
$ rpki-client -vvf rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133352e302f32342d3234203d3e2034333832.roa
File: 3230322e39332e3133352e302f32342d3234203d3e2034333832.roa (raw, json)
Hash identifier: DCPg6Ceyq9c+k2hdqM6DEY3nNAcqnqv/oWZOgjUDo90=
Subject key identifier: 2F:E0:E2:A6:D0:42:F5:7D:FC:15:CA:50:F9:28:1F:91:99:1F:E3:5C
Certificate issuer: /CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404
Certificate serial: 2F1ACB8E0DA421E49C98D004FDA1C18E771D3938
Authority key identifier: 25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133352e302f32342d3234203d3e2034333832.roa
Signing time: Sun 03 May 2026 02:16:14 +0000
ROA not before: Sun 03 May 2026 02:11:14 +0000
ROA not after: Sun 02 May 2027 02:16:14 +0000
asID: 4382
IP address blocks: 202.93.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl
rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 08 May 2026 14:52:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:1a:cb:8e:0d:a4:21:e4:9c:98:d0:04:fd:a1:c1:8e:77:1d:39:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404
Validity
Not Before: May 3 02:11:14 2026 GMT
Not After : May 2 02:16:14 2027 GMT
Subject: CN=2FE0E2A6D042F57DFC15CA50F9281F91991FE35C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3d:9b:bf:b9:af:e4:e4:b1:8b:0e:9a:27:ca:
91:03:ab:92:52:cc:fa:48:43:28:a8:7d:01:26:88:
96:1c:99:15:cc:2b:71:1f:b0:53:8d:be:95:e5:2f:
50:ad:f8:f5:3e:7b:a9:7d:dc:8c:a9:ff:71:6a:67:
f6:cd:bf:4c:49:03:55:68:dc:f4:26:a9:8f:94:49:
ad:1c:a3:bb:40:55:ca:12:1e:b2:80:b8:7a:de:25:
4f:9b:46:6c:35:a8:9b:1a:2c:f6:2f:9a:c6:1f:9a:
a3:f9:c3:71:f9:52:14:1d:1f:ed:aa:c7:be:b8:ea:
36:57:46:9a:6f:40:87:16:a9:d1:bf:18:28:26:67:
03:39:a6:80:4f:0d:81:e5:8a:34:a6:1e:84:59:4b:
26:98:7e:4c:96:d4:a3:ea:3d:57:36:1a:bd:f2:0b:
a6:01:3e:1d:65:cd:2d:f4:28:f5:4a:d1:b4:ee:c5:
b2:ec:b0:83:ae:44:a1:e1:02:24:40:2e:7d:79:8e:
ee:a8:50:5e:46:6d:bf:27:c3:36:92:a3:d2:62:7f:
57:fb:ee:21:6a:96:4a:52:31:4f:15:cf:97:cf:79:
e5:c6:57:ad:e8:03:bf:51:ba:c3:b9:8c:c0:43:3e:
0a:ef:70:5b:ed:9e:4b:24:48:4a:59:92:ee:ec:90:
43:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E0:E2:A6:D0:42:F5:7D:FC:15:CA:50:F9:28:1F:91:99:1F:E3:5C
X509v3 Authority Key Identifier:
keyid:25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133352e302f32342d3234203d3e2034333832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.93.135.0/24
Signature Algorithm: sha256WithRSAEncryption
99:3e:b8:a0:28:ba:17:dd:26:ad:b0:61:8c:96:77:9c:47:1b:
57:5f:e9:1f:57:64:ef:eb:89:a0:f9:30:ce:93:32:b2:b8:3c:
