
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa
File: 3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa (raw, json)
Hash identifier: Sq/TPHjnHcU8BdlRhTUGNyaSgFRduqyHP60YOl+s/e4=
Subject key identifier: D3:DD:74:DB:F1:1B:F1:5D:DF:D5:F9:15:B9:9E:0E:A4:4E:42:C1:AE
Certificate issuer: /CN=DF648DB03EC564148128C70FBB6A0CC8773AEF60
Certificate serial: 3F3B9CBAA9F4BB8CAADA24E90990266230B238A0
Authority key identifier: DF:64:8D:B0:3E:C5:64:14:81:28:C7:0F:BB:6A:0C:C8:77:3A:EF:60
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF648DB03EC564148128C70FBB6A0CC8773AEF60.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa
Signing time: Sun 03 May 2026 03:10:16 +0000
ROA not before: Sun 03 May 2026 03:05:16 +0000
ROA not after: Sun 02 May 2027 03:10:16 +0000
asID: 139371
IP address blocks: 203.142.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.crl
rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF648DB03EC564148128C70FBB6A0CC8773AEF60.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:3b:9c:ba:a9:f4:bb:8c:aa:da:24:e9:09:90:26:62:30:b2:38:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF648DB03EC564148128C70FBB6A0CC8773AEF60
Validity
Not Before: May 3 03:05:16 2026 GMT
Not After : May 2 03:10:16 2027 GMT
Subject: CN=D3DD74DBF11BF15DDFD5F915B99E0EA44E42C1AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:eb:a2:87:d4:98:f2:bf:4d:52:60:18:f8:cf:
d5:06:48:a3:33:f6:cf:ba:0d:28:4c:3b:3c:af:68:
d4:93:16:77:70:3e:f9:77:ff:f2:b7:7e:fe:a9:5b:
8e:09:48:62:40:d9:ba:06:4d:d2:d9:9e:f3:cd:b3:
76:1f:7a:94:ab:ba:db:26:18:17:dc:c1:6b:63:96:
e8:d3:ed:bf:3a:6e:ad:54:f4:03:9e:4c:d7:9d:cf:
b3:60:56:62:db:9f:31:74:1f:df:a3:67:38:ac:be:
26:d5:ba:3f:bb:89:65:04:f9:ce:4a:d0:7b:a3:44:
f5:7c:bf:84:24:41:93:15:3a:bb:e2:0b:b9:44:d5:
9d:c4:8d:e0:1d:f7:dc:c2:c0:a1:64:d5:a3:af:d4:
d8:54:8b:5f:5b:e3:f7:ba:f6:8d:88:50:da:66:ff:
12:95:47:09:a9:fc:7d:b1:32:ea:2c:cb:44:78:95:
2f:9b:0e:2f:84:e9:9b:bb:f1:be:ab:fd:35:d4:31:
50:4f:10:ea:2e:e3:09:12:a6:61:94:8f:82:b6:5c:
e4:3f:ca:a7:e4:b9:8c:cc:67:22:df:ea:c6:44:32:
2e:d5:64:1a:c7:4c:6b:2a:c6:3b:78:cc:18:ac:75:
74:05:72:8c:20:9c:32:20:78:d5:ea:28:ef:15:88:
73:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DD:74:DB:F1:1B:F1:5D:DF:D5:F9:15:B9:9E:0E:A4:4E:42:C1:AE
X509v3 Authority Key Identifier:
keyid:DF:64:8D:B0:3E:C5:64:14:81:28:C7:0F:BB:6A:0C:C8:77:3A:EF:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/DF648DB03EC564148128C70FBB6A0CC8773AEF60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DF648DB03EC564148128C70FBB6A0CC8773AEF60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.142.26.0/24
Signature Algorithm: sha256WithRSAEncryption
71:a2:38:09:d3:37:e9:4c:a0:2b:eb:64:ba:1a:42:bc:33:d1:
5d:20:e8:0c:03:76:67:83:ea:31:3e:11:a8:a4:95:c9:4c:25:
b2:08:82:42:3d:d1:7d:08:7e:5c:6a:d8:82:fe:47:2b:5d:0f:
6d:af:2b:f9:1b:3e:c5:0b:85:85:03:17:dd:6c:30:b1:da:2d:
39:c0:77:90:83:14:a9:3e:b2:04:dd:b1:20:19:0e:41:14:22:
f8:a6:09:32:a4:98:7f:b5:3d:7d:22:ee:3c:0c:7a:a0:cd:48:
78:ee:59:3f:d0:1b:27:c4:03:a3:2b:cc:0c:18:05:2a:2d:d7:
a3:b3:58:96:f3:a8:05:b3:57:25:4b:08:d1:60:ed:10:8b:52:
12:f7:c8:ca:c0:e7:4b:10:81:a7:25:6c:6c:9c:7d:e5:42:16:
1f:76:3a:15:2b:38:40:0b:e9:2a:11:df:0b:95:3e:2d:38:4e:
dd:18:ec:57:76:e3:57:34:d4:04:61:fe:e7:c4:00:05:ef:d9:
4c:97:d3:b0:d8:1f:32:33:9b:e8:8f:88:d4:cf:24:27:2d:c7:
3e:29:b7:82:7a:6f:3c:24:b4:50:cd:ee:48:59:3c:25:18:6f:
fc:d5:6b:f6:3c:f2:94:fa:0d:27:4b:71:cd:48:a6:51:62:3d:
90:82:01:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:50:38 2026 by rpki-client