
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e33302e302f32342d3234203d3e203338373738.roa
File: 3230322e3134382e33302e302f32342d3234203d3e203338373738.roa (raw, json)
Hash identifier: mswQJEoE6hpBPSwTjgYdojhPSxM4iipV0p8qy62Z/LY=
Subject key identifier: 51:DF:4F:95:61:7E:39:4D:92:66:F3:CA:42:F2:89:8D:37:BA:47:97
Certificate issuer: /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial: 41A37328CAABEA313C3D18A1DE21A39D5E4A0125
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e33302e302f32342d3234203d3e203338373738.roa
Signing time: Sun 03 May 2026 03:17:08 +0000
ROA not before: Sun 03 May 2026 03:12:08 +0000
ROA not after: Sun 02 May 2027 03:17:08 +0000
asID: 38778
IP address blocks: 202.148.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:40:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:a3:73:28:ca:ab:ea:31:3c:3d:18:a1:de:21:a3:9d:5e:4a:01:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Validity
Not Before: May 3 03:12:08 2026 GMT
Not After : May 2 03:17:08 2027 GMT
Subject: CN=51DF4F95617E394D9266F3CA42F2898D37BA4797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9f:6e:d1:76:1e:f5:63:d8:be:52:a2:ac:9e:
9f:fe:88:91:f4:d5:2d:11:66:93:39:5a:8d:f5:f9:
1c:1b:1f:a7:af:8d:26:0b:dd:ac:5f:46:db:da:8c:
dd:e5:38:56:74:26:49:50:bc:45:b4:d7:d1:11:31:
1f:25:08:ef:e3:28:6d:28:81:77:39:9f:6a:a4:da:
73:21:e5:b4:ee:dd:81:30:41:50:98:a9:81:5d:37:
49:ad:1e:32:b9:44:53:b3:bf:e7:06:78:5d:7e:25:
84:b7:82:7e:15:47:e4:92:2f:22:2b:5f:30:9c:51:
4e:be:32:e4:db:ce:3e:75:83:9b:ef:7b:2a:23:b5:
fc:95:00:97:f5:d4:c0:43:49:eb:f9:3f:0b:ff:f0:
e2:82:ea:2f:ad:08:33:2c:ed:a6:f6:16:43:ee:ff:
5f:99:98:af:ce:c7:63:7d:2b:6c:8f:8d:70:e8:d8:
88:34:88:a5:b0:50:60:3a:16:fa:98:a8:0f:14:01:
ea:44:65:1a:d4:e0:a7:3b:7c:8f:8a:2e:2e:4d:7d:
20:49:e2:6f:f1:94:41:50:0c:de:8e:4b:3b:8f:97:
32:48:05:82:cb:6c:ea:0b:c2:90:17:a2:fa:fa:81:
01:91:8d:fe:10:42:6d:f3:93:3d:8f:8b:cd:90:f9:
21:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DF:4F:95:61:7E:39:4D:92:66:F3:CA:42:F2:89:8D:37:BA:47:97
X509v3 Authority Key Identifier:
keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e33302e302f32342d3234203d3e203338373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.148.30.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:9f:9d:28:7d:42:f3:2a:2d:ea:5b:04:3a:24:09:bb:f6:36:
4f:50:d4:fe:f4:92:2c:5c:f5:45:9b:cf:ea:1b:6b:e6:32:a4:
02:b9:93:18:db:25:f5:2c:82:1d:e1:1c:03:ce:2a:cf:1b:4d:
