
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa
File: 3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa (raw, json)
Hash identifier: thp9e79q4pO0KAuvlYoAaJIJd+/sNGpgdctK2HpTH70=
Subject key identifier: 3D:A6:49:1E:1F:12:38:1A:4A:23:2B:7F:35:3C:DC:23:DD:DE:72:8E
Certificate issuer: /CN=662A1D1F0B83DCEAC73D973514979A1703FA9E28
Certificate serial: 5D05EFCA786CB4A9BCDFAA0905991A9E12D6569A
Authority key identifier: 66:2A:1D:1F:0B:83:DC:EA:C7:3D:97:35:14:97:9A:17:03:FA:9E:28
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa
Signing time: Sun 03 May 2026 03:13:46 +0000
ROA not before: Sun 03 May 2026 03:08:46 +0000
ROA not after: Sun 02 May 2027 03:13:46 +0000
asID: 9340
IP address blocks: 202.153.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.crl
rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:05:ef:ca:78:6c:b4:a9:bc:df:aa:09:05:99:1a:9e:12:d6:56:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662A1D1F0B83DCEAC73D973514979A1703FA9E28
Validity
Not Before: May 3 03:08:46 2026 GMT
Not After : May 2 03:13:46 2027 GMT
Subject: CN=3DA6491E1F12381A4A232B7F353CDC23DDDE728E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1c:ba:b8:67:f8:b7:20:ce:3a:2d:bf:1b:ee:
8c:5a:14:40:b5:61:01:5c:3f:ce:b9:10:84:98:7d:
ae:a0:2a:44:4c:8d:49:8c:00:73:fd:b0:73:40:f0:
21:c9:f1:dc:75:1c:93:8c:64:bb:c0:75:13:d7:c2:
a0:e6:2e:71:a2:d4:42:b3:ee:34:1a:bb:7c:30:85:
58:11:28:fa:a7:71:fc:4b:67:b7:0b:ac:58:6a:25:
6f:48:21:9c:1e:56:30:21:ef:f4:15:3f:c4:a3:86:
18:72:93:fd:e5:1f:fc:e0:ae:8f:2d:ac:8c:d3:97:
6e:a8:29:3b:ec:c1:74:04:8e:c4:32:4e:44:0d:3a:
78:39:d1:7a:e0:e3:bc:c8:87:2e:77:5d:4f:df:81:
5d:42:35:c6:f3:06:04:3b:7a:37:aa:01:81:73:8e:
be:bc:a4:e5:1c:9e:09:36:4b:15:bc:b4:21:db:7e:
57:e3:a4:ea:a9:e8:91:c2:3c:66:2c:ac:58:93:87:
55:e6:c7:f3:08:7c:4c:a0:c9:2a:5d:85:33:26:18:
5c:02:ab:92:29:51:6b:c5:b1:a2:ef:ee:a3:63:37:
85:c9:16:b0:c3:b5:db:69:8b:6d:f5:80:59:23:f4:
18:4a:85:64:6c:12:86:3c:f0:c0:7b:26:e2:17:53:
4c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A6:49:1E:1F:12:38:1A:4A:23:2B:7F:35:3C:DC:23:DD:DE:72:8E
X509v3 Authority Key Identifier:
keyid:66:2A:1D:1F:0B:83:DC:EA:C7:3D:97:35:14:97:9A:17:03:FA:9E:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.153.224.0/19
Signature Algorithm: sha256WithRSAEncryption
54:cd:9d:c4:00:b7:fc:79:9b:12:a2:d4:b5:e9:e4:7e:15:7c:
18:60:a9:26:e9:57:6b:7f:ee:6d:21:f3:75:64:71:6d:81:24:
f8:08:0d:71:96:c9:61:57:e9:bd:a7:37:40:a1:39:51:66:94:
16:bf:a8:b9:9e:f5:18:0f:e2:29:ac:2b:f3:a4:82:6b:ce:30:
b4:99:2a:9f:3c:6d:66:87:11:82:24:39:db:2a:ff:8f:bb:6f:
0f:12:7a:1b:08:a9:99:14:93:c8:1b:b3:5b:c2:7d:83:0c:7d:
fa:a1:d1:fe:64:ac:e1:20:50:32:21:1b:1e:01:9d:63:02:04:
28:65:f3:a6:dc:7b:c0:37:7c:6c:47:7a:e4:8a:58:f8:ea:b3:
69:97:ca:71:1e:48:8b:e3:49:ba:7e:17:8b:f6:84:8e:67:42:
d4:4d:07:bc:68:7f:9b:6a:77:b0:55:ca:9f:0e:9e:6c:2a:f2:
80:cf:18:85:fc:07:47:ff:b2:b7:c9:cf:d5:92:3f:bb:46:a6:
d4:ca:23:f3:b0:db:fd:9a:99:7a:b7:dd:05:90:08:91:e6:75:
b0:4b:d0:44:44:24:d3:ef:d9:67:be:06:45:1d:8d:ec:c4:bd:
68:66:e9:35:d1:86:9a:01:09:53:ed:63:9e:37:4a:bd:ba:bb:
15:47:a7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:12:59 2026 by rpki-client