
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/3230322e37342e37342e302f32332d3234203d3e20313333383030.roa
File: 3230322e37342e37342e302f32332d3234203d3e20313333383030.roa (raw, json)
Hash identifier: 1rW3LJJP4HTli11FPESZ21Q75XI7V+R6AE+xvtVtdOo=
Subject key identifier: 8B:A3:BD:99:6E:55:98:F8:7C:B1:F0:62:89:FD:DF:65:26:9E:A9:94
Certificate issuer: /CN=51B98F16799452BDD8E00D1274ADE2150C9F4138
Certificate serial: 099E1EF7BAF4671F57BF87E9D3A3FD11B17A4BDC
Authority key identifier: 51:B9:8F:16:79:94:52:BD:D8:E0:0D:12:74:AD:E2:15:0C:9F:41:38
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51B98F16799452BDD8E00D1274ADE2150C9F4138.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/3230322e37342e37342e302f32332d3234203d3e20313333383030.roa
Signing time: Sun 03 May 2026 03:09:43 +0000
ROA not before: Sun 03 May 2026 03:04:43 +0000
ROA not after: Sun 02 May 2027 03:09:43 +0000
asID: 133800
IP address blocks: 202.74.74.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/51B98F16799452BDD8E00D1274ADE2150C9F4138.crl
rsync://rpki-rsync.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/51B98F16799452BDD8E00D1274ADE2150C9F4138.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51B98F16799452BDD8E00D1274ADE2150C9F4138.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:9e:1e:f7:ba:f4:67:1f:57:bf:87:e9:d3:a3:fd:11:b1:7a:4b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51B98F16799452BDD8E00D1274ADE2150C9F4138
Validity
Not Before: May 3 03:04:43 2026 GMT
Not After : May 2 03:09:43 2027 GMT
Subject: CN=8BA3BD996E5598F87CB1F06289FDDF65269EA994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c9:8b:e3:e1:ca:8c:c8:76:97:a9:9a:39:54:
96:82:a6:d7:59:60:16:04:63:0d:30:1d:a8:79:4c:
62:a0:79:55:5f:aa:4a:51:1a:fb:b9:2e:ce:95:b8:
91:80:f1:00:cf:13:dc:78:ba:88:5e:fc:5c:80:65:
97:44:5a:8b:1e:7f:c2:08:c9:b7:c2:96:7d:80:e6:
5e:53:90:4f:46:f8:a2:89:b1:51:c6:38:7a:55:e6:
47:b4:ba:a2:74:e6:98:89:81:a1:46:00:45:a8:33:
7a:ff:36:9b:6a:ca:a6:ac:25:23:70:4b:9e:5a:f2:
1b:01:da:de:0b:dc:fc:bb:0c:2c:2c:5b:82:ac:51:
79:4f:1a:ca:78:73:55:02:cf:a5:3b:4b:d8:67:ab:
35:d0:08:1e:f6:26:99:6f:75:3f:a7:76:b9:c8:92:
27:f5:db:c8:12:ac:03:92:75:15:72:3f:39:6f:19:
2a:5b:12:83:53:4c:1f:de:cd:5b:23:f9:04:39:a9:
42:6c:62:00:c6:52:60:4b:81:de:00:ad:36:d7:88:
06:1b:e8:7f:93:61:78:44:d7:ab:0b:1d:27:d6:c2:
9d:aa:90:7e:40:20:eb:31:d9:db:7d:3d:71:87:25:
10:69:66:6b:91:2d:21:73:f4:0f:af:5c:8a:82:e0:
d4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A3:BD:99:6E:55:98:F8:7C:B1:F0:62:89:FD:DF:65:26:9E:A9:94
X509v3 Authority Key Identifier:
keyid:51:B9:8F:16:79:94:52:BD:D8:E0:0D:12:74:AD:E2:15:0C:9F:41:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/51B98F16799452BDD8E00D1274ADE2150C9F4138.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/51B98F16799452BDD8E00D1274ADE2150C9F4138.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/3230322e37342e37342e302f32332d3234203d3e20313333383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.74.74.0/23
Signature Algorithm: sha256WithRSAEncryption
52:d7:c4:b4:1f:57:7b:03:c5:db:54:b1:f4:15:23:fc:5d:c7:
e2:b9:68:08:61:eb:aa:fd:9c:0a:68:16:b7:a1:a5:b0:26:93:
12:ab:93:c1:39:9a:14:16:b4:0c:8d:54:40:de:a3:3d:65:f9:
e9:6f:7c:95:24:72:48:ae:57:f1:ba:7d:0e:38:7d:8c:ef:8c:
37:18:3a:e6:f5:c7:44:22:f3:97:a7:09:92:7e:d7:b7:5e:30:
7f:4e:ef:66:e6:a4:00:23:b7:89:75:50:5b:59:21:a2:0a:c4:
2d:cb:00:9b:94:be:6e:2e:d4:ce:18:3f:f2:e2:2f:64:b9:09:
4f:08:dc:aa:7f:79:63:a6:cc:60:35:46:68:22:d5:98:74:dd:
89:3a:83:d7:6a:a3:06:1b:f2:4e:42:e9:b5:43:57:8b:35:a7:
d6:87:26:d6:59:75:2a:fa:80:d3:3b:98:7c:8d:e6:f6:fa:3a:
24:71:d3:9c:d5:fb:23:2a:8c:66:24:58:c9:d4:3e:68:12:87:
d9:55:0a:c2:9a:80:9d:d9:eb:ea:d8:62:53:ed:9c:54:03:62:
f1:82:e6:b6:f0:5f:3b:92:33:09:a9:73:2f:c1:ea:a4:2f:17:
14:4a:75:72:7e:e4:d8:fb:54:a7:ba:f6:71:54:53:01:8f:1b:
77:86:23:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:14:14 2026 by rpki-client