
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230322e3138322e3137342e302f32342d3234203d3e203538343738.roa
File: 3230322e3138322e3137342e302f32342d3234203d3e203538343738.roa (raw, json)
Hash identifier: ENboBx8oAXnbGQ10S7i2zUMk/RdQE6cutileOuH+d/M=
Subject key identifier: EE:0F:3E:47:0D:02:8B:9E:03:FF:43:AA:DD:86:FD:35:76:39:FF:F3
Certificate issuer: /CN=4242BEFAB7FD9E772FB16847C540331384EE1024
Certificate serial: 17C2690739EBC0DB3B949896ADCF42A1FD58D2D6
Authority key identifier: 42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230322e3138322e3137342e302f32342d3234203d3e203538343738.roa
Signing time: Sun 03 May 2026 03:15:28 +0000
ROA not before: Sun 03 May 2026 03:10:28 +0000
ROA not after: Sun 02 May 2027 03:15:28 +0000
asID: 58478
IP address blocks: 202.182.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.crl
rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:c2:69:07:39:eb:c0:db:3b:94:98:96:ad:cf:42:a1:fd:58:d2:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4242BEFAB7FD9E772FB16847C540331384EE1024
Validity
Not Before: May 3 03:10:28 2026 GMT
Not After : May 2 03:15:28 2027 GMT
Subject: CN=EE0F3E470D028B9E03FF43AADD86FD357639FFF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:97:41:fa:ef:64:13:78:c4:9b:c5:f5:dc:1b:
63:d6:a8:be:e4:a7:05:f8:fc:62:96:23:8d:76:ba:
e4:63:4e:d3:d2:9c:07:c7:a3:29:93:db:30:46:11:
64:66:5a:35:59:41:92:cd:00:6f:6c:cf:49:dd:92:
a4:13:e5:a4:04:8e:ef:11:0c:55:9f:50:dd:cf:65:
0e:2a:3a:16:3c:02:0b:d1:64:e9:ac:aa:4d:21:9b:
70:2c:89:ac:17:88:b0:5a:05:f3:56:75:a0:19:3b:
dd:35:db:e8:f2:18:f7:60:be:f8:3b:52:c1:55:a3:
01:2e:a1:2e:e2:98:9d:f0:0a:3d:23:d8:9c:d0:fa:
a5:5a:1a:cf:90:15:4b:65:e5:95:6c:98:71:96:46:
6f:ef:2d:a2:74:f0:e3:47:27:9f:4a:b5:9b:72:bc:
d1:0d:57:1a:c0:b5:ef:37:59:43:41:40:3c:32:e2:
92:8b:ba:51:9e:3d:00:8e:f7:1c:81:c7:91:0a:ed:
f8:2a:39:71:8a:77:d9:3f:e1:b8:1c:56:b0:69:20:
25:73:78:9d:cf:21:d1:2c:e5:09:47:1f:f4:f9:a7:
6e:70:70:4c:58:f7:f5:92:9c:a3:46:b9:23:60:87:
18:0b:8f:49:26:dc:e2:ce:61:7f:32:96:01:f5:17:
24:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0F:3E:47:0D:02:8B:9E:03:FF:43:AA:DD:86:FD:35:76:39:FF:F3
X509v3 Authority Key Identifier:
keyid:42:42:BE:FA:B7:FD:9E:77:2F:B1:68:47:C5:40:33:13:84:EE:10:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/4242BEFAB7FD9E772FB16847C540331384EE1024.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4242BEFAB7FD9E772FB16847C540331384EE1024.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230322e3138322e3137342e302f32342d3234203d3e203538343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.182.174.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:17:c0:c9:2a:04:dc:1b:59:ee:a8:dc:04:fe:81:70:66:81:
