
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e362e302f32332d3234203d3e2034343334.roa
File: 3230322e3135342e362e302f32332d3234203d3e2034343334.roa (raw, json)
Hash identifier: eZg+G7Cu/EUoYYcO+4tJOQbTh1D1ftIMoiwi6/BxI1M=
Subject key identifier: FC:CA:2D:8E:DF:3B:93:E5:3A:C0:5E:84:AB:3B:12:00:9F:09:DF:AD
Certificate issuer: /CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E
Certificate serial: 0487D22AEB532D2A61FFBF3FFAEF3B9E6F5D20D1
Authority key identifier: F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e362e302f32332d3234203d3e2034343334.roa
Signing time: Sun 03 May 2026 02:36:10 +0000
ROA not before: Sun 03 May 2026 02:31:10 +0000
ROA not after: Sun 02 May 2027 02:36:10 +0000
asID: 4434
IP address blocks: 202.154.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl
rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 11:51:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:87:d2:2a:eb:53:2d:2a:61:ff:bf:3f:fa:ef:3b:9e:6f:5d:20:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F93EE098C03DDEEBBFBFB77250D6772BEDEF245E
Validity
Not Before: May 3 02:31:10 2026 GMT
Not After : May 2 02:36:10 2027 GMT
Subject: CN=FCCA2D8EDF3B93E53AC05E84AB3B12009F09DFAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2f:17:25:e3:15:06:a5:99:9b:b9:d9:2a:52:
bd:3d:66:4d:8f:62:50:8c:67:62:43:e7:25:8c:d1:
3c:b1:a3:86:45:1e:76:e8:2b:f1:59:38:30:44:9c:
05:c5:bc:b1:c6:8b:59:1f:8d:bd:e8:ec:1b:a4:88:
77:81:82:8a:80:11:01:78:34:2d:cf:20:b6:47:1e:
61:1c:d9:80:e9:e4:21:87:21:4a:48:e4:ee:45:d3:
ed:0e:68:e7:64:82:65:83:a4:dd:cf:41:de:d9:67:
0e:ff:81:c7:b4:9d:2d:eb:e9:1c:67:57:62:34:03:
86:da:a1:2a:6f:0c:90:aa:f6:57:26:8e:c2:1a:9c:
f0:65:0a:a7:f1:3e:bf:ef:7f:85:34:3d:f5:eb:cc:
ad:8c:58:d1:00:c3:b5:e3:90:22:c9:b2:b8:03:22:
14:78:45:c1:0b:c5:22:7a:15:6d:99:0a:bf:ed:81:
51:8d:9d:69:61:c3:e1:f6:21:a9:48:dd:17:7a:c7:
39:73:01:98:1c:df:6d:6b:8e:11:4c:3a:a9:1c:4a:
88:a5:1e:7e:db:85:80:10:12:71:c9:d2:a3:99:9d:
0e:07:a1:ad:5f:6e:21:9d:ce:a5:72:f8:7f:18:07:
bc:bf:61:ea:11:59:a1:f0:7e:e7:6c:a0:12:ac:47:
14:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CA:2D:8E:DF:3B:93:E5:3A:C0:5E:84:AB:3B:12:00:9F:09:DF:AD
X509v3 Authority Key Identifier:
keyid:F9:3E:E0:98:C0:3D:DE:EB:BF:BF:B7:72:50:D6:77:2B:ED:EF:24:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F93EE098C03DDEEBBFBFB77250D6772BEDEF245E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e362e302f32332d3234203d3e2034343334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.154.6.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:eb:16:bf:6e:7b:fe:ca:06:67:27:21:6c:43:f8:07:ac:25:
