D4:34:25:17:8A:DE:8F:B1:B5:F6:C9:6C:D4:5A:34:20:83
Certificate issuer: /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial: 17D21D59F30466CB501FF575EC8FCC39659C1DA2
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32392e302f32342d3234203d3e203234353235.roa
Signing time: Sun 03 May 2026 03:08:50 +0000
ROA not before: Sun 03 May 2026 03:03:50 +0000
ROA not after: Sun 02 May 2027 03:08:50 +0000
asID: 24525
IP address blocks: 203.153.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:d2:1d:59:f3:04:66:cb:50:1f:f5:75:ec:8f:cc:39:65:9c:1d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
Validity
Not Before: May 3 03:03:50 2026 GMT
Not After : May 2 03:08:50 2027 GMT
Subject: CN=99B7BCD43425178ADE8FB1B5F6C96CD45A342083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ff:be:53:df:3f:91:44:3d:ca:ac:45:63:4d:
0b:81:3c:16:4d:3f:15:fd:1e:48:36:7e:c1:5c:15:
2c:4a:5d:99:03:d0:ef:f6:74:60:b2:25:dd:8f:b2:
24:b4:e1:2d:8d:e8:e5:e8:fb:70:79:ce:53:9b:b2:
7b:ce:4a:89:36:e0:34:73:d2:fe:4c:d4:31:9d:fa:
41:18:a0:d7:67:d9:9a:40:a5:af:05:93:2a:14:94:
db:a8:60:b2:e8:d3:c3:68:a1:69:c9:2a:32:35:ca:
92:09:4e:f9:fc:d7:96:3d:f3:a4:68:70:12:6a:0f:
2b:62:b6:0c:ce:23:fa:bf:ff:5e:62:c7:c5:0e:73:
6c:16:28:ee:d3:cf:0f:e0:2a:05:27:1a:58:f9:ed:
45:fb:37:3f:a1:b2:ed:ea:62:37:b7:b0:20:cc:18:
0e:ee:f7:33:c6:b2:6d:6d:88:73:a1:2b:e6:70:14:
59:3c:54:dc:61:12:12:71:f3:94:d8:8f:00:23:d4:
34:bb:ff:01:c0:e7:bd:99:d8:36:1f:29:91:7e:35:
4d:00:49:13:9d:3e:10:5c:53:67:36:01:cf:f4:de:
84:d4:d2:a7:9e:50:5b:84:31:e4:b3:0a:00:e8:48:
3f:68:6e:e6:6b:67:32:a9:41:8f:b1:a6:91:7e:13:
ea:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B7:BC:D4:34:25:17:8A:DE:8F:B1:B5:F6:C9:6C:D4:5A:34:20:83
X509v3 Authority Key Identifier:
keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32392e302f32342d3234203d3e203234353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.153.29.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:8b:0e:3e:1f:14:93:b0:d3:b6:00:e6:ce:19:a1:09:74:95:
b9:eb:04:83:8b:21:75:f7:97:4f:55:78:14:15:7f:bd:34:3d:
ed:4d:95:b5:59:db:d3:ca:0f:7d:4d:90:46:70:45:d3:4d:89:
4f:15:3a:8f:50:0a:df:bb:78:fd:75:4f:37:62:ce:26:df:b5:
eb:97:3e:c0:71:81:89:ae:92:eb:d5:9a:7e:f5:e4:3f:0a:4d:
e0:5f:3b:f9:da:19:bd:c0:ab:4f:7c:f1:1d:20:2d:e4:9e:95:
5f:f5:83:44:f8:50:81:e3:80:54:94:cb:af:d9:fd:8d:30:f4:
36:63:14:01:b7:83:8b:d8:7d:db:d8:68:7e:92:a3:ae:55:4f:
c1:34:c0:af:fc:bf:a6:d8:89:b4:04:f8:61:df:5a:4c:18:8e:
08:d1:91:7f:9a:75:96:b5:f9:28:2e:20:ef:f7:7e:bd:f6:2e:
5f:ce:90:75:22:e5:be:b2:39:5d:f9:ed:4b:bd:04:fd:23:fc:
02:1a:b5:73:5d:83:b7:eb:37:d4:88:e6:58:47:20:e0:6e:c9:
59:00:a6:d9:a2:2a:3b:34:22:65:7b:42:82:6f:2a:28:0f:63:
ad:b9:12:94:b3:e8:5d:b3:d0:02:65:40:62:3f:1f:d9:b0:3e:
db:f0:72:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:38:03 2026 by rpki-client