
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31392e302f32342d3234203d3e2039373934.roa
File: 3230322e3134382e31392e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier: 0wiNuueekwE4cMj+v9aajzLQJbLi4Qfd2pHbAMWAFrE=
Subject key identifier: 68:2B:EC:6E:75:4F:C9:08:FE:AD:DA:42:10:8A:11:3A:F7:D5:B9:A5
Certificate issuer: /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial: 44289A7F90369BA549BD339DECF255AA5D3379D7
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31392e302f32342d3234203d3e2039373934.roa
Signing time: Sun 03 May 2026 03:17:05 +0000
ROA not before: Sun 03 May 2026 03:12:05 +0000
ROA not after: Sun 02 May 2027 03:17:05 +0000
asID: 9794
IP address blocks: 202.148.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:40:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:28:9a:7f:90:36:9b:a5:49:bd:33:9d:ec:f2:55:aa:5d:33:79:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Validity
Not Before: May 3 03:12:05 2026 GMT
Not After : May 2 03:17:05 2027 GMT
Subject: CN=682BEC6E754FC908FEADDA42108A113AF7D5B9A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:33:16:95:59:15:2a:88:95:7d:ca:2b:b0:f6:
76:d2:b0:1c:5a:7f:f5:1c:7a:91:b2:d6:57:c2:68:
8c:17:ea:88:39:6f:7e:ea:56:84:1c:5e:e3:61:70:
85:9b:ed:08:14:41:67:35:b0:a2:fc:90:38:30:68:
bf:9b:1c:ef:da:08:80:97:39:0b:90:6a:f5:6a:37:
d5:5b:66:de:67:b8:2a:3c:bb:4d:23:04:ee:39:33:
5f:c6:6a:78:3e:b3:f4:04:14:ce:1c:d6:96:0c:28:
ea:f4:e7:df:14:32:c0:6d:b9:fa:72:79:1e:5a:5c:
a8:12:b3:dd:8a:f4:f5:94:8b:44:0b:d5:8e:90:f2:
3a:e9:70:8a:85:46:96:7d:72:74:5f:20:b6:b7:e2:
48:74:18:99:0f:fc:f7:85:17:4b:34:c1:dd:99:72:
bc:de:63:f1:11:c1:f6:29:58:8d:d4:2f:0b:09:b0:
a7:4d:1a:f5:1c:fd:c2:3b:c5:ac:6e:08:c7:ea:a9:
84:34:4a:2d:80:cd:19:7c:93:fd:42:18:b6:41:dd:
67:09:d4:cf:76:16:67:ee:98:5d:12:d9:99:50:55:
3e:74:cf:29:d2:1d:a6:43:db:d0:ea:a9:7f:a8:e5:
d8:58:5a:db:cb:fb:af:8b:dc:cd:6f:73:37:63:dd:
1f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2B:EC:6E:75:4F:C9:08:FE:AD:DA:42:10:8A:11:3A:F7:D5:B9:A5
X509v3 Authority Key Identifier:
keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31392e302f32342d3234203d3e2039373934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.148.19.0/24
Signature Algorithm: sha256WithRSAEncryption
50:a6:32:ec:01:fe:cf:ec:78:8a:06:75:c1:8e:39:69:fc:4f:
b9:25:96:25:6d:7c:8d:02:a0:9f:47:f6:ad:98:bd:fd:6d:1a:
97:1d:35:30:b5:3c:bb:8f:e6:f5:7e:c2:34:e8:5d:d3:ad:8e:
8f:0b:9f:67:55:08:48:9a:aa:ea:82:fc:e4:3a:22:15:ce:bb:
26:2b:b5:0a:a3:7a:04:6d:5a:cb:e6:9b:f5:6e:2b:3a:27:3c:
3a:9a:76:a7:e5:d8:a2:90:61:5b:bb:d6:b9:52:17:0f:5f:3c:
b2:93:2d:7b:d0:1c:6a:55:0c:7b:38:84:b5:c6:ce:6e:ff:d0:
44:93:b2:20:66:25:e0:5e:48:40:e7:1d:35:58:13:ea:df:3f:
3c:ed:52:38:a1:e9:e7:06:b8:69:63:21:23:7f:d5:fa:8b:ac:
d3:23:2b:e1:90:93:9d:2d:b8:ea:36:5d:56:b4:36:66:39:f3:
25:ca:10:0f:b7:f5:96:76:7a:21:f9:7b:bd:ce:9b:30:01:27:
ec:21:9e:88:ee:a5:1a:16:ec:b3:5b:66:d5:cf:ec:1a:46:42:
68:d6:9d:ad:68:3d:12:6c:ab:78:1d:8f:1c:38:f0:1d:af:66:
03:cf:e3:84:29:08:9c:e0:e0:d3:aa:54:82:0f:7d:d0:55:33:
5a:3d:da:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:56:36 2026 by rpki-client