
$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136332e302f32342d3234203d3e203137373237.roa
File: 3230322e35392e3136332e302f32342d3234203d3e203137373237.roa (raw, json)
Hash identifier: EIpHq8vGUvltP9OvaWCBV+gV5NFc9bciWbQ4v8j++is=
Subject key identifier: 9A:56:E0:A8:1F:DE:01:A9:94:D6:13:23:83:A1:94:F7:3B:68:8A:C2
Certificate issuer: /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Certificate serial: 2E5760D32EF424289B7FF478B4631D5941789830
Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136332e302f32342d3234203d3e203137373237.roa
Signing time: Sun 03 May 2026 02:38:32 +0000
ROA not before: Sun 03 May 2026 02:33:32 +0000
ROA not after: Sun 02 May 2027 02:38:32 +0000
asID: 17727
IP address blocks: 202.59.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 07 May 2026 23:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:57:60:d3:2e:f4:24:28:9b:7f:f4:78:b4:63:1d:59:41:78:98:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Validity
Not Before: May 3 02:33:32 2026 GMT
Not After : May 2 02:38:32 2027 GMT
Subject: CN=9A56E0A81FDE01A994D6132383A194F73B688AC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:29:e1:73:f0:fc:71:05:7f:92:40:87:73:58:
de:2c:57:eb:bf:8c:e0:73:7e:3c:09:03:eb:d7:ef:
f8:99:ba:77:6c:97:a6:d7:4f:70:68:62:55:2d:47:
38:bc:d2:81:97:8c:3e:f2:39:45:04:db:50:62:55:
68:41:b4:28:86:98:1c:a6:7e:9c:e0:51:99:44:a8:
6c:ae:97:63:18:5f:22:0f:b4:2c:a1:e9:fd:bf:94:
6e:38:5b:21:23:3b:f7:eb:c8:a9:ed:9d:7c:3f:08:
09:a6:59:24:15:fa:96:1e:9f:57:56:23:99:91:e1:
e0:c0:ca:f1:9b:45:cc:00:9a:af:c2:5d:36:6e:da:
dc:57:63:16:6f:03:5c:db:fe:29:aa:d9:be:18:6b:
d6:1f:ea:fd:94:c3:31:31:11:c0:5a:80:90:36:29:
00:b5:12:b7:7b:77:a2:f2:34:8b:80:04:33:76:30:
d8:f7:92:0e:da:dd:e3:03:79:a5:a3:41:9a:6b:9d:
db:96:18:9c:2d:f4:b1:76:9c:59:8f:bc:9f:9f:92:
98:3f:27:a2:82:d9:85:c3:d7:c2:a2:c6:50:48:1f:
b5:b8:9e:12:c5:c6:b4:60:de:fc:09:f1:3f:d5:22:
3c:ee:c1:40:60:c4:d7:31:d7:d1:b8:b2:8a:bf:3c:
f9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:56:E0:A8:1F:DE:01:A9:94:D6:13:23:83:A1:94:F7:3B:68:8A:C2
X509v3 Authority Key Identifier:
keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136332e302f32342d3234203d3e203137373237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.59.163.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:84:a3:ae:01:c3:f1:f8:78:88:69:bf:02:ad:a4:25:5e:1f:
d2:4e:14:96:b9:ae:e6:f4:c1:e1:ab:c6:76:c0:13:d6:6c:b6:
4e:05:e1:f8:a8:10:8f:02:aa:be:21:f4:08:45:91:e4:f1:30:
fa:14:65:a0:16:22:b1:6e:ef:16:5b:fc:b5:df:23:a6:3a:26:
4c:1f:83:32:1a:a5:a7:c6:9a:3b:29:8e:8d:94:be:5b:07:76:
a5:ca:f6:a4:d1:54:59:72:9e:7f:4c:68:92:19:54:db:b0:34:
f4:cb:54:e7:46:33:e0:73:b5:72:fe:74:73:ad:4e:ca:f4:e4:
56:87:26:2c:b1:0d:b9:78:35:a9:0b:58:7f:71:30:08:a8:40:
c6:1a:b0:05:f1:e9:59:ed:5d:de:bb:dd:8e:55:5a:e8:61:14:
5d:48:83:6c:ee:d1:59:08:87:b1:91:26:50:2e:90:79:eb:08:
25:5d:85:9b:db:33:88:b4:21:00:df:48:96:85:f4:51:ca:56:
03:7a:3e:26:2d:2a:d5:0c:f6:21:b4:7c:df:ca:26:ca:9e:8d:
63:86:59:12:79:0e:65:3e:f9:04:c6:b1:26:cf:f2:29:89:9e:
d7:ce:69:9b:99:15:a4:39:41:31:ab:2f:25:fc:a8:a6:9f:73:
47:95:70:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:31:23 2026 by rpki-client