
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32332e302f32342d3234203d3e2039373934.roa
File: 3230322e3134382e32332e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier: 10Ms59k+0R8ZaNPf/HpXQDfqvyS7VLqAKfG0qAYjGXs=
Subject key identifier: D7:26:31:65:11:39:77:58:EC:9B:23:3E:39:09:F9:40:3F:21:D4:A7
Certificate issuer: /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial: 6B503A8C890B2470535D2C19EE6E75ED5E1A3ECF
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32332e302f32342d3234203d3e2039373934.roa
Signing time: Sun 03 May 2026 03:17:02 +0000
ROA not before: Sun 03 May 2026 03:12:02 +0000
ROA not after: Sun 02 May 2027 03:17:02 +0000
asID: 9794
IP address blocks: 202.148.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:40:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:50:3a:8c:89:0b:24:70:53:5d:2c:19:ee:6e:75:ed:5e:1a:3e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Validity
Not Before: May 3 03:12:02 2026 GMT
Not After : May 2 03:17:02 2027 GMT
Subject: CN=D726316511397758EC9B233E3909F9403F21D4A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0c:f9:69:6d:6b:8b:5a:49:6f:21:01:39:bc:
79:10:f0:7e:89:39:1c:e3:4d:be:74:5b:34:61:e9:
ae:f7:4d:38:3a:16:29:af:bd:6f:0d:56:88:0b:ab:
c1:34:64:de:a8:6f:a2:14:46:10:62:2f:98:3e:fa:
8b:b1:d0:df:7a:cd:2f:4f:19:a5:5a:16:99:30:7e:
41:fd:43:b5:a0:82:22:e4:64:04:49:df:5f:61:55:
1d:fd:91:e5:85:16:bc:c9:48:d0:f3:74:49:2e:96:
87:84:98:24:ab:77:90:24:92:65:f2:91:81:f3:42:
e6:ce:9a:76:42:6d:30:0f:f8:06:89:c7:96:c2:67:
31:f2:3f:eb:ff:23:16:36:56:40:11:9a:b0:e8:06:
fe:9e:36:8b:48:cb:d7:27:e6:23:2d:c4:67:c9:d2:
52:92:52:03:b2:43:96:64:4b:0d:25:9d:9b:53:1c:
93:c4:77:04:9f:54:d2:11:3a:06:17:fb:8a:0a:b1:
58:e2:a0:fa:2e:ca:20:5b:e3:f7:2a:bd:96:96:5e:
3b:2f:07:94:e8:06:a1:5d:38:e0:9a:26:1e:96:3c:
df:5e:82:a5:5b:48:e5:28:61:d9:0e:d9:e9:46:b7:
04:15:6f:a7:27:16:69:a7:a4:50:d0:06:be:d3:fd:
aa:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:26:31:65:11:39:77:58:EC:9B:23:3E:39:09:F9:40:3F:21:D4:A7
X509v3 Authority Key Identifier:
keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32332e302f32342d3234203d3e2039373934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.148.23.0/24
Signature Algorithm: sha256WithRSAEncryption
82:1d:6a:da:de:65:7a:c2:5e:5b:56:0e:4f:ab:14:89:31:00:
2a:3b:82:e2:24:b1:92:28:28:8a:a8:65:7d:a2:91:44:3d:49:
3c:2d:20:75:06:45:45:bd:30:f7:b5:33:a8:0e:5e:2d:bb:e0:
8e:50:f5:73:b9:ae:46:ba:cd:1d:32:ce:69:d2:fe:58:5d:40:
9c:93:7c:b4:0e:ee:96:2c:81:37:65:c4:49:b6:ae:8a:8f:e8:
da:f8:7a:0d:37:a7:f8:f5:d6:1a:a7:ed:f5:69:64:cd:12:f4:
a5:c8:26:ef:9a:a1:dd:b8:40:74:48:e5:3e:5e:79:e8:31:39:
d7:02:2b:25:c5:b0:71:b3:58:0b:74:5d:42:60:75:bb:76:4c:
08:1f:5d:df:f8:c8:ec:ed:44:32:75:82:20:b8:91:27:bc:c2:
8c:4e:4a:ce:60:7f:9d:15:b9:b4:62:8a:07:80:74:c9:ed:a9:
3b:94:d1:d8:ed:30:40:ab:f4:c6:fe:43:4b:10:30:d4:8e:c5:
53:b5:3f:15:bd:0f:c0:18:66:be:33:8e:10:b2:a1:dc:ba:37:
cb:3f:e7:f7:18:25:03:e3:78:9b:0c:48:3a:2b:36:e1:1b:26:
25:51:96:bb:15:f6:6e:fa:cc:70:60:b6:54:0b:82:d5:9b:03:
da:25:f5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:56:24 2026 by rpki-client