
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32322e302f32342d3234203d3e2039373934.roa
File: 3230322e3134382e32322e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier: iz+F/oJwGdmLeKtK5UPOiVSZmPF8RcJtQ7wdQgfa9XM=
Subject key identifier: 6D:83:6B:76:77:CE:59:91:90:E6:B2:08:DB:78:4E:FB:AF:ED:1F:9A
Certificate issuer: /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial: 6CC4A8B972F63BA263CF340980A26556DC663D59
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32322e302f32342d3234203d3e2039373934.roa
Signing time: Sun 03 May 2026 03:17:05 +0000
ROA not before: Sun 03 May 2026 03:12:05 +0000
ROA not after: Sun 02 May 2027 03:17:05 +0000
asID: 9794
IP address blocks: 202.148.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:40:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:c4:a8:b9:72:f6:3b:a2:63:cf:34:09:80:a2:65:56:dc:66:3d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Validity
Not Before: May 3 03:12:05 2026 GMT
Not After : May 2 03:17:05 2027 GMT
Subject: CN=6D836B7677CE599190E6B208DB784EFBAFED1F9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:be:c7:2a:26:43:71:3e:21:fa:28:f4:49:f0:
18:7e:4a:33:d5:45:2a:d8:4b:ad:db:67:f3:f0:e0:
b6:26:fd:dd:f5:cb:41:de:5d:da:6a:48:3b:78:ec:
f1:22:7b:56:90:ff:21:cb:ad:92:ac:44:dc:35:14:
a3:6b:97:14:5b:aa:7c:49:67:9f:fb:90:e6:32:79:
25:aa:d1:eb:a0:8a:24:14:b7:64:34:dc:2f:2e:ee:
93:c7:9b:a7:1d:01:24:b5:d1:42:3d:8a:c4:56:37:
a0:af:c2:f9:5d:f0:25:a1:ce:51:2f:b5:44:fc:84:
00:22:ee:a1:6c:6d:8e:85:60:c6:5d:ad:46:12:7b:
b4:3c:a7:1d:41:bd:cb:03:4c:20:fc:33:0d:c9:15:
09:e1:9b:b9:8a:95:dd:f5:d5:53:db:32:f3:07:c5:
db:4d:6f:f0:37:ec:2a:66:73:d0:70:ad:6e:1a:8c:
ca:19:b7:d1:8d:6a:e9:98:1e:dc:3c:3b:c3:c3:8e:
6c:fc:57:bf:45:41:84:6b:45:d3:85:e0:09:92:d9:
d7:35:73:63:83:0a:ff:05:6c:b6:a8:88:56:f0:91:
1c:f3:59:de:70:c0:20:d9:74:ac:b1:25:45:03:88:
54:ac:64:fb:ae:f0:23:e5:90:b4:11:0a:e9:16:2e:
11:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:83:6B:76:77:CE:59:91:90:E6:B2:08:DB:78:4E:FB:AF:ED:1F:9A
X509v3 Authority Key Identifier:
keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32322e302f32342d3234203d3e2039373934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.148.22.0/24
Signature Algorithm: sha256WithRSAEncryption
44:cf:8d:42:12:9e:c9:48:6b:79:c3:07:43:98:47:3e:98:3f:
62:16:78:c7:11:2c:8d:53:69:b0:7b:54:16:1b:5a:b7:36:15:
1d:c0:ff:8a:a5:19:f4:61:c1:04:ad:8c:94:a3:35:d4:7a:fe:
