
$ rpki-client -vvf rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133322e302f32342d3234203d3e2034333832.roa
File: 3230322e39332e3133322e302f32342d3234203d3e2034333832.roa (raw, json)
Hash identifier: yogqlIBUcGwqvPyK5arWetAJIbHveLQtDXqk1GIkHHk=
Subject key identifier: CE:CE:C0:9D:10:AF:F2:A7:82:E8:A1:51:27:E9:02:85:1A:4A:44:3E
Certificate issuer: /CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404
Certificate serial: 6B005C995CB779E745C487D0F677F8F11CE56B00
Authority key identifier: 25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133322e302f32342d3234203d3e2034333832.roa
Signing time: Sun 03 May 2026 02:16:16 +0000
ROA not before: Sun 03 May 2026 02:11:16 +0000
ROA not after: Sun 02 May 2027 02:16:16 +0000
asID: 4382
IP address blocks: 202.93.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl
rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 08 May 2026 14:52:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:00:5c:99:5c:b7:79:e7:45:c4:87:d0:f6:77:f8:f1:1c:e5:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404
Validity
Not Before: May 3 02:11:16 2026 GMT
Not After : May 2 02:16:16 2027 GMT
Subject: CN=CECEC09D10AFF2A782E8A15127E902851A4A443E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:08:a2:59:b7:55:c9:01:3c:9a:9b:4c:43:b3:
e9:14:d4:d7:d2:13:5b:f3:8c:86:b7:93:26:df:97:
6a:3c:b2:70:28:2d:0b:26:b5:5e:a6:24:99:f0:ef:
8e:f1:2c:ec:5b:13:cb:9c:68:2c:4d:30:94:4d:b0:
39:7b:60:ea:06:7c:52:68:b3:69:6a:a2:74:5f:39:
70:fd:20:82:82:0f:1f:f2:68:90:b3:b5:26:94:db:
5b:73:90:fe:98:bc:b5:4d:d5:62:ba:c5:f9:83:ea:
55:6c:e3:89:88:eb:8f:99:fd:fe:49:29:9b:76:99:
bd:29:1a:08:7e:46:2a:56:83:06:ed:c8:8b:f4:a2:
17:e1:a4:af:72:b7:e0:38:3b:8e:41:d4:53:d9:82:
4f:3a:53:a7:ed:4d:f5:25:71:b5:65:71:e9:ee:41:
76:77:42:7c:24:d6:99:ab:7b:e2:cb:e7:20:41:c7:
6f:2a:98:82:08:a2:5e:ff:86:dd:4f:7d:b4:c5:6d:
c2:c3:24:2f:84:64:82:71:e0:e8:65:52:31:59:0a:
0d:e2:50:35:18:9b:49:90:87:df:a6:ed:81:6e:4c:
24:d5:0f:3b:28:1a:40:3e:ca:5c:7d:13:f7:12:d7:
49:3d:07:d8:44:cf:6c:b6:f2:a9:02:dc:25:e3:0c:
74:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CE:C0:9D:10:AF:F2:A7:82:E8:A1:51:27:E9:02:85:1A:4A:44:3E
X509v3 Authority Key Identifier:
keyid:25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133322e302f32342d3234203d3e2034333832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.93.132.0/24
Signature Algorithm: sha256WithRSAEncryption
41:e5:41:60:14:be:1b:98:43:15:6f:6a:69:7a:20:bb:27:18:
93:fc:56:d0:b3:be:1f:51:6a:94:69:d4:a6:0d:a5:b6:1e:86:
0f:58:ce:57:13:51:22:43:1c:66:5d:5b:de:35:34:a4:3a:ec:
70:b6:d1:ab:ff:b3:bc:04:15:78:66:70:dd:b5:3e:41:ef:36:
69:b6:22:bb:83:bf:78:19:2b:bd:3e:30:da:ee:06:ca:ac:34:
c4:48:6a:23:13:f4:92:69:1d:e0:b6:65:15:fe:6b:4c:c7:2f:
43:14:8a:4f:cb:bb:f1:78:ff:99:4f:66:d1:c3:8d:fa:0e:76:
2e:f6:2b:d3:74:de:2a:9d:88:30:56:93:ae:0a:d5:dd:43:d4:
1e:d6:a9:2d:d3:de:49:85:26:13:7d:43:4c:2a:47:73:56:be:
9d:18:17:e0:20:e3:2b:c4:93:56:af:a2:f0:68:ee:f0:56:22:
bf:36:11:32:fa:46:02:88:3d:9b:0f:63:3c:33:05:6d:32:89:
3d:01:9c:b3:44:ae:b7:ca:3e:ba:bc:73:b1:ac:db:24:57:f7:
0a:ef:38:5b:8a:db:c6:a8:85:6c:1d:39:d2:3c:0b:94:ea:16:
b5:c1:e5:73:e7:77:fe:23:67:ef:b0:be:f2:f0:8c:70:2a:f6:
3f:26:31:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 03:16:51 2026 by rpki-client