
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31342e302f32342d3234203d3e203338373738.roa
File: 3230322e3134382e31342e302f32342d3234203d3e203338373738.roa (raw, json)
Hash identifier: mSdoEaUmW+sBq++KL+mJrCNdIpXRWsiz5ZxBPSUhtxw=
Subject key identifier: C9:C2:70:80:04:E8:3D:85:34:68:B0:B8:2C:13:BC:5F:6E:82:FF:F9
Certificate issuer: /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial: 37288C21E0C59E862AD023CD62B2C5FF66489E65
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31342e302f32342d3234203d3e203338373738.roa
Signing time: Sun 03 May 2026 03:17:18 +0000
ROA not before: Sun 03 May 2026 03:12:18 +0000
ROA not after: Sun 02 May 2027 03:17:18 +0000
asID: 38778
IP address blocks: 202.148.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:28:8c:21:e0:c5:9e:86:2a:d0:23:cd:62:b2:c5:ff:66:48:9e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Validity
Not Before: May 3 03:12:18 2026 GMT
Not After : May 2 03:17:18 2027 GMT
Subject: CN=C9C2708004E83D853468B0B82C13BC5F6E82FFF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e9:b7:1f:74:9e:fe:29:01:28:bf:f1:ef:59:
43:d7:99:8f:b8:14:8a:01:ef:7f:a0:6a:86:8e:2c:
eb:ce:28:f0:4a:a2:75:c5:d8:2a:41:53:e0:04:cf:
96:8b:be:91:ad:5a:5d:a0:22:be:f7:19:a3:74:e7:
ed:21:63:8d:54:34:95:d4:d2:8e:4b:c6:63:e7:c3:
fe:a6:22:4c:e6:9b:69:dd:cd:8c:30:be:21:e6:0f:
84:85:b9:66:94:75:ab:2b:91:fe:7f:a3:fc:7a:c1:
e5:f6:5f:4e:6d:ab:94:d8:30:e7:45:90:6a:52:9f:
ef:78:86:32:4e:7e:f4:dd:c6:e4:ce:f0:e6:3b:83:
b6:0c:38:30:55:05:47:2d:dc:b9:8c:27:34:3e:bc:
46:ad:4b:7d:9a:e9:c9:08:bd:60:af:c2:69:70:b0:
9b:e4:4f:35:d8:91:88:7c:c8:50:58:73:55:f2:02:
f2:0b:97:12:6a:84:05:3c:5a:01:2a:30:4c:f5:33:
b8:54:b4:cb:19:96:f2:5e:35:9f:d8:e3:18:15:a7:
4e:ed:68:dd:61:c1:31:87:d5:94:f9:61:d0:ea:25:
9d:4a:f0:2c:41:56:00:b1:01:17:73:85:63:ef:18:
f0:69:68:f3:65:f1:44:7a:71:21:63:75:6f:1d:07:
60:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C2:70:80:04:E8:3D:85:34:68:B0:B8:2C:13:BC:5F:6E:82:FF:F9
X509v3 Authority Key Identifier:
keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31342e302f32342d3234203d3e203338373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.148.14.0/24
Signature Algorithm: sha256WithRSAEncryption
01:5f:be:ff:89:f4:e6:1c:f6:bd:c3:1d:67:4d:be:3b:ac:1f:
82:bc:e9:d1:e5:e5:bf:60:01:0b:3f:45:00:e1:60:3e:00:60:
5e:1a:8d:73:94:76:9a:db:d0:14:b9:97:fa:70:57:d0:54:e6:
39:31:92:09:90:90:af:eb:b2:02:6e:1a:81:85:28:b5:d7:e8:
