
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e33322e302f32332d3234203d3e2034343334.roa
File: 3230322e3135342e33322e302f32332d3234203d3e2034343334.roa (raw, json)
Hash identifier: cCgeDdFst6wBJZznN241sxsMrFMFPoW+AwpT/Fq2ER0=
Subject key identifier: 75:DE:07:29:76:6D:2D:6C:89:8A:2C:B9:59:5A:38:AB:1B:B5:0F:E1
Certificate issuer: /CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E
Certificate serial: 55EECECABA81A93A4CDC80B2E5348742618F2A4D
Authority key identifier: F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e33322e302f32332d3234203d3e2034343334.roa
Signing time: Sun 03 May 2026 02:36:13 +0000
ROA not before: Sun 03 May 2026 02:31:13 +0000
ROA not after: Sun 02 May 2027 02:36:13 +0000
asID: 4434
IP address blocks: 202.154.32.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl
rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 11:51:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:ee:ce:ca:ba:81:a9:3a:4c:dc:80:b2:e5:34:87:42:61:8f:2a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E
Validity
Not Before: May 3 02:31:13 2026 GMT
Not After : May 2 02:36:13 2027 GMT
Subject: CN=75DE0729766D2D6C898A2CB9595A38AB1BB50FE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:72:53:56:4c:e8:59:9b:3c:7c:86:b2:e1:b9:
b1:3d:35:06:c1:0c:21:6c:ca:a2:ea:d0:a1:cc:80:
c7:5f:49:78:79:7a:49:be:dd:89:3e:3c:ef:17:ac:
d4:a9:eb:08:c9:34:74:a3:6d:17:e0:52:8d:d5:bc:
ea:1f:84:f4:56:1d:f8:69:e0:15:02:d7:53:ff:e4:
75:81:db:e7:ea:74:dd:59:7a:1d:cc:a3:fa:7d:50:
27:8a:6d:86:47:8b:82:ce:c2:68:64:5c:c4:6e:7a:
d5:f9:e1:38:21:d6:ce:03:2e:5d:22:1f:d7:db:2a:
31:b9:8a:7f:81:57:a0:9a:72:10:21:49:76:c2:73:
2c:96:28:2f:df:15:c9:bf:c0:b9:e7:70:3a:3a:f3:
d5:9f:f9:bd:ea:2f:04:5f:d2:95:19:26:e9:6a:5f:
58:b2:dd:67:a8:0e:4b:d1:2d:9d:5f:fc:41:2e:1d:
49:c9:bb:74:26:28:a1:de:83:4c:a5:61:60:b1:d5:
c4:3e:48:c4:24:2a:c9:75:e6:6f:8a:5b:4f:61:fb:
d8:27:24:d6:fd:06:18:d1:47:d2:77:30:27:93:02:
26:7f:8e:e4:a4:37:77:80:bc:7b:72:fb:c8:84:cc:
76:68:d8:a6:f4:b5:3c:18:01:62:3b:29:f9:cc:36:
2c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DE:07:29:76:6D:2D:6C:89:8A:2C:B9:59:5A:38:AB:1B:B5:0F:E1
X509v3 Authority Key Identifier:
keyid:F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e33322e302f32332d3234203d3e2034343334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.154.32.0/23
Signature Algorithm: sha256WithRSAEncryption
d4:e9:c4:f2:6b:50:2f:74:f7:9e:21:a8:db:1d:c6:1f:1a:6b:
2c:57:32:a4:3c:ea:f8:28:0f:c0:f3:1b:e7:f7:d3:58:21:18:
c4:0d:3c:e1:10:c4:5e:00:1c:98:db:35:cf:65:47:de:bb:f7:
89:f2:99:b0:a5:45:6d:97:2f:3c:ef:56:15:5f:49:bb:5f:a5:
9d:58:fb:37:c2:59:48:ec:35:5d:33:a1:ce:d7:33:e4:b5:bc:
c7:ba:32:03:10:db:32:87:7f:cd:6a:0e:bd:f4:98:0f:bc:f8:
60:31:eb:bc:96:70:45:35:1c:01:fd:4c:96:72:c2:58:2c:d5:
59:84:cd:74:4a:b0:69:cb:d3:12:eb:cf:70:d0:29:63:67:de:
27:51:78:f0:68:95:14:27:d7:3b:ce:71:fd:64:d5:6e:61:18:
5e:70:18:5f:05:88:16:56:e5:4c:c6:09:26:24:6c:e6:b3:6f:
47:e0:a4:68:0d:b1:ea:68:6f:10:b7:e3:ff:82:43:6e:66:4b:
13:09:58:8f:54:33:80:74:eb:7e:de:a0:85:b4:b3:df:14:92:
4d:d0:b2:d2:82:b9:eb:be:9d:20:94:cb:cd:c2:20:21:5e:cd:
57:c6:bd:91:f6:69:f9:cc:28:33:68:ed:87:4f:aa:58:32:b6:
3c:be:51:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 15:05:55 2026 by rpki-client