
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35322e31312e302f32342d3234203d3e203137363731.roa
File: 3230322e35322e31312e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier: Zhuaw0meKgIYwBz0NVzx9t1+Phs9g0kmVT4IDcU6daw=
Subject key identifier: 61:92:3A:E4:18:8B:48:D2:9A:7D:2C:F6:6A:BF:41:1B:DF:29:BF:C4
Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial: 2048CDDB3DE043B8A4DEF7BA6AAED0256E9D1F46
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35322e31312e302f32342d3234203d3e203137363731.roa
Signing time: Thu 16 Apr 2026 11:03:26 +0000
ROA not before: Thu 16 Apr 2026 10:58:26 +0000
ROA not after: Thu 15 Apr 2027 11:03:26 +0000
asID: 17671
IP address blocks: 202.52.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 04:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:48:cd:db:3d:e0:43:b8:a4:de:f7:ba:6a:ae:d0:25:6e:9d:1f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Validity
Not Before: Apr 16 10:58:26 2026 GMT
Not After : Apr 15 11:03:26 2027 GMT
Subject: CN=61923AE4188B48D29A7D2CF66ABF411BDF29BFC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:c4:56:3b:3f:1d:1d:e0:b1:27:93:00:ba:
14:0f:5e:a2:c4:53:de:7f:75:9d:dd:f1:d4:c2:3d:
e9:97:76:17:7f:4a:e8:fc:94:3a:91:d6:d9:59:00:
68:f6:72:a1:cd:e0:83:5a:2e:5a:ac:5a:5f:79:fd:
67:88:81:73:2f:c3:bc:95:7d:b9:d3:2e:5f:39:4f:
07:1d:be:07:2d:0e:9d:5c:8a:87:3d:bc:2c:f2:9b:
34:11:0b:16:8d:08:6b:8c:bd:c4:8e:3a:2f:b1:d8:
15:1c:ed:c7:cf:1c:f9:18:15:21:d5:c5:35:82:96:
e1:eb:94:21:d6:82:c0:51:43:97:ea:1d:a1:ca:a4:
24:8b:75:1d:a0:7c:ff:64:cc:de:a6:58:64:2d:13:
77:b4:88:db:8f:9d:5b:90:7a:4e:7c:73:00:4a:b9:
ae:88:0c:e6:67:0e:7d:ee:86:92:4d:59:c6:29:45:
2e:5e:83:8b:6b:05:12:af:79:e7:8b:a6:92:c9:44:
e6:67:44:5c:7d:fa:6e:1b:1b:f4:7e:a7:60:e8:72:
ed:b6:e8:f4:1c:3e:37:dd:d7:99:5f:8a:57:b4:6e:
6a:ed:48:9f:63:64:30:8d:63:58:93:0a:1c:e4:d1:
c7:be:7d:22:46:f6:0a:98:8a:3d:53:24:d2:90:20:
8f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:92:3A:E4:18:8B:48:D2:9A:7D:2C:F6:6A:BF:41:1B:DF:29:BF:C4
X509v3 Authority Key Identifier:
keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e35322e31312e302f32342d3234203d3e203137363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.52.11.0/24
Signature Algorithm: sha256WithRSAEncryption
84:0d:f9:07:3e:e3:9e:a6:52:a3:80:77:0b:12:75:86:b6:ec:
27:d2:b4:a5:b9:4c:cb:04:54:96:e1:93:b9:55:09:ad:8c:f1:
c1:e2:d3:7e:63:41:05:c9:29:e7:60:64:eb:0c:07:f4:86:fc:
94:65:56:2a:82:37:68:f0:e9:06:d1:77:54:3e:08:e6:a8:d5:
5b:7b:46:2a:4a:b1:e0:b5:74:a9:e8:52:4a:dd:02:a6:04:2c:
b7:7e:e9:ff:ea:56:22:52:12:b3:bc:15:1d:e8:16:f9:41:76:
a6:38:a4:0e:01:9a:a5:b9:68:14:b3:db:81:db:6d:1d:f8:5f:
be:0f:9b:5b:45:5b:79:ef:97:73:c8:e1:24:45:24:46:d5:0c:
94:70:4b:e6:d3:f4:51:3e:11:32:d0:78:7b:40:fa:bb:84:6e:
dd:be:cb:01:f6:ba:b2:5e:5e:7c:d4:57:eb:bb:23:be:a6:b8:
b6:e1:73:88:2d:a1:df:86:fb:db:25:f6:12:63:80:e0:3a:35:
55:a3:03:f1:ea:7d:0c:47:4b:e0:d4:1e:72:b0:cc:6e:35:60:
16:7d:ed:73:2d:c9:d9:87:87:b4:38:cd:4c:3c:9f:3e:51:12:
1d:e9:52:ac:f7:b2:27:27:39:80:7d:c3:8d:05:43:b7:ec:dc:
ac:7d:bf:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:47:45 2026 by rpki-client