
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e362e302f32342d3234203d3e203338373738.roa
File: 3230322e3134382e362e302f32342d3234203d3e203338373738.roa (raw, json)
Hash identifier: INRudb/Pezu/HibBPwcDp7mcU9zCOWHWDAY3nTfl8v8=
Subject key identifier: 62:7A:D1:49:1B:AE:48:C3:8D:A3:B2:BE:3C:9D:54:23:63:8E:82:C9
Certificate issuer: /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial: 496CE509A5EBC7FBC3F71F1E9291EE85188B2BC2
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e362e302f32342d3234203d3e203338373738.roa
Signing time: Sun 03 May 2026 03:17:18 +0000
ROA not before: Sun 03 May 2026 03:12:18 +0000
ROA not after: Sun 02 May 2027 03:17:18 +0000
asID: 38778
IP address blocks: 202.148.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:40:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:6c:e5:09:a5:eb:c7:fb:c3:f7:1f:1e:92:91:ee:85:18:8b:2b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Validity
Not Before: May 3 03:12:18 2026 GMT
Not After : May 2 03:17:18 2027 GMT
Subject: CN=627AD1491BAE48C38DA3B2BE3C9D5423638E82C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8e:b4:86:79:3e:7e:4d:94:3e:1b:11:78:f7:
69:aa:03:06:60:b1:0e:e7:d0:9b:e9:00:cb:40:0e:
c6:cc:a1:f8:c4:84:7d:19:bd:18:a7:05:0c:9b:f0:
66:9d:3c:10:6d:8a:d2:d9:c6:3d:4f:07:44:74:cf:
f4:14:70:1a:99:cf:dd:ad:85:57:3e:ae:f5:c4:96:
db:14:bb:ae:72:6a:3d:9c:b9:1e:53:7a:d9:d2:4b:
01:cb:d7:fd:48:89:c3:aa:50:ee:82:fa:ec:fa:f0:
c1:50:7c:e4:1e:ee:bb:1e:dc:a0:2c:1d:cb:16:41:
88:80:65:5e:0a:78:c5:66:5e:04:49:1f:01:ae:8c:
ad:f6:ce:a4:55:c4:d9:5c:9d:0d:42:17:5a:2e:e3:
a1:45:42:f7:d8:fd:23:a9:90:6d:dd:5a:b5:b9:a4:
2e:b8:dd:fa:d5:7c:aa:1d:6a:fa:d4:4b:fd:a4:e3:
59:eb:c2:62:4f:a1:37:f2:f3:10:d3:a6:ec:f4:1a:
61:65:c0:4a:c7:63:4a:2b:c0:f8:3d:91:ea:9b:e1:
0e:93:23:8e:6b:a5:d1:10:ce:14:b8:97:65:e4:00:
09:8c:d3:64:7c:b6:93:9c:e0:a4:03:59:a8:3e:af:
6d:5e:ea:c1:b1:46:73:5d:78:fe:40:b2:07:da:52:
ec:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7A:D1:49:1B:AE:48:C3:8D:A3:B2:BE:3C:9D:54:23:63:8E:82:C9
X509v3 Authority Key Identifier:
keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e362e302f32342d3234203d3e203338373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.148.6.0/24
Signature Algorithm: sha256WithRSAEncryption
36:db:04:dd:77:cd:13:bc:d1:74:df:53:c5:e5:76:85:c1:15:
f3:d7:e7:95:7f:0d:35:46:45:ca:86:1f:99:33:63:d8:c7:69:
2f:2b:59:fc:e7:4b:2c:a2:bd:c1:fe:49:a4:2f:ac:cd:b1:5f:
7a:37:56:25:65:b2:f8:0c:f6:2e:05:af:ae:ff:b3:eb:9a:19:
aa:a6:7f:5c:de:ae:d2:65:e3:9f:4e:6f:2c:36:1f:4e:17:cc:
88:b0:b9:b0:ce:55:cb:37:b3:b1:7e:a1:2e:f1:07:63:ca:d1:
88:15:72:77:bb:f1:ac:94:7e:3c:7c:37:e7:cf:80:69:bf:4c:
16:17:3c:73:47:81:29:29:93:4c:5e:31:dc:58:fe:17:a9:31:
3f:80:08:52:7c:c0:c7:c9:5d:4e:0f:70:0a:57:ae:a6:e3:ff:
64:56:11:fa:d8:5c:bc:4a:2c:ee:24:ac:83:68:de:d5:67:e3:
61:f3:f2:76:bc:f8:90:46:8c:06:3d:a5:dd:10:28:61:68:f2:
8e:5a:a1:a1:da:98:e2:21:83:3c:9c:d9:b3:d4:2d:b0:ce:95:
f0:c4:15:23:95:44:31:48:5b:b4:66:6d:29:d9:a2:16:5d:75:
66:87:e8:99:ed:8a:5f:80:67:a9:31:8b:a9:5d:93:be:1a:c8:
c1:9f:16:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:59:53 2026 by rpki-client