05:a7:19:6d:bf:53:8b:af:75:ab:1c:e9:93:d2:14:30:a1:05:
25:4d:45:04:c2:fe:43:99:d7:b4:70:c6:e0:98:50:40:28:58:
fd:96:21:b7:30:21:9e:84:65:d4:46:36:21:d3:d2:37:01:9b:
65:19:14:8c:6b:0c:d0:1e:31:df:39:e6:dd:06:2a:ed:7f:42:
5f:33:45:5f:e6:a9:65:53:27:ac:63:6a:95:f7:7d:1c:c9:98:
f9:40:d9:59:d1:e2:85:c9:cc:35:00:42:2c:7e:56:0b:61:dc:
fe:16:c2:86:cd:72:52:ee:de:69:5c:00:c4:e4:a4:1e:2d:49:
cb:d1:53:72:a0:8a:f5:77:c0:cc:70:b9:db:18:a8:9a:cf:52:
74:25:78:7f:5b:7b:cb:b5:a5:72:ce:bc:dc:08:fd:8f:15:5e:
7f:dc:71:6e:ff:c8:bf:3a:d5:1b:26:b1:6b:29:8b:a5:1b:6a:
ed:ea:0c:0e:93:c9:68:79:40:1c:f8:a7:f4:36:55:23:d8:9d:
e9:09:56:c1
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUQaNzKMqr6jE8PRih3iGjnV5KASUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNCMDgwMjNCQjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1
OUNFRThBMzAeFw0yNjA1MDMwMzEyMDhaFw0yNzA1MDIwMzE3MDhaMDMxMTAvBgNV
BAMTKDUxREY0Rjk1NjE3RTM5NEQ5MjY2RjNDQTQyRjI4OThEMzdCQTQ3OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfn27Rdh71Y9i+UqKsnp/+iJH0
1S0RZpM5Wo31+RwbH6evjSYL3axfRtvajN3lOFZ0JklQvEW019ERMR8lCO/jKG0o
gXc5n2qk2nMh5bTu3YEwQVCYqYFdN0mtHjK5RFOzv+cGeF1+JYS3gn4VR+SSLyIr
XzCcUU6+MuTbzj51g5vveyojtfyVAJf11MBDSev5Pwv/8OKC6i+tCDMs7ab2FkPu
/1+ZmK/Ox2N9K2yPjXDo2Ig0iKWwUGA6FvqYqA8UAepEZRrU4Kc7fI+KLi5NfSBJ
4m/xlEFQDN6OSzuPlzJIBYLLbOoLwpAXovr6gQGRjf4QQm3zkz2Pi82Q+SGNAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUUd9PlWF+OU2SZvPKQvKJjTe6R5cwHwYDVR0j
BBgwFoAULLCAI7tCiuTQJyfJawacX1nO6KMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjM0ZWNjNDAtNmI4NC00OWU4LWI2MGItNmU5OTA0MTI4Y2E4LzAvMkNCMDgwMjNC
QjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1OUNFRThBMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yQ0IwODAyM0JCNDI4QUU0RDAyNzI3Qzk2QjA2OUM1RjU5Q0VF
OEEzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i
NjBiLTZlOTkwNDEyOGNhOC8wLzMyMzAzMjJlMzEzNDM4MmUzMzMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM3MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMqUHjANBgkqhkiG
9w0BAQsFAAOCAQEArZ+dKH1C8yot6lsEOiQJu/Y2T1DU/vSSLFz1RZvP6htr5jKk
ArmTGNsl9SyCHeEcA84qzxtNBacZbb9Ti691qxzpk9IUMKEFJU1FBML+Q5nXtHDG
4JhQQChY/ZYhtzAhnoRl1EY2IdPSNwGbZRkUjGsM0B4x3znm3QYq7X9CXzNFX+ap
ZVMnrGNqlfd9HMmY+UDZWdHihcnMNQBCLH5WC2Hc/hbChs1yUu7eaVwAxOSkHi1J
y9FTcqCK9XfAzHC52xioms9SdCV4f1t7y7Wlcs683Aj9jxVef9xxbv/IvzrVGyax
aymLpRtq7eoMDpPJaHlAHPin9DZVI9id6QlWwQ==
-----END CERTIFICATE-----
Generated at Wed May 13 03:47:53 2026 by rpki-client