
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136352e302f32342d3234203d3e2039373934.roa
File: 3230332e3230312e3136352e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier: roNGKwzZ9bqzlAQUed64F12RYOsGPE09jLikydiFWCE=
Subject key identifier: 91:FA:55:E6:75:53:5E:CA:93:7A:F4:F0:32:1F:25:9F:33:52:F1:5C
Certificate issuer: /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial: 32715F16A31B4CE0626D139584F6D362B074D7E1
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136352e302f32342d3234203d3e2039373934.roa
Signing time: Sun 03 May 2026 03:17:01 +0000
ROA not before: Sun 03 May 2026 03:12:01 +0000
ROA not after: Sun 02 May 2027 03:17:01 +0000
asID: 9794
IP address blocks: 203.201.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:71:5f:16:a3:1b:4c:e0:62:6d:13:95:84:f6:d3:62:b0:74:d7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Validity
Not Before: May 3 03:12:01 2026 GMT
Not After : May 2 03:17:01 2027 GMT
Subject: CN=91FA55E675535ECA937AF4F0321F259F3352F15C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e3:a5:9c:71:28:64:c8:9a:d0:c2:f6:5e:17:
7e:b1:81:ae:4c:68:0e:cb:80:1c:27:f5:84:ef:ed:
f6:26:9e:5f:38:85:e0:9a:05:26:40:58:e5:e7:f4:
21:db:11:98:ec:e2:db:1c:1c:25:f8:7e:45:b8:16:
f6:08:9b:a9:b1:d9:5e:80:db:d0:d5:f4:a4:20:ad:
86:d2:20:62:6d:03:7d:3f:d5:6d:b2:1a:cc:13:c7:
91:52:ec:ad:1c:9c:03:e1:3f:bb:62:50:3b:33:e8:
57:0d:d2:47:7c:2e:35:b4:06:fa:49:cf:0f:69:45:
53:84:ad:bf:82:05:ca:e5:8a:63:f4:04:b3:b9:f1:
25:45:89:5e:2f:ef:ae:bc:8c:c2:3e:11:64:d5:57:
ff:10:0d:3f:21:d6:e4:b4:fe:a0:d9:71:f1:35:cd:
b5:55:19:9f:41:b6:c6:08:93:10:dd:4c:55:96:7c:
9d:24:38:62:53:2e:1a:ce:f7:ae:6f:0f:7b:ec:19:
4a:37:73:e5:82:17:cc:9c:c4:cc:2a:e6:40:ae:8f:
44:93:bc:f3:67:3b:68:45:2a:09:e2:06:3b:4d:b2:
7a:25:6b:55:5c:07:f9:4e:46:42:77:8d:c1:69:97:
1a:6e:d8:d4:a7:d7:b4:72:c0:1b:3a:69:e7:b8:8c:
e8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FA:55:E6:75:53:5E:CA:93:7A:F4:F0:32:1F:25:9F:33:52:F1:5C
X509v3 Authority Key Identifier:
keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136352e302f32342d3234203d3e2039373934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.201.165.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:34:5f:c7:65:e2:a4:69:3a:06:57:c8:5c:2d:a5:f2:7c:bf:
0e:48:bf:7d:c5:a5:6a:58:19:51:fa:6f:20:91:60:29:03:81:
b2:86:23:16:de:d6:a0:5e:e0:a1:cc:ff:12:e6:63:c6:6f:69:
8f:1b:cc:17:f8:95:4c:bb:7d:b0:9e:b5:07:d7:6a:09:e0:d8:
ca:8d:6c:c5:34:d0:0e:ec:34:a0:3e:06:83:7b:f5:c4:97:bb:
0b:ec:af:6f:c3:4d:02:d5:7c:37:f2:d1:db:5a:53:7b:62:07:
a5:d0:1c:ad:e7:1c:78:4d:98:33:55:75:89:15:99:8a:7a:9d:
30:20:d3:3b:aa:62:d2:4b:3d:12:85:9b:a7:c3:b9:d8:a2:03:
da:2e:56:0d:d9:45:f7:d5:c1:56:5e:48:be:9b:5a:80:98:e5:
6c:ee:fd:5c:2f:31:ad:5a:80:00:e5:17:b8:51:aa:46:ed:f6:
73:8d:a1:65:02:8c:45:fb:96:d2:38:06:f1:20:e0:2b:89:bf:
23:e6:62:65:0d:9c:fd:ed:71:8a:c2:c9:49:33:40:cc:81:46:
7e:7e:87:1a:9e:e9:49:12:aa:43:21:4c:ca:22:a2:7a:ce:d0:
7b:30:8a:ec:5f:5b:85:94:07:84:ab:f0:33:14:d5:84:eb:fa:
95:ea:00:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:21 2026 by rpki-client