
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32362e302f32342d3234203d3e203435333036.roa
File: 3230322e39312e32362e302f32342d3234203d3e203435333036.roa (raw, json)
Hash identifier: lG+HzA8wMHoU2ig02QXs7ZI69uIfguD/pnzoKRQ6g1Q=
Subject key identifier: 5F:8E:E1:F1:67:1B:EB:A1:76:D8:7C:BF:6F:BF:62:9C:6E:ED:FB:00
Certificate issuer: /CN=7229DFE2E0A3A570A93521601EB1A61FC0CEAE07
Certificate serial: 27CD2A3BD55CA63CA0E4BC7C63534044F0CF37FB
Authority key identifier: 72:29:DF:E2:E0:A3:A5:70:A9:35:21:60:1E:B1:A6:1F:C0:CE:AE:07
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32362e302f32342d3234203d3e203435333036.roa
Signing time: Thu 29 Oct 2026 01:59:45 +0000
ROA not before: Thu 29 Oct 2026 01:54:45 +0000
ROA not after: Thu 28 Oct 2027 01:59:45 +0000
asID: 45306
IP address blocks: 202.91.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.crl
rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Nov 2026 01:37:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:cd:2a:3b:d5:5c:a6:3c:a0:e4:bc:7c:63:53:40:44:f0:cf:37:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7229DFE2E0A3A570A93521601EB1A61FC0CEAE07
Validity
Not Before: Oct 29 01:54:45 2026 GMT
Not After : Oct 28 01:59:45 2027 GMT
Subject: CN=5F8EE1F1671BEBA176D87CBF6FBF629C6EEDFB00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e1:07:a0:e9:08:0a:f3:50:2b:ca:81:0a:f6:
b4:cd:9e:3f:95:fc:1e:4b:5f:0f:df:b7:cd:0b:e6:
70:88:dc:a4:ef:32:42:7a:28:9e:5f:99:02:13:aa:
f6:19:98:1c:77:a5:f3:6e:be:f8:45:e7:c2:22:62:
6f:5e:17:11:d0:0c:87:e5:c6:22:fa:d2:fb:f2:8e:
4f:97:33:49:a5:83:9f:63:e3:b2:13:99:33:0d:d7:
54:4e:a0:12:d3:59:ed:94:83:fa:42:fe:b0:9d:7a:
54:85:06:06:ec:e6:32:97:e2:52:bb:54:c8:4a:e5:
0b:38:84:ef:93:00:1a:46:9c:38:b0:48:27:32:0f:
4a:65:04:90:a6:99:76:68:a0:9f:f6:dd:33:b6:c1:
28:ab:d5:9f:1f:b5:a3:ac:53:17:e1:b1:81:09:ed:
45:63:68:91:a8:20:cd:dd:d9:93:8c:ea:ba:99:96:
60:16:49:5e:2a:96:e2:d0:be:62:41:28:0f:76:16:
84:7a:4d:f1:5a:0e:e9:ee:c0:6f:01:ae:e9:64:c2:
38:8b:0d:d2:bc:79:9b:e1:3a:0f:73:e7:b3:7d:25:
8c:30:5c:f0:b8:19:17:b4:cd:e7:32:ee:ce:a5:89:
e3:59:9e:ac:88:1c:b3:fa:d4:6d:0b:80:cf:3d:73:
95:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8E:E1:F1:67:1B:EB:A1:76:D8:7C:BF:6F:BF:62:9C:6E:ED:FB:00
X509v3 Authority Key Identifier:
keyid:72:29:DF:E2:E0:A3:A5:70:A9:35:21:60:1E:B1:A6:1F:C0:CE:AE:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3230322e39312e32362e302f32342d3234203d3e203435333036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.91.26.0/24
Signature Algorithm: sha256WithRSAEncryption
34:5b:84:ed:e8:2b:70:6a:50:36:cd:83:87:b9:22:ce:b9:11:
4a:c9:6f:61:36:2e:87:94:2f:43:6e:cd:13:12:e5:e3:bd:f1:
48:9a:a5:50:bf:ba:01:c6:8d:4d:e7:26:92:c0:c1:3b:68:34:
fa:39:2c:9c:cf:dd:cb:22:39:c8:72:7c:41:2d:3d:4d:36:dd:
a8:9f:76:96:9b:38:fb:ec:be:02:14:a3:19:f8:98:1b:21:9e:
1d:4a:1b:8e:e6:85:97:3e:e1:71:22:86:ba:d9:ba:8f:d0:23:
00:10:38:cf:c4:6e:4d:c3:40:48:f8:66:77:c8:c3:93:e4:06:
64:4b:86:83:bb:52:1f:b9:b9:a6:4d:b4:d1:c4:ff:53:f8:f7:
ec:f1:44:88:64:44:a2:51:1b:7e:b6:98:e6:a2:b0:d3:ec:78:
de:80:0e:52:31:df:7e:e5:e8:b4:57:21:d5:ec:86:8f:f4:81:
cc:a4:4b:a6:15:93:5e:02:35:d3:7d:8a:c9:8d:21:91:e7:04:
df:11:19:19:ab:12:ad:0e:99:a2:d6:15:f7:7a:b3:39:d0:61:
04:6d:5a:c5:57:cf:b5:6c:a8:73:d7:78:c1:9e:8a:e6:63:86:
6e:74:52:26:1b:e5:c8:53:26:45:f2:b9:6f:dc:82:4b:34:34:
69:d4:c2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:28:12 2026 by rpki-client