
$ rpki-client -vvf rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3134322e302f32342d3234203d3e2034333832.roa
File: 3230322e39332e3134322e302f32342d3234203d3e2034333832.roa (raw, json)
Hash identifier: 1GOi0KPMqFlJFa1xPEu/J6WGo/8YFfXReaWdo3rhMrk=
Subject key identifier: 65:7C:26:3C:F8:1F:49:62:A3:AB:5B:64:4F:31:A5:F4:B2:10:67:2F
Certificate issuer: /CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404
Certificate serial: B83160D83ACD0035A6A203A5907E6FF39EB88D
Authority key identifier: 25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3134322e302f32342d3234203d3e2034333832.roa
Signing time: Sun 03 May 2026 02:16:14 +0000
ROA not before: Sun 03 May 2026 02:11:14 +0000
ROA not after: Sun 02 May 2027 02:16:14 +0000
asID: 4382
IP address blocks: 202.93.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl
rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 08 May 2026 14:52:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
b8:31:60:d8:3a:cd:00:35:a6:a2:03:a5:90:7e:6f:f3:9e:b8:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404
Validity
Not Before: May 3 02:11:14 2026 GMT
Not After : May 2 02:16:14 2027 GMT
Subject: CN=657C263CF81F4962A3AB5B644F31A5F4B210672F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:99:d9:ef:35:d4:62:2e:cd:00:c8:8a:f7:33:
be:8f:25:28:6c:10:a4:81:2c:75:c7:37:3d:1c:e0:
7b:d4:1d:95:b1:14:34:80:5b:8e:77:b9:6a:cc:dd:
40:ed:d4:57:6c:eb:36:f9:53:34:fd:cc:7d:ad:ea:
47:41:cd:97:51:ff:03:30:6d:33:27:2f:74:df:7f:
9d:e0:5f:0d:a5:d0:29:19:51:3d:12:79:f7:48:0c:
c5:f4:7c:28:be:ba:c0:e9:42:52:f3:e1:70:4b:c8:
bc:51:ae:b0:aa:18:da:e1:bf:6c:34:10:6c:d3:fb:
47:31:fd:b6:d1:af:dd:68:43:0d:30:7b:e9:8e:71:
2a:e7:bb:07:74:26:20:04:8f:e5:4d:c9:9c:4b:c2:
66:ef:55:2c:b6:fb:c3:d9:dd:ec:92:57:17:0e:10:
a9:a0:9c:8c:63:ca:39:36:d7:d8:c7:bd:99:87:56:
fc:85:08:de:fb:2f:8b:00:fe:7b:c9:e8:d7:94:33:
16:68:60:f6:b7:6d:44:ff:5f:5e:4f:f7:8f:c9:cd:
ad:ef:61:a6:59:54:d6:0a:a1:a3:99:d9:a2:d3:97:
ec:a7:6b:64:23:dd:cb:a2:e4:97:df:ac:82:fa:e7:
2e:ca:62:2c:4e:1d:58:51:d5:d6:a8:44:c6:63:ec:
90:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7C:26:3C:F8:1F:49:62:A3:AB:5B:64:4F:31:A5:F4:B2:10:67:2F
X509v3 Authority Key Identifier:
keyid:25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3134322e302f32342d3234203d3e2034333832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.93.142.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:eb:f0:25:20:41:dc:ad:d5:fb:65:55:47:96:df:d5:98:0d:
4c:dd:d5:76:a8:ce:9d:57:d0:ee:0d:96:c5:be:60:87:d4:59:
85:3f:96:b9:79:5d:d7:cd:3d:66:aa:c9:7e:79:b2:ab:c9:c7:
91:13:2c:de:cc:b3:2d:ec:95:f8:94:10:3d:43:4d:a2:c8:f3:
32:14:d9:ae:cf:65:15:1a:77:50:97:06:ad:48:4e:bc:c5:95:
43:3b:c3:69:a7:aa:fe:e4:89:b2:7f:04:42:a3:c4:c2:5c:91:
6e:c3:ee:7f:31:12:1f:0a:92:50:44:e4:0d:c1:92:cb:ef:b0:
dc:2d:7d:be:ef:b3:35:1a:68:a4:16:3c:55:fa:b3:76:c8:23:
ad:e0:41:9f:54:78:44:cd:74:9b:cb:26:b2:d6:44:0c:c7:6b:
ac:31:fb:d0:a2:d9:81:60:00:78:b4:00:d7:30:68:95:48:7a:
ea:5f:7e:69:4c:aa:43:ec:83:40:f9:4c:87:b2:ee:79:7f:7b:
24:25:c8:51:da:79:83:81:4d:42:00:a7:72:42:b3:7a:56:de:
df:d0:26:2a:45:cf:07:1c:f1:83:55:8d:64:80:29:d0:60:70:
7e:9e:e5:69:5d:c4:77:de:0c:29:45:ec:8c:7f:01:70:95:36:
f9:84:e5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 03:16:50 2026 by rpki-client