
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136322e302f32342d3234203d3e2039373934.roa
File: 3230332e3230312e3136322e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier: NEoGfXQmVVGaL+eNWw8TNLoGMQBJyGP/40l7SQqi9YU=
Subject key identifier: A4:F9:01:97:5B:93:A6:36:F4:8C:44:04:05:BA:61:58:D3:8C:0E:0E
Certificate issuer: /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial: 69E907AC4E2332F86B00D1FD57E0F66FD6EC4521
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136322e302f32342d3234203d3e2039373934.roa
Signing time: Sun 03 May 2026 03:17:02 +0000
ROA not before: Sun 03 May 2026 03:12:02 +0000
ROA not after: Sun 02 May 2027 03:17:02 +0000
asID: 9794
IP address blocks: 203.201.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:e9:07:ac:4e:23:32:f8:6b:00:d1:fd:57:e0:f6:6f:d6:ec:45:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Validity
Not Before: May 3 03:12:02 2026 GMT
Not After : May 2 03:17:02 2027 GMT
Subject: CN=A4F901975B93A636F48C440405BA6158D38C0E0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:35:ca:c7:41:b6:c0:d7:8a:d1:b0:30:fd:75:
a8:9f:02:90:78:c2:ef:7a:39:f0:ef:d8:ca:b7:d2:
46:92:cc:96:6f:3d:95:c2:1c:ef:67:79:f8:fa:ea:
5a:1e:87:a4:bb:7a:81:5e:d9:ec:8f:8d:2b:6e:19:
88:14:e2:11:8b:32:bb:d9:18:77:64:6f:37:af:d6:
3c:44:75:49:63:2b:9b:b5:5e:02:d2:49:5d:54:ca:
d8:5e:5a:1a:3b:c5:cb:00:d1:6f:c0:50:b6:69:d4:
8c:6a:84:73:d9:97:75:df:7d:38:08:94:54:6c:69:
c0:b6:45:32:cc:e6:ae:00:82:d6:98:5c:a5:01:8b:
ce:3a:a5:81:ea:4a:8c:61:40:38:b9:d5:28:19:e9:
51:9f:3e:7f:8f:ef:71:d9:c4:54:a0:c3:95:1e:ac:
48:b4:04:7d:6a:14:69:be:fa:fb:8e:38:e1:3d:50:
eb:e5:86:3c:30:39:1d:02:df:e9:ab:1d:78:ef:b9:
28:31:61:b8:ec:e3:a1:05:39:d7:93:84:8c:f2:42:
dc:56:70:18:c0:60:f5:0f:ff:02:00:18:36:f9:d7:
66:a9:78:87:8c:fc:85:02:1b:93:3d:17:1b:37:9e:
78:8a:89:e2:b7:7e:69:67:60:16:7a:09:d6:1a:01:
76:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F9:01:97:5B:93:A6:36:F4:8C:44:04:05:BA:61:58:D3:8C:0E:0E
X509v3 Authority Key Identifier:
keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136322e302f32342d3234203d3e2039373934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.201.162.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:fc:31:6b:0b:f0:5d:e8:be:15:52:49:85:32:f1:ca:76:06:
a1:9e:47:dc:0f:23:11:97:9d:d0:28:2a:fe:55:9d:06:e2:cb:
d0:c6:78:18:1c:11:82:e5:c3:22:55:27:cd:1a:9d:de:fe:7e:
a3:0f:6d:6d:ca:0a:c4:6a:79:72:55:f5:5b:51:89:be:88:79:
5f:56:9f:e8:ab:14:fe:a1:2c:dd:9d:fc:45:2d:82:ae:2e:77:
aa:ce:a1:b7:7c:16:d2:ca:73:27:98:c2:5f:05:a2:df:6d:fe:
19:c3:ce:a6:b8:a9:ed:73:88:21:10:60:27:7c:6e:b3:dc:59:
0f:35:fb:f6:df:8f:4c:d8:c7:68:f0:c3:ea:e6:96:e2:71:72:
01:8b:63:dd:5b:68:7d:c6:95:51:09:1d:33:71:30:dc:4a:81:
71:9b:55:73:4f:8b:d5:69:3f:59:6d:f8:87:17:ec:de:05:cd:
18:93:43:47:58:5c:93:ec:d8:3f:6d:38:91:aa:c0:b3:5f:e0:
03:a8:58:5b:e3:7f:19:1c:82:98:5f:bb:7d:47:ae:37:a9:75:
35:ef:97:27:f9:e7:5b:af:f2:74:e6:fb:95:3e:42:06:6e:33:
72:b7:c1:37:da:41:c9:53:eb:f9:0c:50:06:37:32:d5:a6:7b:
dd:cb:10:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:15:54 2026 by rpki-client