
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31382e302f32332d3234203d3e20313336313231.roa
File: 3230322e3135342e31382e302f32332d3234203d3e20313336313231.roa (raw, json)
Hash identifier: I8jB4rxWNrSmzkVbe4RoHG3IRbpZZey9vmU9TE/LTXs=
Subject key identifier: 18:21:D7:FB:B1:18:7F:3E:5F:F5:13:11:E6:4E:26:16:D8:D7:ED:02
Certificate issuer: /CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E
Certificate serial: 674C248870D5DA47342D094AE10CF5238ECD0BB8
Authority key identifier: F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31382e302f32332d3234203d3e20313336313231.roa
Signing time: Sun 03 May 2026 02:36:11 +0000
ROA not before: Sun 03 May 2026 02:31:11 +0000
ROA not after: Sun 02 May 2027 02:36:11 +0000
asID: 136121
IP address blocks: 202.154.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl
rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 11:51:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:4c:24:88:70:d5:da:47:34:2d:09:4a:e1:0c:f5:23:8e:cd:0b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E
Validity
Not Before: May 3 02:31:11 2026 GMT
Not After : May 2 02:36:11 2027 GMT
Subject: CN=1821D7FBB1187F3E5FF51311E64E2616D8D7ED02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e0:96:74:f8:83:5e:af:91:4b:18:aa:77:06:
62:db:4e:74:93:4d:08:84:42:b9:54:7a:d2:ad:ee:
53:d5:6a:38:f7:56:6c:5f:c3:6e:93:32:3f:6c:6f:
ad:e9:27:fd:ba:9e:86:c7:e7:a8:e2:8f:88:7e:fe:
9e:7c:78:16:92:3c:ac:72:e8:c3:fc:16:4d:76:a9:
7d:9a:00:15:fa:60:5a:46:39:0d:5c:dd:4b:d1:a8:
4a:66:a6:bc:89:97:e5:16:e1:9e:35:b6:32:de:55:
aa:ac:9b:e8:80:3b:49:ad:89:26:04:d9:51:f3:a4:
b4:e0:9d:4d:bc:7f:1f:ac:79:c6:f2:7f:97:2d:05:
e1:3f:73:57:7b:35:76:62:ea:01:6e:b3:6c:cf:60:
9a:0d:9e:22:f2:40:76:84:9e:50:94:7b:bf:c9:9a:
4e:8e:dd:46:22:e0:fd:75:1f:ea:5b:a7:92:b8:6a:
25:59:e2:f8:23:fb:cb:4f:0f:c2:54:ab:ee:18:1c:
55:78:d2:06:0e:25:0f:a7:a9:2e:9a:f2:ec:fc:e0:
90:d8:de:df:77:12:2c:f8:cf:4b:11:1a:87:8a:be:
7b:5d:38:78:83:a1:0c:5d:26:28:7e:ed:46:30:87:
fb:1f:3e:c7:56:84:64:c9:d3:70:f7:40:64:c6:42:
d1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:21:D7:FB:B1:18:7F:3E:5F:F5:13:11:E6:4E:26:16:D8:D7:ED:02
X509v3 Authority Key Identifier:
keyid:F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31382e302f32332d3234203d3e20313336313231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.154.18.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:0a:18:13:22:41:3e:45:15:3b:8d:40:7e:6a:af:86:68:c5:
89:3f:eb:44:b9:db:3e:20:d8:39:c4:8f:6e:b9:75:6b:e4:92:
fa:a2:b6:55:da:40:85:6e:24:38:4a:81:50:0f:75:fe:c5:d5:
fb:af:4d:7d:d2:b5:3c:bc:f6:62:d8:ee:20:e9:aa:8c:62:3f:
26:a8:dc:d3:db:0b:ee:64:d0:8a:be:9a:5e:2d:15:bb:d4:7e:
fd:2a:14:f7:b8:70:82:2b:18:49:97:6f:48:03:09:45:97:34:
6b:67:37:c3:48:4c:89:61:75:cb:b1:fd:e5:12:ee:7c:1b:4a:
90:9a:46:0e:41:cb:25:3a:96:04:79:f0:3d:38:67:1c:31:98:
1f:fb:7c:e3:ba:60:43:fd:ed:cf:7a:41:30:5b:17:61:66:a7:
36:42:ab:29:24:2a:61:ee:a7:a4:42:40:af:31:18:d0:c6:54:
bb:e9:95:a9:cc:78:c7:da:44:4c:81:c5:53:ac:a8:49:aa:ba:
03:8a:27:65:cb:a6:ca:7f:41:3f:59:b9:25:d4:e0:ba:13:f6:
28:97:65:5b:23:a9:85:5a:4a:49:e0:aa:a7:b7:16:02:03:35:
c4:b8:d9:47:68:0d:8b:af:b6:50:ff:b6:71:79:59:c5:f0:ba:
6c:c1:de:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 15:05:53 2026 by rpki-client