2e:e5:21:f1:7b:37:b5:e3:f3:01:74:cf:de:02:8a:ed:68:44:
38:51:b3:37:eb:33:4d:16:4d:c0:a2:c0:33:f2:d9:73:e6:2e:
d6:f0:1e:e2:a6:0c:02:80:7d:4a:fc:3f:ad:f9:78:f7:34:8c:
55:ba:56:2a:24:86:81:04:5f:76:2f:f0:bd:67:6c:60:85:60:
e1:c1:00:67:ba:ad:70:d5:14:b2:83:3d:b3:68:c5:3e:f0:4e:
46:b6:b6:19:0b:8f:af:ce:fe:e8:94:b4:de:a9:89:e5:4a:a5:
de:69:dc:6f:06:2f:70:ed:ae:53:07:3b:15:4a:89:af:cc:a8:
ed:02:5a:dd:49:63:cc:2e:9e:10:f3:f9:33:cd:29:fa:48:93:
f8:6e:68:36:27:f5:63:78:11:24:27:31:dc:f0:ba:fd:1e:46:
71:3f:08:ad:fe:f0:cb:f4:0f:fc:5f:5a:aa:7d:0a:3d:90:27:
8a:f0:65:98:43:1f:bd:ad:21:38:ca:d1:c5:20:07:d9:98:73:
ec:61:94:74
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUbMSouXL2O6JjzzQJgKJlVtxmPVkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNCMDgwMjNCQjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1
OUNFRThBMzAeFw0yNjA1MDMwMzEyMDVaFw0yNzA1MDIwMzE3MDVaMDMxMTAvBgNV
BAMTKDZEODM2Qjc2NzdDRTU5OTE5MEU2QjIwOERCNzg0RUZCQUZFRDFGOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZvscqJkNxPiH6KPRJ8Bh+SjPV
RSrYS63bZ/Pw4LYm/d31y0HeXdpqSDt47PEie1aQ/yHLrZKsRNw1FKNrlxRbqnxJ
Z5/7kOYyeSWq0eugiiQUt2Q03C8u7pPHm6cdASS10UI9isRWN6Cvwvld8CWhzlEv
tUT8hAAi7qFsbY6FYMZdrUYSe7Q8px1BvcsDTCD8Mw3JFQnhm7mKld311VPbMvMH
xdtNb/A37Cpmc9BwrW4ajMoZt9GNaumYHtw8O8PDjmz8V79FQYRrRdOF4AmS2dc1
c2ODCv8FbLaoiFbwkRzzWd5wwCDZdKyxJUUDiFSsZPuu8CPlkLQRCukWLhHRAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUbYNrdnfOWZGQ5rII23hO+6/tH5owHwYDVR0j
BBgwFoAULLCAI7tCiuTQJyfJawacX1nO6KMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjM0ZWNjNDAtNmI4NC00OWU4LWI2MGItNmU5OTA0MTI4Y2E4LzAvMkNCMDgwMjNC
QjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1OUNFRThBMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yQ0IwODAyM0JCNDI4QUU0RDAyNzI3Qzk2QjA2OUM1RjU5Q0VF
OEEzLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i
NjBiLTZlOTkwNDEyOGNhOC8wLzMyMzAzMjJlMzEzNDM4MmUzMjMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzkzNzM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKlBYwDQYJKoZIhvcN
AQELBQADggEBAETPjUISnslIa3nDB0OYRz6YP2IWeMcRLI1TabB7VBYbWrc2FR3A
/4qlGfRhwQStjJSjNdR6/i7lIfF7N7Xj8wF0z94Ciu1oRDhRszfrM00WTcCiwDPy
2XPmLtbwHuKmDAKAfUr8P635ePc0jFW6ViokhoEEX3Yv8L1nbGCFYOHBAGe6rXDV
FLKDPbNoxT7wTka2thkLj6/O/uiUtN6pieVKpd5p3G8GL3DtrlMHOxVKia/MqO0C
Wt1JY8wunhDz+TPNKfpIk/huaDYn9WN4ESQnMdzwuv0eRnE/CK3+8Mv0D/xfWqp9
Cj2QJ4rwZZhDH72tITjK0cUgB9mYc+xhlHQ=
-----END CERTIFICATE-----
Generated at Wed May 13 04:19:22 2026 by rpki-client