d5:b0:e5:89:5e:2f:73:74:54:82:a4:14:f3:04:47:45:8e:4f:
0b:ad:f0:1c:b9:0f:b2:bf:24:8f:11:59:b1:a1:cf:4d:bc:5f:
ef:a0:fa:08:a6:17:84:eb:e8:55:e6:4b:0d:4b:78:b6:52:f5:
84:87:16:b6:77:b4:11:8f:57:0c:f7:14:ff:28:1f:25:bc:80:
5d:cb:b0:c8:7c:32:fb:81:42:52:71:33:bb:5c:3e:c7:6a:45:
f6:2b:76:51:2c:17:77:57:f8:08:65:6e:4d:8f:9d:af:dc:51:
92:f2:00:a8:c9:6a:77:73:52:8d:de:6b:55:d7:c4:dd:cf:f4:
4a:2d:d1:ed:a7:19:2f:3f:25:73:57:f3:ba:e7:9d:80:f8:f3:
32:78:79:9f:16:2d:19:e3:e4:d5:50:94:7c:b3:d7:0e:64:d0:
a5:bd:a5:36:c6:02:51:75:fa:5d:df:b4:fb:9e:26:b6:e1:7d:
57:50:86:04:37:f1:61:d4:8c:76:27:28:83:d1:69:69:aa:61:
b3:15:93:f7:00:96:b0:31:3d:d0:2e:21:72:58:4c:c1:0c:b0:
e4:d5:63:29
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIULxrLjg2kIeScmNAE/aHBjncdOTgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjUyODM3Q0ExNDRCM0VFN0RCMjQzRUJDQjBDMTBGODE4
QTRFRTQwNDAeFw0yNjA1MDMwMjExMTRaFw0yNzA1MDIwMjE2MTRaMDMxMTAvBgNV
BAMTKDJGRTBFMkE2RDA0MkY1N0RGQzE1Q0E1MEY5MjgxRjkxOTkxRkUzNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoPZu/ua/k5LGLDponypEDq5JS
zPpIQyiofQEmiJYcmRXMK3EfsFONvpXlL1Ct+PU+e6l93Iyp/3FqZ/bNv0xJA1Vo
3PQmqY+USa0co7tAVcoSHrKAuHreJU+bRmw1qJsaLPYvmsYfmqP5w3H5UhQdH+2q
x7646jZXRppvQIcWqdG/GCgmZwM5poBPDYHlijSmHoRZSyaYfkyW1KPqPVc2Gr3y
C6YBPh1lzS30KPVK0bTuxbLssIOuRKHhAiRALn15ju6oUF5Gbb8nwzaSo9Jif1f7
7iFqlkpSMU8Vz5fPeeXGV63oA79RusO5jMBDPgrvcFvtnkskSEpZku7skEMnAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUL+DiptBC9X38FcpQ+SgfkZkf41wwHwYDVR0j
BBgwFoAUJSg3yhRLPufbJD68sMEPgYpO5AQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTg2YjM4ODktNjk2Ni00NWVmLTkwNzMtYWQxNDAxMWFjM2IyLzAvMjUyODM3Q0Ex
NDRCM0VFN0RCMjQzRUJDQjBDMTBGODE4QTRFRTQwNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yNTI4MzdDQTE0NEIzRUU3REIyNDNFQkNCMEMxMEY4MThBNEVF
NDA0LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE4NmIzODg5LTY5NjYtNDVlZi05
MDczLWFkMTQwMTFhYzNiMi8wLzMyMzAzMjJlMzkzMzJlMzEzMzM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzMzM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKXYcwDQYJKoZIhvcN
AQELBQADggEBAJk+uKAouhfdJq2wYYyWd5xHG1df6R9XZO/riaD5MM6TMrK4PNWw
5YleL3N0VIKkFPMER0WOTwut8By5D7K/JI8RWbGhz028X++g+gimF4Tr6FXmSw1L
eLZS9YSHFrZ3tBGPVwz3FP8oHyW8gF3LsMh8MvuBQlJxM7tcPsdqRfYrdlEsF3dX
+Ahlbk2Pna/cUZLyAKjJandzUo3ea1XXxN3P9Eot0e2nGS8/JXNX87rnnYD48zJ4
eZ8WLRnj5NVQlHyz1w5k0KW9pTbGAlF1+l3ftPueJrbhfVdQhgQ38WHUjHYnKIPR
aWmqYbMVk/cAlrAxPdAuIXJYTMEMsOTVYyk=
-----END CERTIFICATE-----
Generated at Fri May 8 03:16:22 2026 by rpki-client