ab:9f:d8:98:c1:6a:c5:65:1b:f2:76:28:2e:8e:d5:5e:9f:39:
6e:e6:3c:ab:6d:47:8a:c4:45:ba:f8:12:9b:e0:9d:ed:5d:0c:
01:00:b3:84:e4:a6:6a:8b:98:36:11:a4:df:47:c0:d8:27:dd:
b0:3f:01:c6:38:5c:7b:10:2d:7a:d7:93:01:f8:ae:4f:3f:ef:
0b:11:1d:64:df:37:75:0e:c9:08:76:6a:f8:51:c5:7f:bc:6c:
0f:8b:4c:d6:e8:58:cf:ab:23:6e:71:58:93:be:64:56:83:1f:
dc:45:1b:5d:19:c4:b0:9f:87:7c:58:92:be:d1:b5:81:84:e4:
c3:27:00:d2:68:87:ae:7b:22:fb:3f:c9:ee:d9:71:51:88:0d:
15:97:c8:32:77:18:c5:10:d0:38:eb:4e:4e:78:65:2f:70:df:
71:dc:fb:37:ed:f7:b3:d4:54:4f:6c:6b:5f:e3:f4:64:79:b4:
7f:04:54:87:1c:8b:f3:0f:c6:ef:3c:e8:16:0c:8c:2b:30:08:
34:d8:39:b0:8f:52:f0:1a:55:b5:72:0c:4d:85:ea:91:bc:48:
fe:64:5d:ca:36:a2:d7:25:ae:8b:54:71:eb:24:9e:53:22:6d:
8c:4a:1d:48
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUBIfSKutTLSph/78/+u87nm9dINEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjkzRUUwOThDMDNEREVFQkJGQkZCNzcyNTBENjc3MkJF
REVGMjQ1RTAeFw0yNjA1MDMwMjMxMTBaFw0yNzA1MDIwMjM2MTBaMDMxMTAvBgNV
BAMTKEZDQ0EyRDhFREYzQjkzRTUzQUMwNUU4NEFCM0IxMjAwOUYwOURGQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJLxcl4xUGpZmbudkqUr09Zk2P
YlCMZ2JD5yWM0Tyxo4ZFHnboK/FZODBEnAXFvLHGi1kfjb3o7BukiHeBgoqAEQF4
NC3PILZHHmEc2YDp5CGHIUpI5O5F0+0OaOdkgmWDpN3PQd7ZZw7/gce0nS3r6Rxn
V2I0A4baoSpvDJCq9lcmjsIanPBlCqfxPr/vf4U0PfXrzK2MWNEAw7XjkCLJsrgD
IhR4RcELxSJ6FW2ZCr/tgVGNnWlhw+H2IalI3Rd6xzlzAZgc321rjhFMOqkcSoil
Hn7bhYAQEnHJ0qOZnQ4Hoa1fbiGdzqVy+H8YB7y/YeoRWaHwfudsoBKsRxRTAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQU/Motjt87k+U6wF6EqzsSAJ8J360wHwYDVR0j
BBgwFoAU+T7gmMA93uu/v7dyUNZ3K+3vJF4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWMwYzE0YTktM2E3Ny00OWUyLTkxOTQtNDhkMDkxMzQ1OGIyLzAvRjkzRUUwOThD
MDNEREVFQkJGQkZCNzcyNTBENjc3MkJFREVGMjQ1RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GOTNFRTA5OEMwM0RERUVCQkZCRkI3NzI1MEQ2NzcyQkVERUYy
NDVFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9yc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWMwYzE0YTktM2E3Ny00OWUyLTkx
OTQtNDhkMDkxMzQ1OGIyLzAvMzIzMDMyMmUzMTM1MzQyZTM2MmUzMDJmMzIzMzJk
MzIzNDIwM2QzZTIwMzQzNDMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHKmgYwDQYJKoZIhvcNAQEL
BQADggEBAKjrFr9ue/7KBmcnIWxD+AesJauf2JjBasVlG/J2KC6O1V6fOW7mPKtt
R4rERbr4Epvgne1dDAEAs4TkpmqLmDYRpN9HwNgn3bA/AcY4XHsQLXrXkwH4rk8/
7wsRHWTfN3UOyQh2avhRxX+8bA+LTNboWM+rI25xWJO+ZFaDH9xFG10ZxLCfh3xY
kr7RtYGE5MMnANJoh657Ivs/ye7ZcVGIDRWXyDJ3GMUQ0DjrTk54ZS9w33Hc+zft
97PUVE9sa1/j9GR5tH8EVIcci/MPxu886BYMjCswCDTYObCPUvAaVbVyDE2F6pG8
SP5kXco2otclrotUcesknlMibYxKHUg=
-----END CERTIFICATE-----
Generated at Tue May 5 15:05:00 2026 by rpki-client