
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e34322e302f32332d3234203d3e2034343334.roa
File: 3230322e3135342e34322e302f32332d3234203d3e2034343334.roa (raw, json)
Hash identifier: ogzzrevJcM5KLeRh6+B5eGBgYDpVw3/eb69y7bdTYGk=
Subject key identifier: 2E:CD:91:E7:34:F6:9D:67:C1:44:1F:D9:C6:D8:AC:74:D7:00:1A:60
Certificate issuer: /CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E
Certificate serial: 1B987A4693988171C700672BF1268D86FC30A8DB
Authority key identifier: F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e34322e302f32332d3234203d3e2034343334.roa
Signing time: Sun 03 May 2026 02:36:01 +0000
ROA not before: Sun 03 May 2026 02:31:01 +0000
ROA not after: Sun 02 May 2027 02:36:01 +0000
asID: 4434
IP address blocks: 202.154.42.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl
rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 11:51:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:98:7a:46:93:98:81:71:c7:00:67:2b:f1:26:8d:86:fc:30:a8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E
Validity
Not Before: May 3 02:31:01 2026 GMT
Not After : May 2 02:36:01 2027 GMT
Subject: CN=2ECD91E734F69D67C1441FD9C6D8AC74D7001A60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:24:ff:c8:e9:a4:8d:8a:f2:8c:a0:96:c8:54:
7d:fe:61:9b:78:d9:3d:df:df:cf:87:92:f7:f5:a8:
01:fb:89:a9:ca:46:2e:56:6d:ac:e3:16:2e:2d:70:
d8:f3:30:28:f3:88:91:68:3b:5e:bc:8d:c0:33:6c:
bb:f0:80:69:5c:67:bc:0e:bc:56:3d:d8:67:36:c8:
51:60:90:82:8e:f2:8c:aa:a6:b1:30:c6:a1:f5:9c:
c8:e3:8a:26:95:4e:68:fe:09:87:78:15:7a:d6:bd:
88:15:33:f1:1f:94:c1:f8:ed:b2:9d:8f:46:74:5d:
b2:4a:b7:10:91:3e:21:25:3d:3a:a2:2b:76:e4:29:
36:d0:53:60:36:88:33:54:f8:89:16:6d:06:f7:bb:
79:1e:65:d5:9d:cf:11:43:5a:03:3e:94:16:59:0b:
56:1d:84:68:68:52:6f:2c:e7:62:a5:a3:78:55:6e:
d8:05:93:45:3e:63:d6:58:d4:2a:7d:02:c6:d0:a3:
89:0b:bf:d6:66:70:8d:df:86:4f:5a:eb:e5:92:8d:
95:9e:58:7b:63:1d:1e:97:91:89:9d:ae:9d:e0:d7:
cb:bd:62:4d:fb:86:0e:cd:f4:46:94:3c:87:7d:3a:
c1:34:dd:45:61:82:51:17:cc:6e:ce:93:94:37:f2:
09:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CD:91:E7:34:F6:9D:67:C1:44:1F:D9:C6:D8:AC:74:D7:00:1A:60
X509v3 Authority Key Identifier:
keyid:F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e34322e302f32332d3234203d3e2034343334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.154.42.0/23
Signature Algorithm: sha256WithRSAEncryption
26:27:77:a6:ca:e1:e9:d4:9b:ee:b2:7b:2e:46:68:f3:71:7e:
d4:90:1f:53:61:7a:d4:15:1d:10:e2:f2:19:54:05:0d:37:50:
44:2d:2d:95:37:60:e0:8d:71:fc:41:d4:31:a6:55:ce:1b:28:
23:16:28:3e:71:60:77:6c:e4:55:19:89:5b:d0:a9:ae:e1:d6:
88:ec:57:33:da:aa:78:34:80:4c:2e:34:5f:83:d6:ea:cd:33:
e1:05:d8:86:c7:7f:9d:be:26:49:d2:60:da:91:8a:58:1e:33:
d0:d2:f2:c0:4d:ba:bb:ac:4f:13:ff:0a:80:56:7f:3b:b8:f0:
1a:b0:5f:cf:13:24:d6:cb:08:b2:31:db:51:f6:00:09:20:f2:
8e:af:4c:aa:fc:ad:c4:ae:2b:ea:34:da:d4:f9:d6:49:33:e5:
ca:0d:23:07:83:cc:90:c6:57:79:79:2a:6e:8f:0b:5c:7c:00:
49:4d:b3:78:46:2c:0f:c1:89:97:f3:a2:76:45:49:56:d9:fd:
c9:5e:6e:07:d6:22:d2:28:a2:0e:d2:18:57:3d:b3:a9:44:d4:
7d:fd:a1:7d:2d:f6:e5:b7:0b:4b:27:71:29:85:68:da:6c:89:
a8:bd:ed:96:41:b2:04:66:20:31:d3:39:da:48:db:63:3d:e0:
ae:af:9d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 15:05:55 2026 by rpki-client