
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136392e302f32342d3234203d3e203338373738.roa
File: 3230332e3230312e3136392e302f32342d3234203d3e203338373738.roa (raw, json)
Hash identifier: 20TuWUM58sw/1KyidpTE9YVRxFoPbo4+Ns8+0+FdEVo=
Subject key identifier: B4:B4:C4:1C:7D:6B:13:95:67:C3:33:E2:C3:EB:91:33:22:D1:08:40
Certificate issuer: /CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Certificate serial: 119D3B4B7435839AB2B60170A57062C26FE89DDC
Authority key identifier: 2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136392e302f32342d3234203d3e203338373738.roa
Signing time: Sun 03 May 2026 03:17:15 +0000
ROA not before: Sun 03 May 2026 03:12:15 +0000
ROA not after: Sun 02 May 2027 03:17:15 +0000
asID: 38778
IP address blocks: 203.201.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:9d:3b:4b:74:35:83:9a:b2:b6:01:70:a5:70:62:c2:6f:e8:9d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CB08023BB428AE4D02727C96B069C5F59CEE8A3
Validity
Not Before: May 3 03:12:15 2026 GMT
Not After : May 2 03:17:15 2027 GMT
Subject: CN=B4B4C41C7D6B139567C333E2C3EB913322D10840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:68:60:13:ba:05:0b:99:e3:21:24:67:13:b0:
a1:ac:ca:7d:ad:ae:8f:d3:97:23:eb:15:3f:10:a1:
d6:35:f3:b8:8a:ce:fd:7a:20:55:fb:64:31:fc:73:
f4:26:f5:b6:11:81:80:e1:6d:11:27:25:81:24:a1:
04:cf:c1:31:52:a5:8d:cf:88:f9:30:e8:b3:79:47:
b3:08:12:c1:8b:1b:3a:aa:e4:b4:c7:20:7f:e7:86:
a3:54:1f:cd:90:23:9e:9a:0e:04:9a:85:93:ba:a8:
3f:4b:02:3d:db:9b:8e:c7:a2:c2:4b:b4:16:00:06:
0f:cf:91:f8:e0:6a:91:ff:1b:90:39:1b:17:9b:06:
dd:f9:ac:6b:13:25:2c:f5:64:8e:9e:86:9d:95:e4:
ad:bb:90:00:63:e8:a4:db:fd:af:2d:27:90:07:fc:
92:1b:b1:80:4b:1d:10:55:bd:ec:6c:62:35:e7:5c:
c9:7b:4c:2f:cf:cf:33:77:39:3d:60:5b:a8:fd:59:
98:ea:fd:d3:15:f3:ec:33:c3:f2:42:da:73:df:99:
56:99:b8:95:f1:4d:18:77:83:43:c2:93:25:cd:f2:
27:4b:f9:3a:0b:44:2a:ce:64:19:b9:1a:73:74:46:
a7:9d:40:84:54:0e:eb:6f:a1:e7:30:3a:bb:4c:93:
fb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B4:C4:1C:7D:6B:13:95:67:C3:33:E2:C3:EB:91:33:22:D1:08:40
X509v3 Authority Key Identifier:
keyid:2C:B0:80:23:BB:42:8A:E4:D0:27:27:C9:6B:06:9C:5F:59:CE:E8:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CB08023BB428AE4D02727C96B069C5F59CEE8A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136392e302f32342d3234203d3e203338373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.201.169.0/24
Signature Algorithm: sha256WithRSAEncryption
91:2a:f6:be:33:28:5e:22:5b:e9:ce:4c:ae:fd:f9:84:da:e6:
07:d8:34:fa:6d:7a:cc:7f:49:bc:e0:fa:9f:e4:45:1e:92:d6:
44:00:46:c2:71:db:a7:8c:e2:c6:34:7a:81:b9:11:d2:d7:ce:
40:46:3c:64:aa:aa:d2:8c:73:01:61:7f:fe:fc:26:a3:1c:ef:
b7:d4:32:6c:50:d2:15:6b:a8:5a:ef:6c:cc:80:21:db:46:68:
a3:2b:31:7c:2c:da:db:2f:e6:a0:7a:f3:ef:ca:f8:94:57:58:
5d:e5:bb:db:b8:2e:f2:b8:87:03:0c:10:18:47:ba:19:1e:7e:
95:db:c5:5f:55:0a:1d:9c:25:b0:c5:33:a4:8a:96:ea:e8:37:
01:68:f9:69:65:40:e7:63:cc:f8:ef:09:b6:0c:ed:5e:e7:20:
87:17:02:c1:5a:67:72:36:f1:4f:52:eb:de:6e:ea:bb:19:a4:
37:cd:89:63:ac:53:ef:46:0c:d4:d7:83:85:d1:d8:00:08:f6:
4b:f3:29:7f:4f:d3:30:38:08:54:98:46:b3:89:ca:73:c3:41:
6b:5a:a9:77:ab:75:29:f3:c6:15:3c:56:40:a1:1c:a5:d6:fe:
3c:d9:bb:b1:f2:0a:f5:e1:3f:37:b6:4a:a4:19:24:82:f5:37:
c0:28:85:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:23:17 2026 by rpki-client