
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/3230332e33342e3131392e302f32342d3234203d3e203338373735.roa
File: 3230332e33342e3131392e302f32342d3234203d3e203338373735.roa (raw, json)
Hash identifier: 5w8Q3ENzfSVAdulWtqD1S418kv12p4yit5XWvzxAqJ8=
Subject key identifier: 05:64:1F:68:60:2B:4F:74:BF:1C:C4:50:53:1D:BB:30:DA:57:C2:FB
Certificate issuer: /CN=7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E
Certificate serial: 5E4FC8F120857C80034CA22E665C95940FC4E737
Authority key identifier: 7F:2F:D9:D7:9F:60:99:D1:AC:3B:40:66:68:2D:5C:9A:2E:CC:E3:1E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/3230332e33342e3131392e302f32342d3234203d3e203338373735.roa
Signing time: Sun 03 May 2026 03:10:39 +0000
ROA not before: Sun 03 May 2026 03:05:39 +0000
ROA not after: Sun 02 May 2027 03:10:39 +0000
asID: 38775
IP address blocks: 203.34.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.crl
rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:4f:c8:f1:20:85:7c:80:03:4c:a2:2e:66:5c:95:94:0f:c4:e7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E
Validity
Not Before: May 3 03:05:39 2026 GMT
Not After : May 2 03:10:39 2027 GMT
Subject: CN=05641F68602B4F74BF1CC450531DBB30DA57C2FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5f:97:e6:54:bd:1d:ce:90:d7:3a:d8:cb:5e:
6f:03:fa:1d:2e:35:c9:bf:93:d0:3b:49:67:49:1c:
0e:2f:3e:c0:d4:33:c8:ab:a2:3a:82:31:20:dd:ec:
cf:03:5a:58:47:2f:07:f8:cc:29:50:4f:fe:d0:bb:
9b:43:7b:d0:67:7c:39:86:04:72:ad:eb:31:34:05:
7f:62:ac:d5:7f:54:f3:2d:62:bf:67:a5:f8:ef:ba:
80:aa:01:73:31:86:19:1b:6b:6a:89:c5:05:98:f9:
1d:ef:6a:2e:3e:9c:7e:b4:d5:56:f9:a1:ea:4a:21:
23:3d:98:86:81:6b:69:0b:82:dd:97:6c:91:00:a5:
12:9e:3d:70:e8:7b:ec:ab:e2:11:5f:46:1e:ae:17:
d9:0d:c5:ff:17:51:c9:d7:0c:64:44:95:45:31:e5:
d9:a5:18:1d:6c:b9:cb:0d:1a:9b:55:97:88:98:ef:
07:97:55:a9:1d:53:a6:c8:44:55:dd:94:c3:d3:59:
27:8e:1b:a7:e0:26:a1:9e:c1:e3:12:d9:0a:a7:8b:
be:b9:43:ef:4b:15:16:cb:90:51:c6:df:cc:d5:6d:
64:df:4f:56:fb:d8:50:f8:59:77:3b:e8:09:91:d4:
db:7f:a7:2f:0a:5f:b8:18:1e:30:0a:1e:1b:ad:01:
a7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:64:1F:68:60:2B:4F:74:BF:1C:C4:50:53:1D:BB:30:DA:57:C2:FB
X509v3 Authority Key Identifier:
keyid:7F:2F:D9:D7:9F:60:99:D1:AC:3B:40:66:68:2D:5C:9A:2E:CC:E3:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F2FD9D79F6099D1AC3B4066682D5C9A2ECCE31E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/3230332e33342e3131392e302f32342d3234203d3e203338373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.34.119.0/24
Signature Algorithm: sha256WithRSAEncryption
