
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e3135392e35302e302f32332d3234203d3e203435373239.roa
File: 3230322e3135392e35302e302f32332d3234203d3e203435373239.roa (raw, json)
Hash identifier: 0DjkrTA9ouNvrCsdojisPz41tYiFCwdDrjUDolphH5E=
Subject key identifier: 54:C2:EA:CE:59:6B:94:C6:E2:C6:64:B1:A1:6E:70:79:A9:38:AA:90
Certificate issuer: /CN=662A1D1F0B83DCEAC73D973514979A1703FA9E28
Certificate serial: 1BB1CE90FF805278F55FDD059C76E1A0155EA54D
Authority key identifier: 66:2A:1D:1F:0B:83:DC:EA:C7:3D:97:35:14:97:9A:17:03:FA:9E:28
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e3135392e35302e302f32332d3234203d3e203435373239.roa
Signing time: Sun 03 May 2026 03:13:48 +0000
ROA not before: Sun 03 May 2026 03:08:48 +0000
ROA not after: Sun 02 May 2027 03:13:48 +0000
asID: 45729
IP address blocks: 202.159.50.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.crl
rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:b1:ce:90:ff:80:52:78:f5:5f:dd:05:9c:76:e1:a0:15:5e:a5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662A1D1F0B83DCEAC73D973514979A1703FA9E28
Validity
Not Before: May 3 03:08:48 2026 GMT
Not After : May 2 03:13:48 2027 GMT
Subject: CN=54C2EACE596B94C6E2C664B1A16E7079A938AA90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ec:ab:f2:f0:21:98:b6:23:2a:77:eb:bf:cf:
fc:61:ad:64:4b:59:b4:b1:4f:7d:a7:ab:7f:40:64:
e5:38:b8:57:e6:9b:6d:2e:4e:22:55:e1:28:b0:37:
b6:d7:63:ad:00:87:f0:57:c4:c6:59:c0:41:ab:b2:
89:e8:9b:5c:e7:87:4d:bb:be:9c:af:47:10:3b:6f:
4a:dd:a0:31:75:6e:90:61:18:76:1f:1f:ff:1d:f5:
c7:f0:31:85:c9:aa:f3:79:98:e1:87:ee:34:82:ef:
c8:79:3e:dd:f5:d8:f6:e4:59:5a:89:b7:12:bf:eb:
d1:fb:e3:dc:b8:ac:d6:74:21:a6:b9:b7:31:e9:ef:
0e:ef:0b:5a:3e:60:9a:48:4b:bd:b7:7b:47:b5:3b:
fb:6e:4a:33:1a:64:e0:ec:67:34:fc:99:1c:5b:02:
21:6a:1b:4d:3c:2b:99:13:2a:d7:aa:b8:d5:9b:0d:
7a:15:9f:93:40:f0:ad:c7:23:5a:0d:96:c6:6a:7a:
55:7a:f1:77:23:e4:b1:64:81:90:74:36:33:bb:a6:
b6:f4:2a:ff:8c:58:bf:b6:7d:29:5b:d8:61:c0:e8:
14:9b:fc:8c:ec:80:77:c7:25:f0:76:01:db:70:ea:
20:0c:72:ed:00:a7:00:49:39:9a:f9:ac:d5:10:88:
66:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C2:EA:CE:59:6B:94:C6:E2:C6:64:B1:A1:6E:70:79:A9:38:AA:90
X509v3 Authority Key Identifier:
keyid:66:2A:1D:1F:0B:83:DC:EA:C7:3D:97:35:14:97:9A:17:03:FA:9E:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e3135392e35302e302f32332d3234203d3e203435373239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.159.50.0/23
Signature Algorithm: sha256WithRSAEncryption
87:13:96:ff:80:0e:77:7a:e4:f4:ec:fb:0c:c2:03:74:d6:de:
cd:78:be:c2:82:85:44:9c:6f:42:fc:d7:6b:66:07:4d:c5:ad:
a6:87:63:d5:55:4e:57:9b:ea:28:a0:e8:5e:12:73:30:68:63:
07:6d:83:be:2f:36:9c:63:c0:f8:68:07:46:77:e9:68:02:21:
86:f8:9e:fa:1f:24:f8:3d:5f:e9:1d:e8:de:a0:d4:d0:11:4e:
81:91:04:6f:0d:6c:fb:8f:bd:dc:07:c5:92:8a:18:1b:5e:52:
9a:89:b1:73:b1:69:53:e6:06:29:e9:3b:53:c0:4e:fb:1c:e4:
6b:40:e8:42:36:39:6e:ba:48:87:2a:6f:6a:1e:34:ea:60:31:
d6:d2:e3:e3:96:00:1c:a6:a0:54:98:4f:31:30:62:3e:5a:2b:
95:71:6c:55:92:fa:08:de:fc:9c:f7:0e:2a:83:85:b8:66:db:
ca:3e:37:d7:9a:7b:c0:46:ba:3b:b5:44:40:c8:38:c0:dc:87:
20:2a:fc:ff:e6:a5:a8:99:19:d6:f4:fb:3a:97:66:4c:a3:9f:
6c:78:2c:92:28:11:0b:0d:bf:e0:1e:01:b6:ea:77:f2:5a:00:
5b:23:1c:5c:cd:55:c2:18:5b:e5:02:8d:2b:44:0d:9a:d9:9e:
21:99:64:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:53:28 2026 by rpki-client