
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31322e302f32342d3234203d3e203338373738.roa
File: 3230322e3134382e31322e302f32342d3234203d3e203338373738.roa (raw, json)
Hash identifier: zvya9RG3V743SVtp9rZ4Sh6NiDSzPuqzoARdHaPlxn0=
Subject key identifier: F9:2F:3F:8D:0C:91:2E:B1:6B:AC:07:25:46:1E:62:B5:91:80:DF:F2
Certificate issuer: /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial: 7F572537C0DAAFE4DA186C6915BC034F1035288D
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31322e302f32342d3234203d3e203338373738.roa
Signing time: Sun 03 May 2026 03:17:11 +0000
ROA not before: Sun 03 May 2026 03:12:11 +0000
ROA not after: Sun 02 May 2027 03:17:11 +0000
asID: 38778
IP address blocks: 202.148.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:40:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:57:25:37:c0:da:af:e4:da:18:6c:69:15:bc:03:4f:10:35:28:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Validity
Not Before: May 3 03:12:11 2026 GMT
Not After : May 2 03:17:11 2027 GMT
Subject: CN=F92F3F8D0C912EB16BAC0725461E62B59180DFF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3f:a5:82:09:0c:ef:3b:18:97:5d:cc:76:6b:
33:eb:03:9a:3e:a4:10:65:40:f0:15:95:e5:9d:d5:
72:6d:48:5b:33:15:b5:6f:6c:97:b6:42:69:5f:4b:
61:5b:fa:e8:74:78:30:85:53:4a:19:71:70:0d:f7:
e1:61:42:24:71:00:3e:83:83:1b:2b:3f:68:b7:e4:
01:31:3c:94:7a:9f:e8:2d:06:dd:58:82:ac:46:d7:
2f:b1:e0:b1:15:f8:4e:16:c3:ab:a8:75:b1:c4:3a:
69:61:d7:7b:46:12:47:40:0c:59:a2:b3:1e:b6:0f:
d9:bc:21:7a:fd:ad:7c:4c:0a:9c:7c:08:40:31:10:
2d:7e:9d:85:89:c4:c2:50:ad:40:39:e3:c4:b1:58:
1e:ea:1f:9b:60:49:af:22:18:2d:ae:d2:4a:90:b5:
20:90:7c:91:b2:cb:2a:cf:21:83:69:db:58:ac:d7:
60:24:d2:0d:7f:ab:38:6a:9f:ae:21:9e:8e:4e:89:
b5:47:15:00:6c:5a:e1:48:5a:9d:d3:74:66:ba:0a:
7f:74:bf:a4:43:af:14:09:3d:ce:7e:0b:c0:da:23:
71:0e:54:60:2a:1a:ef:24:66:96:11:85:b1:6d:75:
94:ed:4c:19:ef:a4:cc:0e:09:c1:6b:49:49:7f:32:
97:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2F:3F:8D:0C:91:2E:B1:6B:AC:07:25:46:1E:62:B5:91:80:DF:F2
X509v3 Authority Key Identifier:
keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31322e302f32342d3234203d3e203338373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.148.12.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:cf:76:97:d7:87:c3:3a:84:aa:a9:14:fe:16:be:9a:32:54:
1d:41:30:65:7c:7e:a5:b1:c0:14:eb:92:92:d0:e0:98:03:de:
4f:45:b0:e3:86:9f:75:bb:11:c9:3e:55:e1:82:27:55:8c:66:
b0:af:5d:73:56:a8:d9:fc:d5:57:c0:49:52:85:5e:fc:19:98:
6b:8d:ff:f4:dc:14:4a:e1:e2:3c:04:37:9a:c5:a8:67:13:77:
c1:6b:8c:e4:74:8d:8e:78:b7:38:eb:62:f9:09:3b:2c:1d:30:
b2:4b:47:a0:c4:62:d4:08:12:88:b0:26:6d:bb:d2:4d:ea:db:
1c:30:88:13:f8:4f:57:b1:59:ff:dd:9b:65:d4:d1:44:50:e2:
2e:25:14:2a:f9:ad:2e:66:75:58:ac:2b:d7:ff:27:63:d4:f5:
7b:5b:59:91:27:44:d1:4a:a8:4c:3d:e3:55:15:c8:1c:6a:61:
55:ea:92:6c:34:34:0f:b7:c9:7b:06:ca:8d:ff:fb:e5:9f:5d:
3b:10:ac:0a:0c:eb:0c:5c:80:fe:e2:3e:60:c4:7c:fb:63:b0:
b3:b9:f2:84:7a:36:93:cf:b9:cd:28:b3:35:71:0e:e7:e9:32:
14:e8:c0:77:52:de:21:9c:3b:40:12:bc:58:78:f1:9a:2e:f7:
6e:76:8b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:13 2026 by rpki-client