
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e35332e3232342e302f31392d3234203d3e2039333430.roa
File: 3230322e35332e3232342e302f31392d3234203d3e2039333430.roa (raw, json)
Hash identifier: PJEb98fYS4vg3BBgZ6XrL5za6qVUTLmXWj6MOSgyH3k=
Subject key identifier: 76:9D:9C:37:34:9E:57:7B:37:ED:51:81:FE:14:88:87:9C:50:32:58
Certificate issuer: /CN=662A1D1F0B83DCEAC73D973514979A1703FA9E28
Certificate serial: 200ED4D272F31A05A3D31EA58E9EAB04AE739F71
Authority key identifier: 66:2A:1D:1F:0B:83:DC:EA:C7:3D:97:35:14:97:9A:17:03:FA:9E:28
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e35332e3232342e302f31392d3234203d3e2039333430.roa
Signing time: Sun 03 May 2026 03:13:48 +0000
ROA not before: Sun 03 May 2026 03:08:48 +0000
ROA not after: Sun 02 May 2027 03:13:48 +0000
asID: 9340
IP address blocks: 202.53.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.crl
rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:0e:d4:d2:72:f3:1a:05:a3:d3:1e:a5:8e:9e:ab:04:ae:73:9f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662A1D1F0B83DCEAC73D973514979A1703FA9E28
Validity
Not Before: May 3 03:08:48 2026 GMT
Not After : May 2 03:13:48 2027 GMT
Subject: CN=769D9C37349E577B37ED5181FE1488879C503258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:54:2d:33:24:39:8e:fe:e6:c2:87:bd:fc:95:
7f:5f:a2:1f:6c:73:52:5f:79:cc:b3:20:60:f3:6e:
05:e1:e3:d1:1f:5f:50:2e:e6:ce:50:f9:4e:7a:28:
4e:ed:2a:80:9c:8d:3a:06:59:7c:d2:e8:52:3e:ad:
ca:09:67:98:9f:e5:94:7e:19:21:69:cd:fd:46:f1:
17:ff:5e:30:70:28:2d:82:62:d3:fa:43:12:ec:a0:
50:02:c9:50:5d:91:68:12:d3:f1:90:f6:2c:95:07:
b3:10:71:e4:aa:05:2d:2e:fa:04:87:7d:2c:b0:33:
5b:91:60:fd:72:f3:ac:ca:b6:4c:35:ef:f0:ba:6c:
77:da:32:c2:38:94:09:dd:8b:b7:f5:e6:e5:1f:ab:
8a:47:01:14:94:3c:08:72:ed:7d:94:9a:b9:fc:88:
61:7f:bd:3f:27:43:4b:8e:2b:3c:dc:8a:49:30:85:
c7:36:53:0a:d9:ee:5c:1f:6a:73:d4:b5:1a:5d:44:
62:dc:5e:1a:9c:2a:b5:e1:02:c8:07:1d:02:d9:73:
76:7a:ab:5b:33:ec:a6:f7:3e:80:47:8f:9a:b8:b8:
75:3a:3d:be:cc:c8:10:40:aa:5e:ff:7e:99:6d:ba:
5e:c5:f4:ff:f5:50:85:2a:79:32:8d:90:f1:78:be:
1d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9D:9C:37:34:9E:57:7B:37:ED:51:81:FE:14:88:87:9C:50:32:58
X509v3 Authority Key Identifier:
keyid:66:2A:1D:1F:0B:83:DC:EA:C7:3D:97:35:14:97:9A:17:03:FA:9E:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/662A1D1F0B83DCEAC73D973514979A1703FA9E28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/662A1D1F0B83DCEAC73D973514979A1703FA9E28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e35332e3232342e302f31392d3234203d3e2039333430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.53.224.0/19
Signature Algorithm: sha256WithRSAEncryption
1f:f4:39:df:18:70:4a:67:11:0b:81:08:e9:cb:05:e2:1f:81:
99:96:73:cd:c2:8d:1b:be:9d:96:f5:a1:49:57:6c:f1:f3:10:
51:34:3b:3b:1c:f6:e5:e1:ce:f9:a8:a2:5c:db:c7:b9:eb:19:
64:4d:cf:fd:dd:8d:78:49:8a:2b:b3:d5:28:68:a4:a9:56:ff:
54:23:4a:85:60:6b:c6:4e:b2:f3:bc:e5:dd:5c:cd:44:cc:a6:
a7:cf:11:bf:4a:da:0b:74:d5:0e:de:9f:5d:6f:d5:db:89:36:
9c:35:ec:4a:69:90:8d:f6:83:eb:e2:60:2f:b3:6e:dd:de:b5:
cf:2e:ba:ba:58:9b:b6:18:80:28:2b:c7:01:82:eb:12:7a:81:
4e:86:f9:f5:b5:7a:3b:05:64:67:20:a0:1f:74:c9:2f:07:59:
05:d7:6e:0c:dc:93:d8:bb:b8:0a:84:85:82:94:7e:c7:78:96:
06:23:e3:ab:6b:5e:f8:8f:f5:eb:cb:13:a3:e3:0c:07:d8:6e:
7b:e4:79:c1:d7:de:b0:8a:50:bb:43:f2:05:7f:3f:4c:bd:16:
a4:3b:a3:a2:cb:ab:0d:55:27:1c:1d:0d:c9:07:0d:f0:97:ae:
14:7b:73:ee:3a:9a:34:a1:a8:ca:a7:8e:7b:a2:59:00:60:18:
a8:32:bb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:22 2026 by rpki-client