
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32342e302f32332d3233203d3e203338373738.roa
File: 3230322e3134382e32342e302f32332d3233203d3e203338373738.roa (raw, json)
Hash identifier: CHbQldV6XhPMMFrtFvUnOizSdYOtK08ZMi6ggzTfoYo=
Subject key identifier: B8:18:B1:71:F9:E5:84:6B:6C:57:5C:96:76:E3:CE:3C:C8:FD:6D:A7
Certificate issuer: /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial: 5CEEC21A98BC3C246F52DE5B246AA6DCAE5E3844
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32342e302f32332d3233203d3e203338373738.roa
Signing time: Sun 03 May 2026 03:17:12 +0000
ROA not before: Sun 03 May 2026 03:12:12 +0000
ROA not after: Sun 02 May 2027 03:17:12 +0000
asID: 38778
IP address blocks: 202.148.24.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 06:11:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:ee:c2:1a:98:bc:3c:24:6f:52:de:5b:24:6a:a6:dc:ae:5e:38:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Validity
Not Before: May 3 03:12:12 2026 GMT
Not After : May 2 03:17:12 2027 GMT
Subject: CN=B818B171F9E5846B6C575C9676E3CE3CC8FD6DA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0c:ea:60:1c:09:1f:0d:d5:ec:8e:56:e5:96:
31:9e:44:de:32:cc:66:c6:d2:3c:07:5f:b4:3f:63:
17:1c:28:f8:95:f0:59:3c:b4:a7:ed:d0:d6:85:01:
64:3c:b1:4c:ca:83:59:17:76:0c:ef:be:a5:42:ab:
ee:39:d1:0a:96:a6:7d:c9:69:86:da:d8:d5:72:c4:
2d:dc:cf:b3:92:be:7a:c8:b4:b4:f5:f7:49:7b:eb:
45:5e:89:b7:18:33:17:71:76:74:19:05:1f:f4:80:
d9:47:ff:45:f7:49:5f:d5:92:6e:a7:64:ab:82:21:
f6:97:50:15:4c:eb:1d:7f:de:89:a7:48:fd:c1:9c:
2d:3d:00:b7:6d:bf:76:dc:29:1e:dd:91:53:03:e4:
c6:d0:fe:e2:90:96:cb:d5:d7:e9:6a:aa:0a:76:08:
33:ca:dc:32:1f:f5:13:cf:b2:42:db:24:09:c4:58:
a1:82:09:79:bc:72:b7:7a:4f:e4:fd:6d:30:1f:9b:
21:04:8e:75:77:f7:a2:62:f4:3e:a3:db:ff:b0:59:
d3:7d:fb:2d:61:05:27:ba:21:26:1d:48:7b:be:06:
0e:4b:d7:82:80:1f:15:04:73:7b:f4:84:45:a2:e7:
ba:5f:34:37:07:9e:fc:c1:7c:72:99:e6:b3:28:35:
7c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:18:B1:71:F9:E5:84:6B:6C:57:5C:96:76:E3:CE:3C:C8:FD:6D:A7
X509v3 Authority Key Identifier:
keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32342e302f32332d3233203d3e203338373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.148.24.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:5a:b6:b2:75:12:15:95:b7:b5:df:3f:a8:92:e4:7a:a3:a4:
cd:a7:48:cb:ad:a3:d3:ed:84:55:42:25:5d:db:f0:01:a1:df:
1c:7f:53:85:5f:74:7f:77:b4:ba:54:d3:e4:7b:08:86:84:8c:
a8:03:cb:28:6b:d0:24:b9:b5:96:89:e0:c6:ac:e9:ca:e6:5c:
a6:08:b9:ae:93:ee:cc:b5:f6:1d:c9:89:68:80:93:ec:c3:b9:
e7:58:69:ba:03:3c:3e:df:18:6f:7b:44:7b:4e:da:79:06:3c:
92:98:fe:71:e6:0e:cf:f7:f4:9f:9d:a3:88:a4:86:9c:f2:02:
34:2a:8a:eb:96:b1:19:2d:18:a7:c1:d0:d3:ee:1a:8f:df:3c:
92:e6:79:31:0e:2a:be:df:b8:a8:36:88:08:9e:3e:3e:cd:9e:
59:15:93:06:23:36:79:6a:fc:36:b6:53:c8:c0:bc:6d:d8:32:
13:1b:eb:eb:a8:7d:72:34:3f:3e:de:fb:8b:17:4d:2b:74:6a:
08:e9:e8:5b:ec:f3:dd:53:52:35:26:ec:86:c8:f5:8e:45:74:
fe:a0:c3:bb:df:ae:d5:12:ff:bd:6a:d4:90:9d:7a:10:47:47:
9b:1f:ec:a1:18:c7:85:45:56:5f:fb:37:25:b1:eb:3a:60:24:
21:d9:f5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:53 2026 by rpki-client