
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e362e302f32332d3233203d3e203338373738.roa
File: 3230322e3134382e362e302f32332d3233203d3e203338373738.roa (raw, json)
Hash identifier: JdZKadxfDxKTXgD0cas0lardx2OeeRAknog1D7ZDDSQ=
Subject key identifier: D5:3B:FA:B3:1E:64:CA:16:B5:7B:F2:97:C0:B4:02:FC:EE:CC:04:5F
Certificate issuer: /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial: 0A9228EC44D08664B38BEAECDB84109FBF0D58DF
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e362e302f32332d3233203d3e203338373738.roa
Signing time: Sun 03 May 2026 03:17:25 +0000
ROA not before: Sun 03 May 2026 03:12:25 +0000
ROA not after: Sun 02 May 2027 03:17:25 +0000
asID: 38778
IP address blocks: 202.148.6.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:92:28:ec:44:d0:86:64:b3:8b:ea:ec:db:84:10:9f:bf:0d:58:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Validity
Not Before: May 3 03:12:25 2026 GMT
Not After : May 2 03:17:25 2027 GMT
Subject: CN=D53BFAB31E64CA16B57BF297C0B402FCEECC045F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:39:f7:bd:e0:43:bc:54:a4:87:81:b6:61:7a:
80:8f:c5:22:99:bb:58:3e:15:1a:85:df:ad:f8:38:
97:dd:d8:e1:0f:68:4c:04:1f:3c:7e:0f:78:de:07:
b3:b9:c2:17:cd:17:74:0d:9e:12:9c:7e:8f:21:06:
a8:cd:ca:58:10:c6:9f:35:b9:4d:5e:97:b5:ad:48:
36:18:b9:73:b5:9f:cc:65:73:49:0d:19:ba:7a:a2:
03:0f:74:94:af:f1:e6:c4:c3:da:e3:04:21:04:59:
2c:55:d6:df:32:3f:3b:00:95:4f:07:74:f7:95:8e:
e6:6d:1c:4a:db:e4:ae:e1:a3:b7:34:13:73:e5:b5:
10:c2:a0:46:a7:aa:f6:2c:5f:34:d7:1f:91:fd:be:
dd:a7:a6:54:90:dd:ca:2c:26:dd:60:f1:7c:97:ce:
cf:cf:52:ba:f5:80:4e:de:1b:49:18:ea:85:5c:92:
e3:21:00:da:56:58:0c:49:30:0d:01:6e:5c:e1:26:
5e:60:dd:dc:37:d4:ff:72:89:89:48:43:18:f4:b9:
ce:94:46:bf:70:11:5c:14:e2:b7:10:36:1a:ed:51:
1b:db:2f:78:43:ff:85:cd:cb:bf:ab:56:16:e0:04:
70:9f:65:07:c1:37:ba:26:91:30:7c:01:6d:14:f5:
c8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3B:FA:B3:1E:64:CA:16:B5:7B:F2:97:C0:B4:02:FC:EE:CC:04:5F
X509v3 Authority Key Identifier:
keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e362e302f32332d3233203d3e203338373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.148.6.0/23
Signature Algorithm: sha256WithRSAEncryption
72:2e:f1:c9:0b:82:c9:90:a8:0a:12:8c:d4:6b:85:8d:45:b3:
cb:ce:4c:f2:93:31:19:53:79:00:32:dd:76:9d:91:c9:51:7d:
9a:e3:94:6e:c1:4f:32:f5:5a:e0:a9:4b:ca:45:11:87:3b:66:
91:4a:ca:e9:66:8c:b8:86:0b:80:d6:b9:10:17:73:13:ea:f8:
f4:a2:c4:9a:4d:4d:16:5f:ab:4a:42:cf:22:80:bc:02:c6:51:
64:23:3b:76:8e:db:a6:29:df:1e:59:a9:2e:70:bc:7d:32:a0:
6a:53:20:4e:e7:8a:4f:49:da:c9:0d:7a:93:1c:e7:1e:73:29:
ff:ee:71:ea:a6:92:34:ad:82:33:6f:37:66:01:a7:5d:d0:cc:
71:b4:31:f7:92:6b:b1:b7:90:a9:7c:5f:d3:ae:e4:17:f4:f0:
6d:18:90:37:f0:bf:a5:26:b5:f1:45:9b:25:a2:5a:5e:b9:7a:
1d:c3:a2:fb:f1:ce:f7:ad:75:1b:27:1d:21:16:70:52:fb:ee:
71:bc:0b:4b:eb:59:c2:61:af:27:8d:b4:7f:34:ea:b3:b7:84:
ec:2b:54:bc:a2:15:ef:6c:c2:0d:56:93:24:84:d2:fe:53:0e:
b3:55:35:68:26:86:62:82:14:70:42:9c:82:4e:c7:ed:b8:f1:
75:73:59:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:36:27 2026 by rpki-client