
$ rpki-client -vvf rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/3232332e3133302e32332e302f32342d3234203d3e20313338313238.roa
File: 3232332e3133302e32332e302f32342d3234203d3e20313338313238.roa (raw, json)
Hash identifier: 5Rh6b8BHsmWIHG3vGb6jLaqPvuwWEBxRJQJuBZZsDT0=
Subject key identifier: F0:A5:32:F2:16:22:7F:C9:56:02:D4:F0:4C:D5:1F:5B:69:47:FC:99
Certificate issuer: /CN=1661480FF274E46E5E74274531EDCB741CA1C734
Certificate serial: 1B201C709DAD6DF2CC70EE82228B37E7B83BA00E
Authority key identifier: 16:61:48:0F:F2:74:E4:6E:5E:74:27:45:31:ED:CB:74:1C:A1:C7:34
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1661480FF274E46E5E74274531EDCB741CA1C734.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/3232332e3133302e32332e302f32342d3234203d3e20313338313238.roa
Signing time: Sun 03 May 2026 02:16:26 +0000
ROA not before: Sun 03 May 2026 02:11:26 +0000
ROA not after: Sun 02 May 2027 02:16:26 +0000
asID: 138128
IP address blocks: 223.130.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.crl
rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1661480FF274E46E5E74274531EDCB741CA1C734.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 05 May 2026 16:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:20:1c:70:9d:ad:6d:f2:cc:70:ee:82:22:8b:37:e7:b8:3b:a0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1661480FF274E46E5E74274531EDCB741CA1C734
Validity
Not Before: May 3 02:11:26 2026 GMT
Not After : May 2 02:16:26 2027 GMT
Subject: CN=F0A532F216227FC95602D4F04CD51F5B6947FC99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1c:ca:5c:39:ae:fd:b9:ff:65:da:eb:58:53:
49:d6:db:69:f1:f1:37:5f:a7:7a:82:6e:46:d7:ca:
b6:d7:9a:80:4b:07:45:1e:cd:87:d4:c1:6c:d5:5a:
48:3d:55:a1:9c:27:57:43:82:3d:6b:cf:b4:98:fe:
1a:c3:50:98:ad:66:96:fa:d3:06:1c:10:fc:69:1b:
b7:9a:25:42:c9:db:e3:15:66:ef:34:8b:77:ee:04:
96:d3:fd:78:cb:80:3d:23:52:97:15:a5:be:f5:68:
f8:24:b5:37:e5:e4:cc:ea:cb:b6:85:b9:2f:7e:1b:
fc:93:57:9e:05:55:e6:3a:4e:6a:33:60:77:9c:40:
f5:0f:60:48:4d:d2:b8:da:07:6b:f0:5f:30:ba:82:
a5:2d:ff:d4:ae:77:8d:f2:2f:4c:a6:5d:e5:22:d9:
34:d7:0c:fd:d7:e0:a6:a5:a7:80:a0:79:82:85:59:
ec:3a:b2:0b:46:08:db:a0:46:0d:33:b1:b8:16:ed:
d5:8e:a6:9e:a9:8e:62:63:ca:b4:1e:c5:96:16:4d:
9a:d5:47:ee:ea:ef:8f:28:8e:97:0b:d2:95:46:1d:
16:e5:de:6d:26:ab:3a:54:29:f0:e4:6e:1b:cc:86:
19:66:cb:9d:92:34:c8:73:69:f3:29:64:b6:62:d2:
79:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A5:32:F2:16:22:7F:C9:56:02:D4:F0:4C:D5:1F:5B:69:47:FC:99
X509v3 Authority Key Identifier:
keyid:16:61:48:0F:F2:74:E4:6E:5E:74:27:45:31:ED:CB:74:1C:A1:C7:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1661480FF274E46E5E74274531EDCB741CA1C734.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/3232332e3133302e32332e302f32342d3234203d3e20313338313238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.130.23.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:6f:e6:23:c5:60:d4:d7:1e:62:13:24:ae:72:bb:d8:76:ab:
61:5e:19:8b:5a:3b:a2:ae:56:c0:bf:90:56:f4:cc:8c:c9:98:
e8:60:c8:2c:33:88:e4:7b:80:64:99:3b:cf:5f:e1:f8:15:c2:
7e:3b:c2:a9:a8:b3:93:6f:9b:47:dd:c0:3a:c0:05:cd:f8:7a:
35:7c:7a:7e:3f:9a:7f:53:76:10:df:05:69:cf:32:01:cb:ea:
da:eb:96:ce:3c:fc:38:0a:72:cd:0a:8f:43:0d:91:f6:3c:d9:
78:b6:c3:97:73:42:e9:fd:07:a6:78:1e:20:f0:f4:57:71:f1:
d7:37:76:c0:5b:4d:a3:2f:1a:b2:20:3e:2e:df:63:fb:51:a3:
da:a0:65:38:31:7a:5f:d1:8b:fc:f6:3d:d6:05:ca:96:2f:ef:
4f:e6:6d:80:92:17:40:cd:89:45:ab:3a:46:64:12:71:67:9c:
23:9e:f4:61:bc:7e:34:a9:44:98:01:3c:cd:5e:f6:4c:99:1c:
b4:6d:cf:02:0a:6a:9b:fc:ec:60:44:eb:4d:04:5f:95:37:a8:
ee:bf:51:f0:93:b3:47:32:a5:0f:04:c5:76:1c:19:49:c6:ea:
fc:19:63:49:f9:e7:8f:4d:ff:d9:f4:b8:26:1b:c1:c4:88:f2:
e9:ad:ca:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 21:30:30 2026 by rpki-client