68:6f:18:95:94:2c:4e:c0:a7:67:52:2d:c6:5c:bf:61:50:43:
60:a0:8b:e2:f0:de:50:68:b3:41:54:77:2b:81:8f:c1:0a:c6:
dc:b7:50:ec:14:43:06:a5:a9:46:a5:77:13:6b:3b:31:4b:ad:
1b:14:26:39:53:a8:30:2d:7f:de:41:ac:dc:a8:6b:a4:56:7d:
de:2d:b5:e8:2e:58:6f:24:85:aa:47:00:08:90:1e:10:9f:89:
e4:89:ea:16:79:30:eb:5a:30:8b:cd:3c:34:50:db:d7:90:55:
04:a1:68:fc:76:26:75:36:e0:3a:5a:72:a7:1e:2b:49:71:fb:
24:56:89:23:c5:c7:56:61:60:75:a9:f7:05:a0:5a:e8:ac:98:
f7:df:e5:26:dd:78:6a:fe:7a:b9:9e:88:fa:82:4f:a8:ad:57:
81:3d:e3:7b:2d:c2:e2:7f:b0:27:d9:a3:5c:a7:de:d7:50:7b:
a2:98:ea:87:7d:97:1f:39:a0:eb:ef:47:b1:2d:99:13:63:c6:
e0:ef:cb:28:d0:dd:6a:90:08:f7:5a:02:6b:3f:89:3a:7e:ec:
18:a3:83:2c:8f:35:ba:49:e3:73:76:a1:a3:e4:fb:72:cc:b7:
ae:d1:6c:ab:e5:0f:55:1a:3b:0a:c7:6d:83:8f:8d:8f:df:f5:
03:ef:b6:d9
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUXk/I8SCFfIADTKIuZlyVlA/E5zcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YyRkQ5RDc5RjYwOTlEMUFDM0I0MDY2NjgyRDVDOUEy
RUNDRTMxRTAeFw0yNjA1MDMwMzA1MzlaFw0yNzA1MDIwMzEwMzlaMDMxMTAvBgNV
BAMTKDA1NjQxRjY4NjAyQjRGNzRCRjFDQzQ1MDUzMURCQjMwREE1N0MyRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuX5fmVL0dzpDXOtjLXm8D+h0u
Ncm/k9A7SWdJHA4vPsDUM8irojqCMSDd7M8DWlhHLwf4zClQT/7Qu5tDe9BnfDmG
BHKt6zE0BX9irNV/VPMtYr9npfjvuoCqAXMxhhkba2qJxQWY+R3vai4+nH601Vb5
oepKISM9mIaBa2kLgt2XbJEApRKePXDoe+yr4hFfRh6uF9kNxf8XUcnXDGRElUUx
5dmlGB1sucsNGptVl4iY7weXVakdU6bIRFXdlMPTWSeOG6fgJqGeweMS2Qqni765
Q+9LFRbLkFHG38zVbWTfT1b72FD4WXc76AmR1Nt/py8KX7gYHjAKHhutAacpAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUBWQfaGArT3S/HMRQUx27MNpXwvswHwYDVR0j
BBgwFoAUfy/Z159gmdGsO0BmaC1cmi7M4x4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDkwNTNkOTYtZGExNy00MDk5LWI3MDctZGEwZWIyYmYwN2JjLzAvN0YyRkQ5RDc5
RjYwOTlEMUFDM0I0MDY2NjgyRDVDOUEyRUNDRTMxRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83RjJGRDlENzlGNjA5OUQxQUMzQjQwNjY2ODJENUM5QTJFQ0NF
MzFFLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q5MDUzZDk2LWRhMTctNDA5OS1i
NzA3LWRhMGViMmJmMDdiYy8wLzMyMzAzMzJlMzMzNDJlMzEzMTM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM3MzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMsidzANBgkqhkiG
9w0BAQsFAAOCAQEAaG8YlZQsTsCnZ1Itxly/YVBDYKCL4vDeUGizQVR3K4GPwQrG
3LdQ7BRDBqWpRqV3E2s7MUutGxQmOVOoMC1/3kGs3KhrpFZ93i216C5YbySFqkcA
CJAeEJ+J5InqFnkw61owi808NFDb15BVBKFo/HYmdTbgOlpypx4rSXH7JFaJI8XH
VmFgdan3BaBa6KyY99/lJt14av56uZ6I+oJPqK1XgT3jey3C4n+wJ9mjXKfe11B7
opjqh32XHzmg6+9HsS2ZE2PG4O/LKNDdapAI91oCaz+JOn7sGKODLI81uknjc3ah
o+T7csy3rtFsq+UPVRo7Csdtg4+Nj9/1A++22Q==
-----END CERTIFICATE-----
Generated at Wed May 13 01:44:54 2026 by rpki-client