
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/3230332e3134352e36302e302f32332d3234203d3e203435323935.roa
File: 3230332e3134352e36302e302f32332d3234203d3e203435323935.roa (raw, json)
Hash identifier: RtiNL89mZIuYDEcSArtPnCGvIgkScdacFIZTXeu2tc4=
Subject key identifier: 5E:F8:C5:23:97:5A:91:9A:B2:37:0B:F1:A8:94:FB:E5:5B:1C:77:6B
Certificate issuer: /CN=16DCF707B920485289157A95351565941B6A8930
Certificate serial: 6EEA3344EC983F39CDAE735E97EB0966792A670F
Authority key identifier: 16:DC:F7:07:B9:20:48:52:89:15:7A:95:35:15:65:94:1B:6A:89:30
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16DCF707B920485289157A95351565941B6A8930.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/3230332e3134352e36302e302f32332d3234203d3e203435323935.roa
Signing time: Sun 03 May 2026 03:14:31 +0000
ROA not before: Sun 03 May 2026 03:09:31 +0000
ROA not after: Sun 02 May 2027 03:14:31 +0000
asID: 45295
IP address blocks: 203.145.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/16DCF707B920485289157A95351565941B6A8930.crl
rsync://rpki-rsync.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/16DCF707B920485289157A95351565941B6A8930.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16DCF707B920485289157A95351565941B6A8930.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:ea:33:44:ec:98:3f:39:cd:ae:73:5e:97:eb:09:66:79:2a:67:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16DCF707B920485289157A95351565941B6A8930
Validity
Not Before: May 3 03:09:31 2026 GMT
Not After : May 2 03:14:31 2027 GMT
Subject: CN=5EF8C523975A919AB2370BF1A894FBE55B1C776B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2e:37:50:58:cc:ac:b6:3e:7e:67:7b:37:3f:
fb:2a:04:30:ac:b6:24:1d:21:23:a5:64:33:26:05:
8e:27:c7:6b:59:cc:13:df:03:06:0d:03:ef:f0:b4:
f1:f8:09:a6:9c:df:3a:33:14:5f:cc:19:09:14:e3:
ec:65:a3:b9:48:6c:fa:cf:0b:47:42:f4:04:da:ad:
7a:3a:b8:ec:a4:cd:b4:8a:2b:4e:f4:a2:0a:20:fb:
16:2b:1d:5b:09:2b:c8:d9:35:19:8e:d9:09:c4:8a:
8d:fe:2c:8f:54:1a:5f:1f:7d:b5:d4:62:e3:d7:b2:
df:db:2b:12:61:20:fc:b8:62:15:ad:b0:70:ce:96:
d2:55:28:78:f9:6e:23:9c:f2:ba:34:f8:05:cd:47:
c8:59:26:eb:e0:8f:04:76:f9:74:89:7c:6a:2b:67:
3c:05:46:60:49:18:d8:f1:32:72:36:56:00:46:c5:
ce:76:3b:23:6f:52:d3:ef:c7:b9:6c:1e:56:3d:ec:
56:6e:39:64:96:d4:59:22:55:ee:c2:0a:95:6a:1b:
a3:eb:7b:78:a2:77:f1:49:2d:46:73:8c:28:5a:4d:
e1:db:c1:e4:d7:2d:2d:17:0f:c3:48:f1:15:73:f7:
f4:54:85:b0:76:e5:ab:88:3a:15:6b:2c:ba:62:79:
4b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F8:C5:23:97:5A:91:9A:B2:37:0B:F1:A8:94:FB:E5:5B:1C:77:6B
X509v3 Authority Key Identifier:
keyid:16:DC:F7:07:B9:20:48:52:89:15:7A:95:35:15:65:94:1B:6A:89:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/16DCF707B920485289157A95351565941B6A8930.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16DCF707B920485289157A95351565941B6A8930.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e7d9f745-faa4-48ce-83b1-0bde33c2447f/0/3230332e3134352e36302e302f32332d3234203d3e203435323935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.145.60.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:2d:bd:3d:63:85:cc:b6:ed:5c:54:a9:c4:51:f5:fe:4e:69:
1b:59:2c:1b:97:3c:be:15:a3:ec:c3:e6:4b:d5:eb:32:cf:5b:
9f:3c:8b:7f:0f:49:d8:ed:3b:76:74:86:53:e0:ba:d8:de:c2:
ac:88:f9:b2:9c:ae:d8:36:a7:56:06:f7:1f:2a:ec:76:22:85:
42:48:fa:c5:e9:7c:11:37:a9:41:60:cb:ab:56:5d:69:73:10:
49:78:dd:7a:f1:67:5b:95:07:d0:e6:e3:ae:58:f8:10:5d:0a:
a4:b5:8c:1b:8a:15:10:f9:6e:6e:d3:60:9b:1f:e2:4e:84:60:
70:5d:a2:ee:9d:32:05:f9:5b:57:50:a8:1b:c4:f0:f7:74:f9:
1c:19:fd:0b:ae:87:df:f6:db:7f:b0:fe:77:4d:c5:0b:34:47:
38:c9:1d:95:85:62:e4:74:74:d2:5f:21:c6:20:63:13:26:15:
bc:2c:27:38:47:e9:b0:1a:31:f9:89:d7:8d:77:6e:67:58:d2:
04:fe:1f:d8:d1:46:af:c9:8d:58:16:38:c4:a1:8a:00:7e:0f:
f1:99:6c:d3:c1:6f:a7:11:5d:55:0f:12:b0:b1:7b:ae:94:61:
58:ab:f7:3d:04:e8:09:11:5d:2c:79:86:b0:33:2e:0b:3d:53:
58:9f:bf:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:10 2026 by rpki-client