
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e322e302f32342d3234203d3e2039373934.roa
File: 3230322e3134382e322e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier: tkn+4mu6eqECupRvd09R7F+vPBOOiLTlnlK2PKJ5klI=
Subject key identifier: 79:54:2D:BE:9B:86:39:58:80:50:33:1B:EA:FF:48:65:D9:8F:1E:7F
Certificate issuer: /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial: 630B912E2E1E8653CC4F204D49A9968BD1F96F99
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e322e302f32342d3234203d3e2039373934.roa
Signing time: Sun 03 May 2026 03:17:16 +0000
ROA not before: Sun 03 May 2026 03:12:16 +0000
ROA not after: Sun 02 May 2027 03:17:16 +0000
asID: 9794
IP address blocks: 202.148.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:40:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:0b:91:2e:2e:1e:86:53:cc:4f:20:4d:49:a9:96:8b:d1:f9:6f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Validity
Not Before: May 3 03:12:16 2026 GMT
Not After : May 2 03:17:16 2027 GMT
Subject: CN=79542DBE9B8639588050331BEAFF4865D98F1E7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:65:e1:41:12:30:b4:c8:93:9b:8e:4e:5b:
c0:84:4e:d9:06:d1:bb:e1:1b:c0:81:b4:db:89:ea:
f2:67:a5:dd:ea:04:c8:40:3f:e8:8c:84:fe:6d:f9:
cb:42:43:cb:ac:e7:5c:40:3a:10:85:be:3b:ad:58:
44:bf:a9:3e:4a:86:9a:f5:78:93:38:d6:8c:d8:07:
b5:e6:66:47:ae:6c:51:d3:9e:2d:8b:bb:f5:17:4b:
b2:33:74:9c:05:e7:c3:95:fd:52:7b:48:4e:44:95:
2e:3f:97:db:ac:b2:82:91:82:41:9f:f2:86:be:5f:
31:26:58:b2:67:29:2b:4c:be:10:73:0a:6a:f6:71:
31:9a:19:00:5f:62:be:c8:8d:40:11:a5:26:4a:4b:
8e:33:94:5e:72:7a:0d:bb:7e:4b:0f:dd:e5:ad:e3:
83:c2:a6:14:91:ac:fe:36:28:12:f7:ac:f8:f3:8c:
4d:ba:b0:ac:bc:f1:0a:8f:87:71:47:e3:29:73:84:
31:8e:b4:05:23:3f:ee:f0:bd:5f:8c:11:6c:7d:e3:
7a:ad:93:07:47:4e:21:68:ac:36:7b:92:90:64:03:
4c:d5:c7:13:8c:c6:57:b6:0e:1a:ba:e5:28:cd:6a:
5b:1c:6c:0b:ea:a5:9f:70:d4:fd:da:cf:30:53:66:
e5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:54:2D:BE:9B:86:39:58:80:50:33:1B:EA:FF:48:65:D9:8F:1E:7F
X509v3 Authority Key Identifier:
keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e322e302f32342d3234203d3e2039373934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.148.2.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:a0:0a:a2:85:c6:f9:4c:b2:08:3b:56:7f:cf:27:95:f6:5e:
00:da:e5:c6:c9:67:5b:83:9b:0e:93:39:cb:88:7c:08:6d:25:
dc:09:d4:20:19:92:0b:e0:91:2b:99:d7:12:eb:9c:8f:24:4a:
24:d3:8e:17:6a:d2:40:83:49:89:60:eb:c6:f2:76:00:fc:fc:
a6:cd:09:fd:40:1a:e2:bb:2b:d7:3b:89:6c:12:51:82:86:13:
2a:36:d5:51:a4:93:f3:a3:73:a4:90:0e:57:9e:4f:27:01:b4:
48:a9:80:33:9f:05:ab:c4:e9:fc:0e:6c:fd:ac:e5:13:be:a7:
8f:9a:23:c1:67:9d:70:31:37:a4:9a:5b:66:8b:12:eb:15:a8:
30:ea:43:a7:54:ca:89:98:ce:f8:d0:96:d5:76:17:30:98:08:
84:99:e2:e8:a9:68:51:22:93:b0:86:bb:38:53:f6:26:4b:db:
58:5e:f2:fe:d6:a8:7b:1a:77:88:f5:dc:72:4d:c0:78:f5:8a:
d1:38:81:b3:30:33:00:03:4d:eb:26:76:c9:c1:da:54:e2:3a:
78:7b:ee:aa:67:c4:16:96:d6:b7:5d:07:0c:d6:5b:66:3a:f8:
de:eb:18:d7:da:03:16:9e:68:3d:d7:1c:3b:7e:cc:49:a4:0d:
59:30:90:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:59:24 2026 by rpki-client