
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31362e302f32342d3234203d3e2034343334.roa
File: 3230322e3135342e31362e302f32342d3234203d3e2034343334.roa (raw, json)
Hash identifier: ClO/aQlAEHciXzfGZxF2Bn73UnLNx3cdudPkTp4BIoI=
Subject key identifier: 53:B7:FC:0E:A7:7E:85:EA:0C:52:56:DD:27:4C:7C:BC:71:6F:D0:02
Certificate issuer: /CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E
Certificate serial: 2E0618A5B0ADE3BCA8F6DF9E59519D275DF0AE44
Authority key identifier: F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31362e302f32342d3234203d3e2034343334.roa
Signing time: Sun 03 May 2026 02:36:08 +0000
ROA not before: Sun 03 May 2026 02:31:08 +0000
ROA not after: Sun 02 May 2027 02:36:08 +0000
asID: 4434
IP address blocks: 202.154.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl
rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 11:51:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:06:18:a5:b0:ad:e3:bc:a8:f6:df:9e:59:51:9d:27:5d:f0:ae:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E
Validity
Not Before: May 3 02:31:08 2026 GMT
Not After : May 2 02:36:08 2027 GMT
Subject: CN=53B7FC0EA77E85EA0C5256DD274C7CBC716FD002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6a:d8:aa:5f:50:52:a9:c6:36:83:0d:26:a0:
9c:39:41:2a:84:ed:63:b9:39:fa:85:31:d9:d6:85:
55:49:46:b8:bf:78:17:fe:29:3f:40:8a:27:92:d8:
08:ec:e5:ac:9b:79:f3:3d:e1:ab:aa:07:3c:24:fb:
32:27:a2:ab:96:a5:bb:01:74:00:61:98:ae:69:cf:
70:29:d9:f2:b0:1b:cb:bc:5a:96:d9:9d:ee:ec:69:
ab:ae:6d:45:be:8d:b0:9d:1d:55:05:26:6e:00:e0:
79:b2:f0:66:3a:47:4b:63:e7:7e:0a:95:07:b1:b1:
75:60:f1:72:28:65:59:22:e8:de:b6:2a:80:55:96:
26:1e:b7:38:d0:10:fa:65:29:f1:20:84:08:42:e4:
0f:24:fb:89:45:25:39:4e:80:d7:7c:5a:07:16:ab:
3d:37:8a:25:4b:e1:4b:59:e2:5d:cd:1b:28:88:6c:
52:2a:75:37:68:d4:31:14:3d:e3:de:df:99:9a:2a:
c6:74:1c:ae:33:fe:fe:fb:26:1b:89:d1:80:ca:48:
10:eb:07:f4:63:84:c3:82:15:45:7d:e4:01:3d:1d:
6b:23:4d:06:d3:9d:63:00:d9:9a:54:95:9f:5e:ef:
24:df:71:4c:59:5f:e4:b8:5d:7d:a8:b2:7e:69:78:
a7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B7:FC:0E:A7:7E:85:EA:0C:52:56:DD:27:4C:7C:BC:71:6F:D0:02
X509v3 Authority Key Identifier:
keyid:F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31362e302f32342d3234203d3e2034343334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.154.16.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:a4:42:ea:9b:4c:19:1b:8b:5b:33:dc:67:bd:ba:f3:8e:15:
1e:01:ef:7b:38:09:8d:33:c4:08:dc:33:f2:f0:2e:9d:8c:1a:
a9:78:2f:06:1b:d1:4c:84:6c:f0:6f:a3:cb:24:fc:d1:df:ec:
9a:c8:cb:72:b0:4e:23:e6:6e:2a:3a:86:3e:d2:74:73:05:6c:
1e:dd:d2:5c:b4:e5:8e:09:38:23:c1:3b:3b:47:0c:1b:2b:c0:
d7:9b:e9:e7:f6:4d:24:ac:77:9d:91:c7:d5:b9:a2:08:ac:e3:
d3:aa:43:41:1b:1f:ca:b5:87:e0:0b:7b:9e:c8:10:e8:11:e3:
32:05:c3:4d:7b:34:54:85:f8:c4:d1:32:3a:e2:82:6c:78:8e:
8d:ef:de:99:89:aa:b3:78:fe:aa:ef:ff:3b:8b:af:df:41:8a:
97:9a:e7:0d:64:da:b9:30:6d:68:bf:fd:82:65:d7:a1:71:bc:
6f:7c:da:b8:84:cb:8d:64:49:07:d3:36:f7:ca:70:b4:2f:82:
2a:a8:18:24:64:20:8f:fd:9e:97:da:88:35:e5:1b:aa:9a:60:
45:8c:6e:cc:f3:5e:26:44:73:bb:7c:51:72:4b:ab:95:cf:e7:
a5:cc:84:b0:b8:49:ca:ef:f1:69:7c:c0:35:23:8c:71:08:a6:
40:a7:2c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 15:05:41 2026 by rpki-client