
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3230322e3135382e35302e302f32332d3234203d3e2034373837.roa
File: 3230322e3135382e35302e302f32332d3234203d3e2034373837.roa (raw, json)
Hash identifier: QPI+dREhzvsIigpY59BOgb1O27ZG4A0uLzoVwlmd6ns=
Subject key identifier: D5:AE:C2:4B:9A:E2:22:B1:53:61:33:D1:44:3B:D6:9C:62:6B:C5:78
Certificate issuer: /CN=488A458129866D0E7DBFF7668D82664F584F8541
Certificate serial: 5A225318D5050D0A8CD8CBE79DD2FE8DB11C0F08
Authority key identifier: 48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3230322e3135382e35302e302f32332d3234203d3e2034373837.roa
Signing time: Sun 03 May 2026 03:15:14 +0000
ROA not before: Sun 03 May 2026 03:10:14 +0000
ROA not after: Sun 02 May 2027 03:15:14 +0000
asID: 4787
IP address blocks: 202.158.50.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl
rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:22:53:18:d5:05:0d:0a:8c:d8:cb:e7:9d:d2:fe:8d:b1:1c:0f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488A458129866D0E7DBFF7668D82664F584F8541
Validity
Not Before: May 3 03:10:14 2026 GMT
Not After : May 2 03:15:14 2027 GMT
Subject: CN=D5AEC24B9AE222B1536133D1443BD69C626BC578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:90:21:62:f8:db:22:bb:95:55:84:b3:33:70:
aa:37:a7:22:83:93:a5:ce:50:bd:3c:f8:9c:c0:15:
76:32:b9:87:0d:69:b6:bb:c2:83:7d:11:f5:96:5c:
d1:62:25:75:8c:0a:60:f4:97:0d:a8:a4:83:9c:17:
e5:b8:1b:c2:2f:82:f9:7b:77:77:7b:d8:8b:29:a9:
bc:bf:2e:10:ad:38:61:76:49:04:56:80:31:ef:3f:
96:d7:8c:71:5f:20:c9:3f:5e:68:d1:68:1c:87:cb:
ed:30:cd:e3:b0:ef:15:9d:3c:70:ba:2b:bb:64:3e:
af:b8:02:17:17:4a:48:7e:93:c7:56:c1:46:2d:3b:
e4:0e:49:c4:68:32:99:19:42:39:24:b2:4f:16:c4:
d7:9f:16:b6:56:52:86:d6:8c:03:11:8a:a2:66:71:
a4:e8:65:03:64:8e:f4:e6:d7:1c:17:b4:56:76:43:
91:b5:d8:52:e1:8c:be:9a:ad:c7:a6:29:5a:3f:0c:
aa:3d:22:36:d9:36:1d:1e:e1:ca:79:4e:1f:af:af:
a6:60:6a:14:32:d4:3a:2c:68:99:cd:7e:6f:80:28:
9f:e7:9e:60:ed:07:f2:53:b8:57:02:01:53:c5:82:
0c:e8:7c:75:13:52:ae:94:9a:f4:8c:ab:12:ef:84:
f9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AE:C2:4B:9A:E2:22:B1:53:61:33:D1:44:3B:D6:9C:62:6B:C5:78
X509v3 Authority Key Identifier:
keyid:48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3230322e3135382e35302e302f32332d3234203d3e2034373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.158.50.0/23
Signature Algorithm: sha256WithRSAEncryption
d7:5d:6b:47:b1:fd:ae:36:0c:d4:01:ba:b0:36:ca:ad:7a:53:
8f:91:a1:95:4a:2d:27:23:21:e2:49:16:54:f1:fd:55:04:2f:
f1:6a:a0:b3:0b:f7:0f:8c:03:9e:01:0c:ab:38:c3:d4:76:30:
93:65:fc:65:c8:a1:6f:6f:6b:33:39:be:c5:61:8c:92:b2:16:
a3:a2:a1:d6:57:7e:14:27:a0:c4:30:d3:fd:7a:05:e8:fd:13:
ea:d8:37:3a:5f:b1:3d:7f:7d:1a:c3:19:93:1c:95:cf:b4:38:
47:b3:81:ac:09:cc:e9:aa:99:ea:70:31:0a:50:38:4d:8c:ca:
63:34:c1:03:7b:5b:91:9b:74:28:31:22:51:93:fe:39:31:60:
89:7f:93:4b:1b:67:01:54:03:68:af:25:ad:e1:35:0c:58:e3:
89:d8:7d:ed:40:97:35:be:e7:e1:b7:fa:5f:81:92:fa:3b:08:
71:de:ad:2e:ce:3f:5b:b4:51:ea:a4:90:c7:fc:9f:c3:2d:4c:
0a:7d:0c:6a:30:a6:8f:cf:da:bb:37:19:20:90:a2:e6:c6:1e:
62:ed:7f:19:f8:98:0f:d1:65:61:42:dc:0a:a7:e7:6c:f1:eb:
ca:d8:ab:eb:db:b6:2a:12:5e:bc:86:51:bb:e7:bf:53:33:99:
4e:3c:61:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:49:58 2026 by rpki-client