
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31332e302f32342d3234203d3e203338373738.roa
File: 3230322e3134382e31332e302f32342d3234203d3e203338373738.roa (raw, json)
Hash identifier: TtTzTywntsGABMQxulJ5UEDsuVR+LYIrRSqNMKEDw5c=
Subject key identifier: E5:01:63:F7:42:C2:8D:43:F4:F0:85:2C:34:2F:D5:77:27:F8:D8:94
Certificate issuer: /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial: 76A1ABE41A32898CC3FD61B06EC4FB9E3ED40E89
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31332e302f32342d3234203d3e203338373738.roa
Signing time: Sun 03 May 2026 03:17:19 +0000
ROA not before: Sun 03 May 2026 03:12:19 +0000
ROA not after: Sun 02 May 2027 03:17:19 +0000
asID: 38778
IP address blocks: 202.148.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:40:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:a1:ab:e4:1a:32:89:8c:c3:fd:61:b0:6e:c4:fb:9e:3e:d4:0e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Validity
Not Before: May 3 03:12:19 2026 GMT
Not After : May 2 03:17:19 2027 GMT
Subject: CN=E50163F742C28D43F4F0852C342FD57727F8D894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0e:09:3c:1e:5c:8f:19:f4:d2:34:25:af:ab:
a1:ca:b4:a8:b2:58:07:44:11:ef:c2:39:4b:57:c4:
68:aa:85:6f:02:f0:d5:d3:4d:00:9f:36:9a:f5:b1:
64:75:ee:42:e3:93:04:3c:e5:ad:33:86:2f:b7:6e:
93:0f:47:d4:67:b4:42:aa:66:f5:af:e9:4d:ae:51:
fa:3f:b3:c9:59:0a:ed:b5:53:c9:f9:53:db:fc:fe:
d8:f0:fd:fa:8b:d1:46:0d:3d:9a:df:52:5b:0f:6f:
68:e9:c6:89:ba:f9:1d:51:99:17:1f:ab:3b:48:96:
a4:5e:a2:8d:00:a8:dd:11:57:5d:e2:63:11:69:00:
56:df:30:57:09:5d:30:7a:ad:a7:41:dc:fe:e0:a1:
c4:de:b6:93:4e:89:b0:f2:37:76:40:e8:96:db:ab:
24:fc:34:33:4c:52:cc:03:83:3e:36:a1:e2:8a:61:
98:8c:b3:f9:5a:3e:df:b6:61:01:de:b8:90:98:25:
6c:48:d8:88:35:47:ba:c0:83:54:10:80:62:b4:bf:
d7:37:81:d9:ab:1a:63:4e:7b:bd:4f:fd:18:3c:8e:
46:35:65:af:5f:42:5c:8e:f8:30:d8:cb:6d:60:8a:
0b:b4:7b:05:4b:18:e5:fe:71:c6:9b:58:56:a8:2b:
37:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:01:63:F7:42:C2:8D:43:F4:F0:85:2C:34:2F:D5:77:27:F8:D8:94
X509v3 Authority Key Identifier:
keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31332e302f32342d3234203d3e203338373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.148.13.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:dc:5e:f5:a4:f1:c9:01:81:89:24:bb:5d:ae:f9:a1:35:b6:
73:ba:d1:3b:89:25:6e:32:6f:f1:db:66:6a:cf:8e:ec:2c:e3:
a4:23:1f:d1:c9:21:e3:76:14:e2:d1:d5:e3:01:fe:58:39:9a:
c4:e6:db:09:f8:11:26:d3:9a:62:b0:2d:42:68:45:44:8f:42:
fc:ae:3f:54:61:65:cc:15:0f:8f:77:44:c8:d8:63:21:df:f9:
c5:29:1d:40:74:a4:17:25:1f:7e:1a:82:27:ab:66:1e:d5:7e:
64:91:66:00:9b:df:ff:d1:cf:78:bd:a8:d5:ca:1f:04:a2:9a:
12:cc:91:dc:f6:ee:2e:ec:17:dd:8c:dd:4f:2d:4f:6c:5c:04:
5f:fe:6b:d8:43:d7:8e:4a:a6:1c:3c:9f:0f:36:38:a4:f0:4a:
3c:a4:dc:76:58:53:f5:7e:17:44:f5:c1:c9:0c:8f:d3:c7:04:
bc:d8:f0:03:b5:f4:0b:71:22:2d:e5:5e:ea:47:d8:ce:1a:d1:
6c:b7:bf:7c:8c:91:7b:72:05:79:68:a3:00:3f:59:e5:ef:14:
4b:d4:6b:ad:95:f8:ac:89:72:f5:cc:7f:63:4c:b9:d9:fd:04:
9c:21:ed:b7:ad:a8:20:99:a6:d0:58:5e:f5:7b:0a:4b:df:6b:
f9:ee:ec:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:58:52 2026 by rpki-client