
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31302e302f32342d3234203d3e203338373738.roa
File: 3230322e3134382e31302e302f32342d3234203d3e203338373738.roa (raw, json)
Hash identifier: JbMCmfPPv1jeOf06miq9hZ8urzr+xYgZdMiX1OGgffw=
Subject key identifier: DA:DD:36:3A:22:2E:F6:47:D1:02:1A:F3:26:8D:26:E3:87:47:FF:59
Certificate issuer: /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial: 4712F6A49667CC567C07DEC2D7C23BA9721F34CC
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31302e302f32342d3234203d3e203338373738.roa
Signing time: Sun 03 May 2026 03:17:14 +0000
ROA not before: Sun 03 May 2026 03:12:14 +0000
ROA not after: Sun 02 May 2027 03:17:14 +0000
asID: 38778
IP address blocks: 202.148.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:40:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:12:f6:a4:96:67:cc:56:7c:07:de:c2:d7:c2:3b:a9:72:1f:34:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Validity
Not Before: May 3 03:12:14 2026 GMT
Not After : May 2 03:17:14 2027 GMT
Subject: CN=DADD363A222EF647D1021AF3268D26E38747FF59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6a:d1:52:51:00:c6:c7:17:2d:74:3a:7e:85:
54:4c:7d:9a:2e:01:78:df:7a:68:b0:24:8b:42:ed:
1d:10:d0:b3:aa:43:70:ba:76:c2:28:44:82:d5:0d:
0d:08:c0:43:60:67:df:f4:e9:84:f3:96:07:25:9f:
1b:e6:34:1d:32:08:9d:0a:30:0b:61:ed:d9:b5:5a:
00:2b:e0:c1:2d:48:51:d1:16:0c:13:b1:ea:41:93:
d8:fb:74:17:2d:1b:92:72:64:df:94:9c:4b:be:6c:
63:58:09:03:a6:51:29:11:6b:4c:a8:f4:48:a9:20:
47:16:53:d7:b7:31:32:ad:28:7b:62:81:73:ab:06:
ba:37:52:6a:55:ae:19:95:c9:98:34:19:15:6d:87:
3f:30:b9:79:7b:fe:7b:02:70:3d:c0:d9:e4:57:71:
91:1d:84:1f:fe:ec:8e:cc:eb:98:d5:bf:19:ad:d2:
a5:49:73:72:40:70:b6:02:58:f4:6e:bc:08:84:6c:
3b:5d:0b:61:d0:b9:78:91:33:6a:22:c7:fc:4d:48:
ab:7e:70:d5:5c:3b:ae:0e:21:53:35:ce:58:55:d1:
8a:12:c9:3f:e3:49:3e:0c:9e:f1:16:6e:15:d8:d6:
09:d8:24:05:9e:0f:2c:00:cd:e2:3f:f1:c2:6f:59:
07:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DD:36:3A:22:2E:F6:47:D1:02:1A:F3:26:8D:26:E3:87:47:FF:59
X509v3 Authority Key Identifier:
keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31302e302f32342d3234203d3e203338373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.148.10.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:4e:a1:4f:19:b4:67:75:6c:60:99:63:55:92:f8:ee:d4:2a:
1e:ef:39:d3:0a:02:8a:94:e7:b9:d5:52:d8:f0:d2:c2:a5:ec:
6e:f8:7a:ad:86:ff:db:67:46:ec:ba:33:02:94:3d:63:de:fc:
f8:5f:ab:c6:60:77:e0:e1:36:c2:21:2a:75:11:da:54:19:03:
7e:ff:21:09:80:15:f5:a0:6e:e7:92:59:11:58:3c:56:b9:59:
d7:a1:24:7f:c1:3e:b9:bd:b5:59:99:70:d6:24:32:ea:26:7f:
4a:2f:dc:25:a8:ea:aa:67:80:9b:d1:93:2c:3e:5d:4c:2d:ca:
b0:91:c2:da:43:7e:71:81:f4:b9:09:81:0e:86:49:27:82:71:
ea:74:a5:08:ac:69:49:2e:32:8e:4e:8a:97:7c:eb:06:3d:33:
84:4a:82:1b:85:76:3b:2f:a9:3d:0d:59:1b:db:17:02:08:70:
bd:90:78:ab:10:e6:02:f9:67:76:20:83:3f:7a:05:e7:07:13:
cf:d3:fc:f0:de:bc:62:ef:83:9a:85:e7:9f:be:84:65:e4:4f:
b4:06:f0:93:16:2a:c3:03:bd:76:13:f0:db:2b:fe:89:df:bc:
13:c3:46:b0:20:c0:db:31:85:7c:77:45:10:1d:dc:5b:47:a9:
73:93:d1:fa
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIURxL2pJZnzFZ8B97C18I7qXIfNMwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNCMDgwMjNCQjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1
OUNFRThBMzAeFw0yNjA1MDMwMzEyMTRaFw0yNzA1MDIwMzE3MTRaMDMxMTAvBgNV
BAMTKERBREQzNjNBMjIyRUY2NDdEMTAyMUFGMzI2OEQyNkUzODc0N0ZGNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLatFSUQDGxxctdDp+hVRMfZou
AXjfemiwJItC7R0Q0LOqQ3C6dsIoRILVDQ0IwENgZ9/06YTzlgclnxvmNB0yCJ0K
MAth7dm1WgAr4MEtSFHRFgwTsepBk9j7dBctG5JyZN+UnEu+bGNYCQOmUSkRa0yo
9EipIEcWU9e3MTKtKHtigXOrBro3UmpVrhmVyZg0GRVthz8wuXl7/nsCcD3A2eRX
cZEdhB/+7I7M65jVvxmt0qVJc3JAcLYCWPRuvAiEbDtdC2HQuXiRM2oix/xNSKt+
cNVcO64OIVM1zlhV0YoSyT/jST4MnvEWbhXY1gnYJAWeDywAzeI/8cJvWQdJAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU2t02OiIu9kfRAhrzJo0m44dH/1kwHwYDVR0j
BBgwFoAULLCAI7tCiuTQJyfJawacX1nO6KMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjM0ZWNjNDAtNmI4NC00OWU4LWI2MGItNmU5OTA0MTI4Y2E4LzAvMkNCMDgwMjNC
QjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1OUNFRThBMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yQ0IwODAyM0JCNDI4QUU0RDAyNzI3Qzk2QjA2OUM1RjU5Q0VF
OEEzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i
NjBiLTZlOTkwNDEyOGNhOC8wLzMyMzAzMjJlMzEzNDM4MmUzMTMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM3MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMqUCjANBgkqhkiG
9w0BAQsFAAOCAQEATk6hTxm0Z3VsYJljVZL47tQqHu850woCipTnudVS2PDSwqXs
bvh6rYb/22dG7LozApQ9Y978+F+rxmB34OE2wiEqdRHaVBkDfv8hCYAV9aBu55JZ
EVg8VrlZ16Ekf8E+ub21WZlw1iQy6iZ/Si/cJajqqmeAm9GTLD5dTC3KsJHC2kN+
cYH0uQmBDoZJJ4Jx6nSlCKxpSS4yjk6Kl3zrBj0zhEqCG4V2Oy+pPQ1ZG9sXAghw
vZB4qxDmAvlndiCDP3oF5wcTz9P88N68Yu+DmoXnn76EZeRPtAbwkxYqwwO9dhPw
2yv+id+8E8NGsCDA2zGFfHdFEB3cW0epc5PR+g==
-----END CERTIFICATE-----
Generated at Wed May 13 03:52:11 2026 by rpki-client