29:4a:dc:c6:5d:c9:0d:a6:d4:ec:6a:2c:1a:e7:4c:f2:89:46:
83:46:ea:a6:f0:00:fe:0f:e4:11:b2:79:cc:b2:8c:b6:b2:01:
f7:8e:91:a2:2e:b2:fb:c3:b8:3e:b9:dd:fe:3f:ca:08:78:b2:
fd:f0:d1:d6:db:df:71:37:0e:19:10:9a:22:27:95:85:3a:58:
f9:e2:c1:e4:5d:fe:3f:5b:d0:6e:54:9c:f3:2a:29:83:e0:03:
e6:41:53:a1:79:10:7e:75:6d:9b:fd:a0:83:f4:45:24:3b:25:
07:12:1d:e0:60:8a:3c:65:87:db:b9:e0:ae:a5:b0:8b:9f:40:
5d:cb:e0:dc:c1:36:4d:fa:07:4c:0a:2d:79:bd:7a:b9:62:a2:
9d:92:ca:44:26:6e:c1:b6:7a:43:0a:76:49:37:70:aa:07:05:
bd:be:ee:58:e0:66:af:66:74:6c:2f:3e:87:45:a5:ea:55:d8:
9b:e6:82:d5
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUNyiMIeDFnoYq0CPNYrLF/2ZInmUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNCMDgwMjNCQjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1
OUNFRThBMzAeFw0yNjA1MDMwMzEyMThaFw0yNzA1MDIwMzE3MThaMDMxMTAvBgNV
BAMTKEM5QzI3MDgwMDRFODNEODUzNDY4QjBCODJDMTNCQzVGNkU4MkZGRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz6bcfdJ7+KQEov/HvWUPXmY+4
FIoB73+gaoaOLOvOKPBKonXF2CpBU+AEz5aLvpGtWl2gIr73GaN05+0hY41UNJXU
0o5LxmPnw/6mIkzmm2ndzYwwviHmD4SFuWaUdasrkf5/o/x6weX2X05tq5TYMOdF
kGpSn+94hjJOfvTdxuTO8OY7g7YMODBVBUct3LmMJzQ+vEatS32a6ckIvWCvwmlw
sJvkTzXYkYh8yFBYc1XyAvILlxJqhAU8WgEqMEz1M7hUtMsZlvJeNZ/Y4xgVp07t
aN1hwTGH1ZT5YdDqJZ1K8CxBVgCxARdzhWPvGPBpaPNl8UR6cSFjdW8dB2ATAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUycJwgAToPYU0aLC4LBO8X26C//kwHwYDVR0j
BBgwFoAULLCAI7tCiuTQJyfJawacX1nO6KMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjM0ZWNjNDAtNmI4NC00OWU4LWI2MGItNmU5OTA0MTI4Y2E4LzAvMkNCMDgwMjNC
QjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1OUNFRThBMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yQ0IwODAyM0JCNDI4QUU0RDAyNzI3Qzk2QjA2OUM1RjU5Q0VF
OEEzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i
NjBiLTZlOTkwNDEyOGNhOC8wLzMyMzAzMjJlMzEzNDM4MmUzMTM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM3MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMqUDjANBgkqhkiG
9w0BAQsFAAOCAQEAAV++/4n05hz2vcMdZ02+O6wfgrzp0eXlv2ABCz9FAOFgPgBg
XhqNc5R2mtvQFLmX+nBX0FTmOTGSCZCQr+uyAm4agYUotdfoKUrcxl3JDabU7Gos
GudM8olGg0bqpvAA/g/kEbJ5zLKMtrIB946Roi6y+8O4Prnd/j/KCHiy/fDR1tvf
cTcOGRCaIieVhTpY+eLB5F3+P1vQblSc8yopg+AD5kFToXkQfnVtm/2gg/RFJDsl
BxId4GCKPGWH27ngrqWwi59AXcvg3ME2TfoHTAoteb16uWKinZLKRCZuwbZ6Qwp2
STdwqgcFvb7uWOBmr2Z0bC8+h0Wl6lXYm+aC1Q==
-----END CERTIFICATE-----
Generated at Wed May 13 01:45:05 2026 by rpki-client