
$ rpki-client -vvf rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133312e302f32342d3234203d3e2034333832.roa
File: 3230322e39332e3133312e302f32342d3234203d3e2034333832.roa (raw, json)
Hash identifier: TMqEA7J0ys9Jdhs2856BZEmIfYAozAOdr0iBxVxAx0g=
Subject key identifier: 73:F3:DB:8F:0B:6F:61:75:7F:DD:F7:93:3C:B3:6E:1A:E1:91:FD:58
Certificate issuer: /CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404
Certificate serial: 556F81BC3AA70FB800897E2CF7E53073D8F47AC4
Authority key identifier: 25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133312e302f32342d3234203d3e2034333832.roa
Signing time: Sun 03 May 2026 02:16:19 +0000
ROA not before: Sun 03 May 2026 02:11:19 +0000
ROA not after: Sun 02 May 2027 02:16:19 +0000
asID: 4382
IP address blocks: 202.93.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl
rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 08 May 2026 14:52:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:6f:81:bc:3a:a7:0f:b8:00:89:7e:2c:f7:e5:30:73:d8:f4:7a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404
Validity
Not Before: May 3 02:11:19 2026 GMT
Not After : May 2 02:16:19 2027 GMT
Subject: CN=73F3DB8F0B6F61757FDDF7933CB36E1AE191FD58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:fa:ed:dc:f6:5c:6c:c0:4e:9f:69:2a:ee:c3:
43:0d:29:6c:01:bd:66:62:93:3c:5c:69:c8:f5:c5:
6c:47:16:a0:9d:4d:f8:c3:6b:22:d4:03:1b:a2:bd:
5f:6c:8d:7b:0a:51:5c:0c:90:9d:f5:eb:c0:5d:ef:
17:ab:1c:e9:31:ea:af:a8:fb:87:62:b3:c0:82:bf:
1c:9c:79:e8:c3:2e:37:5a:92:c6:8b:9f:e5:cf:15:
d5:cb:7b:30:ac:f8:26:74:9a:0a:9d:c6:51:fa:80:
98:3b:03:e1:c2:15:82:84:a7:ae:42:df:04:9d:ac:
f9:d8:28:29:b4:c9:40:9e:f7:29:a4:24:46:69:15:
73:48:d5:f6:0a:68:ee:97:2a:5a:64:f3:f0:d1:7f:
3f:b9:a7:d0:70:b1:5b:35:6f:92:d4:9a:72:04:57:
c7:e4:d5:6f:71:2d:fa:22:6b:06:ad:8a:de:23:4a:
c9:ad:a1:a6:e8:2a:bf:10:31:79:d9:14:27:45:05:
b4:d7:03:62:9e:35:8f:53:08:db:fd:7f:fe:5d:ef:
6a:70:d6:9f:fe:34:86:1a:30:86:7b:3f:74:d6:ca:
05:d6:eb:54:32:0e:5e:1f:6b:48:43:d2:7b:d9:e6:
16:69:2e:16:e5:02:0a:49:b6:3c:e8:2b:75:cf:63:
32:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F3:DB:8F:0B:6F:61:75:7F:DD:F7:93:3C:B3:6E:1A:E1:91:FD:58
X509v3 Authority Key Identifier:
keyid:25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133312e302f32342d3234203d3e2034333832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.93.131.0/24
Signature Algorithm: sha256WithRSAEncryption
51:4b:1c:79:a5:e5:33:e4:31:c8:5d:34:6a:ea:c7:cb:d0:38:
29:3f:5c:49:40:d3:10:e5:40:e0:ee:bd:cf:56:9c:f2:52:30:
17:63:09:12:d3:6b:05:34:0d:df:72:4c:75:57:bf:4d:a4:85:
85:2f:04:92:69:d2:12:58:09:84:20:a8:f7:be:2f:77:8b:be:
98:8d:ae:05:bb:50:6e:ce:90:59:71:b4:7f:91:47:27:8c:5d:
98:fb:fa:50:91:6a:e9:70:1b:10:6c:d5:ce:09:8c:78:9a:75:
75:89:4a:2d:04:e3:3b:80:34:7b:a0:c6:61:6b:4e:e9:ef:75:
03:4f:63:47:54:ce:1a:1a:98:d3:f2:b1:b9:1e:f6:7d:af:57:
50:5e:7e:3d:6e:43:04:1a:e1:62:73:71:5c:eb:cf:a7:40:fb:
36:26:41:ea:23:a7:44:61:a6:c8:77:97:c1:b0:c6:c3:0c:15:
95:ef:3b:6e:94:e7:e8:45:a0:7a:0b:b4:e7:53:d0:ea:e3:a1:
1e:7d:8f:d7:eb:a0:eb:7c:ee:68:f1:ec:46:23:9c:1d:02:10:
87:3b:05:86:e4:a3:59:7b:eb:60:f3:2f:30:67:2f:48:26:c2:
bc:7e:b4:78:57:4e:a5:06:ac:88:5f:04:2f:c6:99:26:65:7e:
9f:6f:04:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 03:16:25 2026 by rpki-client