
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136302e302f32342d3234203d3e2039373934.roa
File: 3230332e3230312e3136302e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier: 8PPS+p0iFrStd9cEYRBaAn/aZqatQgFdKQuc6RvKs4U=
Subject key identifier: E8:83:F8:80:59:4D:40:D8:C3:41:94:C8:7C:96:26:DF:76:67:7F:F7
Certificate issuer: /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial: 4E482CFE6C659A44E0BA8A9613CCAED9A29D3D94
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136302e302f32342d3234203d3e2039373934.roa
Signing time: Sun 03 May 2026 03:17:15 +0000
ROA not before: Sun 03 May 2026 03:12:15 +0000
ROA not after: Sun 02 May 2027 03:17:15 +0000
asID: 9794
IP address blocks: 203.201.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:48:2c:fe:6c:65:9a:44:e0:ba:8a:96:13:cc:ae:d9:a2:9d:3d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Validity
Not Before: May 3 03:12:15 2026 GMT
Not After : May 2 03:17:15 2027 GMT
Subject: CN=E883F880594D40D8C34194C87C9626DF76677FF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:10:38:0b:cd:75:58:f3:ee:78:18:5d:d7:e5:
16:e8:36:57:fd:79:54:28:b7:0a:75:97:ed:68:ab:
01:4b:50:82:ec:03:ba:57:0e:cb:98:2e:3f:71:2a:
91:00:ef:78:d5:91:99:14:27:2f:1b:55:17:9c:16:
ca:9c:a4:c9:78:22:5d:5e:8d:b4:21:25:22:ca:65:
c3:56:d2:18:0f:6f:5a:06:9f:0a:b8:82:a5:3e:c8:
23:14:2f:c4:86:f0:d1:0c:9c:ae:68:3f:d5:b0:c4:
d6:41:52:3d:9b:33:0c:29:d9:87:a3:55:41:54:4e:
0a:a0:61:28:00:84:9c:9f:ac:b6:b4:79:b3:b6:12:
29:e4:94:f4:f1:21:0f:00:c4:d7:52:22:56:ec:41:
2e:dd:49:86:ef:11:54:ad:9f:51:88:7c:25:6f:fa:
24:56:d0:a6:8f:2a:cb:62:f3:81:e3:96:dc:4e:aa:
89:8a:ae:0d:0e:53:96:70:86:ce:c8:32:89:f5:7d:
95:9c:d0:42:8f:f0:29:5f:66:dd:37:93:25:77:d5:
4a:19:ed:f0:3a:23:66:17:99:d0:5c:1e:95:6f:78:
3f:fb:fe:12:01:a7:3b:fe:bc:5e:0a:1c:19:c4:3c:
89:fb:2d:41:4e:53:a4:ba:04:cc:f4:8a:7a:2d:55:
af:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:83:F8:80:59:4D:40:D8:C3:41:94:C8:7C:96:26:DF:76:67:7F:F7
X509v3 Authority Key Identifier:
keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136302e302f32342d3234203d3e2039373934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.201.160.0/24
Signature Algorithm: sha256WithRSAEncryption
39:7f:f0:2f:a7:76:4d:83:32:a3:9a:26:7b:78:aa:d6:b8:e8:
97:60:b8:3a:bb:3b:ae:d4:47:20:4d:e0:4f:db:45:ba:39:73:
f7:30:6d:e0:45:f2:5c:b3:e7:53:b6:2b:67:08:f9:0a:60:d8:
bd:ef:eb:e3:2f:6b:62:dc:22:d4:6b:d1:2e:78:53:53:df:fe:
cc:c2:63:23:7a:4b:3a:40:8f:45:a4:fa:b0:c2:1c:1c:2b:91:
9c:07:5e:d9:b1:28:40:cb:8b:c4:80:3d:63:b8:83:87:e6:bf:
ec:47:ad:84:1b:a3:85:a6:92:9c:23:da:b1:1e:3c:e3:c1:1c:
98:7e:e7:9f:a1:5b:a1:0e:12:c6:e1:7e:c6:11:51:c9:32:e7:
04:58:70:51:2a:59:56:a8:57:1e:b3:59:1d:2e:8e:0e:87:ad:
d8:be:d9:8e:ab:8c:17:dc:73:c0:54:67:08:2e:74:a4:5d:3c:
b0:30:61:2a:66:64:28:eb:5f:7a:4b:51:2f:c1:7d:c7:be:1a:
a1:c9:ee:9b:57:c1:26:4e:73:98:c9:71:fe:6d:d0:4e:6c:89:
fc:69:09:8a:c0:86:32:c9:3e:11:8d:88:32:74:6b:53:42:54:
4f:f8:31:4e:0e:8d:8b:97:26:e6:dc:2d:57:db:02:58:bd:da:
a5:cb:fa:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:07 2026 by rpki-client