
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e35302e302f32332d3234203d3e2034343334.roa
File: 3230322e3135342e35302e302f32332d3234203d3e2034343334.roa (raw, json)
Hash identifier: Ow35uXIQltyULqg6jxugvu7jiBRcYcRgbR9R4vQM2dQ=
Subject key identifier: 76:A4:49:6E:83:C0:77:24:50:ED:85:44:90:3B:69:9F:9C:8A:BA:34
Certificate issuer: /CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E
Certificate serial: 624AF91D0615AEFE2CD90F62075B87B2ED1F2078
Authority key identifier: F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e35302e302f32332d3234203d3e2034343334.roa
Signing time: Sun 03 May 2026 02:36:01 +0000
ROA not before: Sun 03 May 2026 02:31:01 +0000
ROA not after: Sun 02 May 2027 02:36:01 +0000
asID: 4434
IP address blocks: 202.154.50.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl
rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 11:51:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:4a:f9:1d:06:15:ae:fe:2c:d9:0f:62:07:5b:87:b2:ed:1f:20:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E
Validity
Not Before: May 3 02:31:01 2026 GMT
Not After : May 2 02:36:01 2027 GMT
Subject: CN=76A4496E83C0772450ED8544903B699F9C8ABA34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c0:f3:df:81:07:b3:6d:39:c0:c4:ef:d7:8d:
fd:96:78:59:e0:aa:7e:27:90:8f:2b:87:31:2c:4f:
63:33:0a:00:c3:57:e6:ee:3a:31:16:9c:d2:b2:10:
d9:f9:be:df:11:f2:9e:92:63:86:41:73:f3:4d:27:
ff:3b:f1:8e:03:7e:09:ee:41:31:03:76:d7:b4:81:
03:24:33:6e:a9:93:21:cd:aa:6a:01:bf:b0:df:20:
40:8f:57:a6:aa:a9:b7:4c:dd:22:c3:3c:0f:4d:c4:
d4:05:a5:1f:a3:66:30:3b:98:af:cb:d6:51:d1:57:
61:4f:de:b9:d2:d9:90:89:dd:31:c6:ce:d9:e3:0f:
ef:83:92:40:33:21:b1:a2:f4:01:89:ad:d6:ed:a3:
e0:47:af:92:2b:f1:a5:10:d2:aa:42:17:91:64:fa:
3d:0f:28:70:2a:db:cd:32:a3:46:48:60:22:3e:ca:
42:f5:79:25:18:e5:2e:78:2e:bb:7e:cc:b7:ed:23:
80:de:28:21:71:e4:ce:15:57:72:3b:7e:07:ff:1f:
bb:72:b7:06:e6:86:f6:b8:1f:b5:1b:0d:82:15:dc:
91:0f:e1:ca:1e:5b:e0:ce:32:dc:9a:6f:a4:3b:49:
af:30:09:73:30:e6:ea:63:e2:7c:01:78:60:69:3c:
ad:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A4:49:6E:83:C0:77:24:50:ED:85:44:90:3B:69:9F:9C:8A:BA:34
X509v3 Authority Key Identifier:
keyid:F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e35302e302f32332d3234203d3e2034343334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.154.50.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:62:49:49:39:ac:e6:4a:e7:67:c6:a4:49:2b:9f:8d:b1:79:
ed:17:e8:9f:c3:08:8d:a1:10:c7:f9:d8:08:f2:bd:72:fe:c8:
