
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136332e302f32342d3234203d3e2039373934.roa
File: 3230332e3230312e3136332e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier: AB/lBSzak6X5Ntnt9NJEFc7gzZpjZF57rcSgTzRfuUM=
Subject key identifier: BC:E9:31:82:A8:30:D7:08:1B:58:7D:3F:B2:19:61:AB:3B:8C:99:E2
Certificate issuer: /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial: 429C7A5CE0AB8B485C2412DFDFB136EB70C67190
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136332e302f32342d3234203d3e2039373934.roa
Signing time: Sun 03 May 2026 03:17:15 +0000
ROA not before: Sun 03 May 2026 03:12:15 +0000
ROA not after: Sun 02 May 2027 03:17:15 +0000
asID: 9794
IP address blocks: 203.201.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:9c:7a:5c:e0:ab:8b:48:5c:24:12:df:df:b1:36:eb:70:c6:71:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Validity
Not Before: May 3 03:12:15 2026 GMT
Not After : May 2 03:17:15 2027 GMT
Subject: CN=BCE93182A830D7081B587D3FB21961AB3B8C99E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:32:58:5a:9d:f6:49:c3:7a:af:5e:aa:2b:4b:
18:16:c0:1e:ac:82:e3:4c:b3:98:74:1c:a4:65:49:
cf:a2:c5:88:0f:a1:4b:1a:6a:5c:a7:6a:7f:95:47:
2d:71:35:96:c4:9b:cc:9c:61:77:1b:2f:23:d1:fd:
da:c7:ff:38:14:22:8c:d6:0e:96:5e:a4:fe:6f:e4:
41:24:a0:6d:6f:df:f4:e3:54:9e:72:2d:b8:27:b6:
c5:d4:02:85:52:df:fa:18:24:e3:ae:50:01:fb:48:
92:ef:23:51:65:4b:75:b6:59:70:73:99:d3:8f:a1:
84:d0:c8:17:e3:a8:6a:7d:bc:9f:1e:f5:4f:d7:53:
85:c4:4e:33:74:5f:8e:f0:5e:f0:f1:6a:27:a5:5e:
76:54:c2:88:5d:16:cd:36:21:ac:3c:72:fd:37:a4:
b7:e6:d2:24:dd:99:39:47:a2:b4:ec:bf:b2:dc:f9:
dd:a6:aa:c9:75:8b:cb:b4:74:3d:de:c7:32:a7:38:
99:76:a4:25:3c:e1:91:60:81:5f:12:06:c0:52:8f:
d0:af:cb:8a:96:52:98:0f:90:a5:aa:c4:d1:6a:f0:
2c:de:94:a6:03:99:52:f3:d3:8b:7d:36:06:00:e9:
01:9e:f8:a6:ea:41:5e:ae:a5:12:e3:f6:c7:4f:22:
02:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E9:31:82:A8:30:D7:08:1B:58:7D:3F:B2:19:61:AB:3B:8C:99:E2
X509v3 Authority Key Identifier:
keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136332e302f32342d3234203d3e2039373934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.201.163.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:59:e5:48:1f:7f:72:47:cf:b4:22:cc:da:52:d2:e6:f8:70:
6e:c3:60:59:aa:d3:14:d4:c9:65:65:29:7e:79:34:05:f8:3b:
9b:c5:da:07:0b:a8:64:81:7c:2f:bb:8b:67:6e:b5:ba:45:df:
59:9c:4f:8a:d9:9f:16:04:40:55:28:47:8b:0d:f3:41:5e:f7:
