
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32372e302f32342d3234203d3e2039373934.roa
File: 3230322e3134382e32372e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier: 59bmeWWQvSArK7iRT1CiMMpDMPEAK0Oij7n0In1A8go=
Subject key identifier: 90:A2:20:24:25:E8:7A:2A:04:27:0B:2E:C0:77:06:70:83:6C:B7:2D
Certificate issuer: /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial: 33AA40D313F5BD5890374595A2136F8B93DC72D1
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32372e302f32342d3234203d3e2039373934.roa
Signing time: Sun 03 May 2026 03:17:11 +0000
ROA not before: Sun 03 May 2026 03:12:11 +0000
ROA not after: Sun 02 May 2027 03:17:11 +0000
asID: 9794
IP address blocks: 202.148.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:40:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:aa:40:d3:13:f5:bd:58:90:37:45:95:a2:13:6f:8b:93:dc:72:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Validity
Not Before: May 3 03:12:11 2026 GMT
Not After : May 2 03:17:11 2027 GMT
Subject: CN=90A2202425E87A2A04270B2EC0770670836CB72D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:81:08:67:ca:09:c3:1c:8b:1e:57:b1:65:a2:
54:9c:5e:ba:92:a9:3d:3b:34:4f:20:68:50:76:65:
1f:20:ae:84:8b:9b:08:92:d0:70:f9:db:31:24:f0:
53:b6:46:92:a1:b6:c5:e8:99:fe:6b:df:9b:ad:c6:
4a:2a:52:ff:17:93:be:da:16:85:27:b5:dc:05:fb:
09:a2:39:9a:46:ca:75:2d:01:5c:29:f5:d2:9c:c9:
72:01:cf:d4:cc:a9:13:1a:a8:4c:2f:1c:0f:99:67:
a0:c4:6b:b5:9d:06:d5:a7:8f:03:52:f9:68:0f:f2:
c9:5f:13:5d:53:f0:c0:35:c8:e5:92:5c:07:9a:f8:
ee:3e:bd:74:60:3e:b2:d8:59:48:a4:35:8d:f8:91:
5e:b1:27:af:68:2c:79:f4:b7:9c:60:40:df:12:f8:
ed:30:54:98:b7:f1:f1:55:02:e6:a0:49:80:7d:25:
c8:d3:77:a8:0b:0d:5d:5e:3d:3c:48:ce:71:65:2a:
81:fe:9b:de:92:ea:04:24:90:7b:f6:8f:0f:39:61:
49:b1:17:03:8a:6e:71:42:54:4f:a1:7c:63:56:a7:
a2:9a:04:b9:30:a8:21:69:a7:d5:ce:e8:0c:bd:d9:
17:b6:d2:a8:ca:0c:34:b9:f3:3b:18:79:62:19:4b:
ce:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A2:20:24:25:E8:7A:2A:04:27:0B:2E:C0:77:06:70:83:6C:B7:2D
X509v3 Authority Key Identifier:
keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e32372e302f32342d3234203d3e2039373934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.148.27.0/24
Signature Algorithm: sha256WithRSAEncryption
75:35:6b:db:6f:cc:b6:3a:1e:31:09:9f:dc:3b:e9:8e:8b:da:
d0:5f:94:6a:4a:09:98:78:d4:f9:65:a9:0b:56:49:43:be:f8:
45:3d:0e:27:48:34:66:1e:9d:c7:e6:e6:54:09:8d:0f:82:d9:
99:e6:7e:60:cb:c1:37:4c:11:3a:cd:16:3b:06:22:ca:41:f0:
20:e3:7d:0b:5c:dc:f4:f5:81:28:c3:5d:80:7d:44:e7:90:3f:
01:43:9d:77:6e:ce:1f:85:44:74:09:ba:a0:77:3e:ea:fa:8a:
00:a5:40:13:3a:49:92:ab:d0:01:af:ad:07:d5:31:52:48:20:
fd:07:fc:64:47:64:4b:ce:f0:f8:cf:3e:76:2f:b3:59:d9:d8:
28:c7:07:00:76:dd:94:75:a4:c7:0b:97:f4:4b:a3:ca:6b:ed:
b2:1f:5b:5c:9b:f1:b4:44:f9:57:dd:06:05:2c:7a:08:21:8f:
fa:c4:09:35:ec:6c:85:5b:09:01:51:9b:c3:88:67:cd:ab:d8:
0e:50:c0:d9:a7:56:58:fa:01:5b:81:d3:7f:b4:20:8a:ff:d0:
68:f1:a7:40:d6:cd:83:c8:45:51:1e:f3:80:46:21:67:7b:2f:
ca:d0:2a:b0:3c:7a:70:8c:a3:ac:80:98:a8:be:b2:64:01:7a:
a0:be:9c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:38 2026 by rpki-client