05:f3:33:3e:db:61:97:67:95:70:da:88:41:1f:f0:1f:90:b5:
66:0e:0c:76:d0:a2:7e:a1:7f:ab:78:d8:72:71:ff:f8:37:18:
24:f1:fa:2e:df:f0:8e:1c:5c:07:8a:ab:b9:b1:2f:b0:ce:e8:
36:a5:b1:c4:ff:f9:40:0d:cf:a3:e4:c2:f4:1a:c9:6d:89:e9:
34:45:11:ec:82:1f:0a:b1:40:a6:6b:33:d9:3b:75:30:ff:2a:
da:df:12:e4:95:1e:19:92:80:12:8c:2c:b5:cf:97:83:fd:e0:
37:b3:80:58:ae:25:82:0c:43:b3:40:3c:0e:bc:19:fc:81:11:
d2:cc:1f:70:6a:b3:8e:ab:8f:cf:b3:0d:72:c0:cd:76:83:d5:
1f:94:eb:b9:e6:76:4b:62:57:04:c0:31:43:2f:1e:38:2a:14:
7b:21:71:73:33:a1:b3:aa:53:2f:c0:3c:26:aa:4e:09:c3:2b:
23:93:ec:70:c0:75:a0:93:b9:fa:fe:84:8d:dd:10:93:dc:9b:
41:9f:b9:d8:d2:42:6c:59:a6:52:96:73:f1:27:d9:5c:6a:42:
88:ac:b3:31
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUYkr5HQYVrv4s2Q9iB1uHsu0fIHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjkzRUUwOThDMDNEREVFQkJGQkZCNzcyNTBENjc3MkJF
REVGMjQ1RTAeFw0yNjA1MDMwMjMxMDFaFw0yNzA1MDIwMjM2MDFaMDMxMTAvBgNV
BAMTKDc2QTQ0OTZFODNDMDc3MjQ1MEVEODU0NDkwM0I2OTlGOUM4QUJBMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEwPPfgQezbTnAxO/Xjf2WeFng
qn4nkI8rhzEsT2MzCgDDV+buOjEWnNKyENn5vt8R8p6SY4ZBc/NNJ/878Y4Dfgnu
QTEDdte0gQMkM26pkyHNqmoBv7DfIECPV6aqqbdM3SLDPA9NxNQFpR+jZjA7mK/L
1lHRV2FP3rnS2ZCJ3THGztnjD++DkkAzIbGi9AGJrdbto+BHr5Ir8aUQ0qpCF5Fk
+j0PKHAq280yo0ZIYCI+ykL1eSUY5S54Lrt+zLftI4DeKCFx5M4VV3I7fgf/H7ty
twbmhva4H7UbDYIV3JEP4coeW+DOMtyab6Q7Sa8wCXMw5upj4nwBeGBpPK0XAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUdqRJboPAdyRQ7YVEkDtpn5yKujQwHwYDVR0j
BBgwFoAU+T7gmMA93uu/v7dyUNZ3K+3vJF4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWMwYzE0YTktM2E3Ny00OWUyLTkxOTQtNDhkMDkxMzQ1OGIyLzAvRjkzRUUwOThD
MDNEREVFQkJGQkZCNzcyNTBENjc3MkJFREVGMjQ1RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GOTNFRTA5OEMwM0RERUVCQkZCRkI3NzI1MEQ2NzcyQkVERUYy
NDVFLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVjMGMxNGE5LTNhNzctNDllMi05
MTk0LTQ4ZDA5MTM0NThiMi8wLzMyMzAzMjJlMzEzNTM0MmUzNTMwMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzQzNDMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHKmjIwDQYJKoZIhvcN
AQELBQADggEBAK1iSUk5rOZK52fGpEkrn42xee0X6J/DCI2hEMf52AjyvXL+yAXz
Mz7bYZdnlXDaiEEf8B+QtWYODHbQon6hf6t42HJx//g3GCTx+i7f8I4cXAeKq7mx
L7DO6DalscT/+UANz6PkwvQayW2J6TRFEeyCHwqxQKZrM9k7dTD/KtrfEuSVHhmS
gBKMLLXPl4P94DezgFiuJYIMQ7NAPA68GfyBEdLMH3Bqs46rj8+zDXLAzXaD1R+U
67nmdktiVwTAMUMvHjgqFHshcXMzobOqUy/APCaqTgnDKyOT7HDAdaCTufr+hI3d
EJPcm0GfudjSQmxZplKWc/En2VxqQoisszE=
-----END CERTIFICATE-----
Generated at Tue May 5 15:05:25 2026 by rpki-client