c2:df:c4:64:d6:95:c2:bd:88:05:ee:8a:51:83:c5:79:02:d6:
c9:f8:83:94:9a:5a:94:bc:78:61:07:54:c8:2d:9a:f1:86:43:
2c:6d:9b:02:bc:d0:c8:ab:d4:4a:80:8a:92:86:93:09:70:2e:
8f:b2:b1:fe:2e:d9:a0:da:c6:c4:9e:32:96:9b:36:02:8f:2c:
66:73:50:e8:d4:7f:79:1b:24:f1:45:53:89:57:fe:7b:c1:f2:
11:c0:33:31:61:7f:53:9e:dd:f7:c2:bc:fb:3e:b2:62:3d:fd:
72:82:ce:c1:17:c7:df:3c:fb:c7:ca:5f:06:6b:0d:38:ab:e0:
7a:6a:a1:9f:70:ad:3b:f8:95:d7:0d:89:31:e9:88:33:c9:13:
44:73:18:a6:d4:08:36:f9:82:7e:39:14:17:ee:da:77:d4:6d:
27:53:68:db:be:03:14:d3:56:06:b0:91:05:7f:76:61:df:c6:
56:2f:f2:e0
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUQpx6XOCri0hcJBLf37E263DGcZAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNCMDgwMjNCQjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1
OUNFRThBMzAeFw0yNjA1MDMwMzEyMTVaFw0yNzA1MDIwMzE3MTVaMDMxMTAvBgNV
BAMTKEJDRTkzMTgyQTgzMEQ3MDgxQjU4N0QzRkIyMTk2MUFCM0I4Qzk5RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1MlhanfZJw3qvXqorSxgWwB6s
guNMs5h0HKRlSc+ixYgPoUsaalynan+VRy1xNZbEm8ycYXcbLyPR/drH/zgUIozW
DpZepP5v5EEkoG1v3/TjVJ5yLbgntsXUAoVS3/oYJOOuUAH7SJLvI1FlS3W2WXBz
mdOPoYTQyBfjqGp9vJ8e9U/XU4XETjN0X47wXvDxaielXnZUwohdFs02Iaw8cv03
pLfm0iTdmTlHorTsv7Lc+d2mqsl1i8u0dD3exzKnOJl2pCU84ZFggV8SBsBSj9Cv
y4qWUpgPkKWqxNFq8CzelKYDmVLz04t9NgYA6QGe+KbqQV6upRLj9sdPIgJjAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUvOkxgqgw1wgbWH0/shlhqzuMmeIwHwYDVR0j
BBgwFoAULLCAI7tCiuTQJyfJawacX1nO6KMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjM0ZWNjNDAtNmI4NC00OWU4LWI2MGItNmU5OTA0MTI4Y2E4LzAvMkNCMDgwMjNC
QjQyOEFFNEQwMjcyN0M5NkIwNjlDNUY1OUNFRThBMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yQ0IwODAyM0JCNDI4QUU0RDAyNzI3Qzk2QjA2OUM1RjU5Q0VF
OEEzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i
NjBiLTZlOTkwNDEyOGNhOC8wLzMyMzAzMzJlMzIzMDMxMmUzMTM2MzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzOTM3MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMvJozANBgkqhkiG
9w0BAQsFAAOCAQEAslnlSB9/ckfPtCLM2lLS5vhwbsNgWarTFNTJZWUpfnk0Bfg7
m8XaBwuoZIF8L7uLZ261ukXfWZxPitmfFgRAVShHiw3zQV73wt/EZNaVwr2IBe6K
UYPFeQLWyfiDlJpalLx4YQdUyC2a8YZDLG2bArzQyKvUSoCKkoaTCXAuj7Kx/i7Z
oNrGxJ4ylps2Ao8sZnNQ6NR/eRsk8UVTiVf+e8HyEcAzMWF/U57d98K8+z6yYj39
coLOwRfH3zz7x8pfBmsNOKvgemqhn3CtO/iV1w2JMemIM8kTRHMYptQINvmCfjkU
F+7ad9RtJ1No274DFNNWBrCRBX92Yd/GVi/y4A==
-----END CERTIFICATE-----
Generated at Wed May 13 02:26:49 2026 by rpki-client