2d:94:4b:59:ac:8f:f3:3a:1a:ed:e3:27:ac:18:f7:22:9b:4e:
0e:7c:d9:06:4f:06:84:96:7b:2e:7e:9f:9a:1a:77:7e:1a:25:
a3:de:63:83:aa:15:b5:61:c4:ea:f8:77:2a:db:25:db:91:89:
0a:2e:84:ad:31:04:a4:26:aa:2f:78:a5:55:27:2e:b1:78:9b:
c4:85:7e:89:2d:cf:d9:89:91:cd:79:2a:ba:8d:06:e2:5d:bb:
5b:74:71:97:e7:e1:73:d9:ef:f2:e6:93:7d:e5:73:ac:49:4b:
0b:d0:2a:d9:b0:0d:e6:e5:50:bd:45:b0:d1:28:1a:5d:f6:7f:
54:67:dd:83:88:92:6e:6a:69:aa:9e:80:90:bc:66:44:d1:22:
6e:a4:37:75:ce:9a:dd:7c:46:20:7e:f0:95:c6:1e:d8:67:32:
3e:57:36:54:5f:70:41:ca:5b:57:34:4f:31:5e:c7:e0:29:80:
2a:84:4e:d6:b9:a0:fa:b7:f1:d8:e5:2f:65:05:3f:40:31:f0:
9c:04:d8:4a:32:4c:2d:96:12:fa:4d:e5:69:d2:ac:dd:4d:76:
15:a0:a2:c9:95:df:e4:45:72:f5:d5:c0:a7:46:99:f3:be:55:
8f:9b:54:60
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUF8JpBznrwNs7lJiWrc9Cof1Y0tYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDI0MkJFRkFCN0ZEOUU3NzJGQjE2ODQ3QzU0MDMzMTM4
NEVFMTAyNDAeFw0yNjA1MDMwMzEwMjhaFw0yNzA1MDIwMzE1MjhaMDMxMTAvBgNV
BAMTKEVFMEYzRTQ3MEQwMjhCOUUwM0ZGNDNBQUREODZGRDM1NzYzOUZGRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIl0H672QTeMSbxfXcG2PWqL7k
pwX4/GKWI412uuRjTtPSnAfHoymT2zBGEWRmWjVZQZLNAG9sz0ndkqQT5aQEju8R
DFWfUN3PZQ4qOhY8AgvRZOmsqk0hm3AsiawXiLBaBfNWdaAZO9012+jyGPdgvvg7
UsFVowEuoS7imJ3wCj0j2JzQ+qVaGs+QFUtl5ZVsmHGWRm/vLaJ08ONHJ59KtZty
vNENVxrAte83WUNBQDwy4pKLulGePQCO9xyBx5EK7fgqOXGKd9k/4bgcVrBpICVz
eJ3PIdEs5QlHH/T5p25wcExY9/WSnKNGuSNghxgLj0km3OLOYX8ylgH1FyRbAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU7g8+Rw0Ci54D/0Oq3Yb9NXY5//MwHwYDVR0j
BBgwFoAUQkK++rf9nncvsWhHxUAzE4TuECQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZWJiZmU3NzYtMDBhMy00Nzc2LWJmM2YtNTIxMTk0NjEwMWMzLzAvNDI0MkJFRkFC
N0ZEOUU3NzJGQjE2ODQ3QzU0MDMzMTM4NEVFMTAyNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80MjQyQkVGQUI3RkQ5RTc3MkZCMTY4NDdDNTQwMzMxMzg0RUUx
MDI0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2ViYmZlNzc2LTAwYTMtNDc3Ni1i
ZjNmLTUyMTE5NDYxMDFjMy8wLzMyMzAzMjJlMzEzODMyMmUzMTM3MzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTM4MzQzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyrauMA0GCSqG
SIb3DQEBCwUAA4IBAQCaF8DJKgTcG1nuqNwE/oFwZoEtlEtZrI/zOhrt4yesGPci
m04OfNkGTwaElnsufp+aGnd+GiWj3mODqhW1YcTq+Hcq2yXbkYkKLoStMQSkJqov
eKVVJy6xeJvEhX6JLc/ZiZHNeSq6jQbiXbtbdHGX5+Fz2e/y5pN95XOsSUsL0CrZ
sA3m5VC9RbDRKBpd9n9UZ92DiJJuammqnoCQvGZE0SJupDd1zprdfEYgfvCVxh7Y
ZzI+VzZUX3BByltXNE8xXsfgKYAqhE7WuaD6t/HY5S9lBT9AMfCcBNhKMkwtlhL6
TeVp0qzdTXYVoKLJld/kRXL11cCnRpnzvlWPm1Rg
-----END CERTIFICATE-----
Generated at Wed May 13 02:59:40 2026 by rpki-client