
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e33302e302f32342d3234203d3e203234353235.roa
File: 3230332e3135332e33302e302f32342d3234203d3e203234353235.roa (raw, json)
Hash identifier: PGZGMUb4Qxm5B5EZKXBwmOR9DP6S+RfrL8wLkh//P3o=
Subject key identifier: 1F:55:49:66:AF:F7:32:C3:2D:AD:9A:2C:46:FA:B9:FB:BF:F2:E0:14
Certificate issuer: /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial: 729D954DF73C2D6042AE990BC440872B8185510C
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e33302e302f32342d3234203d3e203234353235.roa
Signing time: Sun 03 May 2026 03:09:01 +0000
ROA not before: Sun 03 May 2026 03:04:01 +0000
ROA not after: Sun 02 May 2027 03:09:01 +0000
asID: 24525
IP address blocks: 203.153.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:9d:95:4d:f7:3c:2d:60:42:ae:99:0b:c4:40:87:2b:81:85:51:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
Validity
Not Before: May 3 03:04:01 2026 GMT
Not After : May 2 03:09:01 2027 GMT
Subject: CN=1F554966AFF732C32DAD9A2C46FAB9FBBFF2E014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:17:4b:5e:e3:53:9c:1a:4a:8c:3a:56:72:50:
25:25:c3:a4:2d:b8:53:10:ae:5b:e5:6a:6d:f8:6d:
75:18:31:a4:61:9c:17:8a:c4:10:d1:85:5d:10:e9:
72:46:d5:20:ba:6e:b9:a3:86:39:3a:c4:c2:d4:e1:
97:d3:74:2d:f8:6f:00:84:96:ae:dc:44:b0:b7:9d:
e1:15:b7:88:e3:57:5d:a2:7f:c4:ea:56:1e:fe:fa:
af:b3:f4:05:68:d9:bc:29:7e:17:2a:d7:01:40:8e:
bc:52:e2:bf:d1:2f:e1:d6:f9:d5:08:a6:fb:69:e8:
ea:64:39:7b:a1:f5:fa:ea:29:98:b9:19:0d:b0:2d:
8f:05:4a:c7:49:f7:1f:f9:a8:65:12:19:7c:9d:4c:
f8:9d:47:a5:6b:92:44:25:43:6b:99:c5:36:d9:2e:
29:fa:09:cc:56:ab:32:97:8b:f9:10:76:e1:ea:83:
65:a7:b8:b1:ce:2b:1c:91:b4:58:f1:57:a1:ea:84:
37:3e:3b:f2:8d:48:1d:a0:c3:52:59:11:29:54:42:
4a:df:82:a3:8c:35:29:9b:c8:0c:80:ba:8c:35:e7:
d4:3d:ee:53:b8:c3:b4:63:a6:ec:3c:05:ac:49:95:
40:bd:14:9a:4c:10:4d:d8:22:8d:7c:28:67:d8:a5:
4f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:55:49:66:AF:F7:32:C3:2D:AD:9A:2C:46:FA:B9:FB:BF:F2:E0:14
X509v3 Authority Key Identifier:
keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e33302e302f32342d3234203d3e203234353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.153.30.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:b3:3c:d2:fe:cb:8f:e9:4c:64:8b:2e:bb:91:69:ce:b9:f5:
60:30:5c:8c:62:7b:4c:69:35:7e:2e:33:5e:64:61:58:1f:f6:
eb:23:fb:6f:ff:86:47:ea:fa:ef:fd:f2:11:81:bd:e3:2e:3a:
b7:af:48:29:4f:74:c2:f0:b5:3e:3a:1e:c0:d7:d6:ba:c8:27:
f8:e9:52:2b:a9:b5:da:e8:07:e9:b8:47:06:5d:7c:78:6b:b5:
32:f1:9b:c1:8e:b7:d0:5d:71:6f:54:84:c2:25:88:83:f9:6e:
51:63:e8:e7:28:dc:97:15:32:24:02:5c:df:36:0e:90:04:7f:
ef:81:f9:2c:d2:77:fc:77:0b:81:80:32:7f:c1:b7:63:cb:d2:
1d:12:10:2d:b3:b7:6f:c5:0e:bb:29:ce:28:26:58:5e:2f:c1:
c5:7d:ff:0b:64:7a:05:82:b9:d9:03:8f:ff:24:63:e8:48:5d:
4e:d3:a8:63:42:f9:7a:d7:86:a3:5d:27:5a:1d:a1:cb:2b:90:
81:8d:2a:cb:e3:74:15:e1:e2:78:26:b9:60:ea:37:bd:45:65:
0d:3f:3a:ca:65:6b:be:f1:66:9d:bc:31:5f:33:ee:3b:77:92:
c4:85:c2:9a:0a:0a:ca:2b:9a:a5:bb:5c:75:db:5b:b1:1a:62:
bb:f9:8a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:51:59 2026 by rpki-client