
$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136392e302f32342d3234203d3e203137373237.roa
File: 3230322e35392e3136392e302f32342d3234203d3e203137373237.roa (raw, json)
Hash identifier: i6fyyumSdHIOyRwS2kWRePa5CvjeoRrrbEK0JX4o/kQ=
Subject key identifier: 56:F9:B1:08:44:16:71:C2:18:3D:D1:1A:A8:3C:E5:2F:70:46:CA:B5
Certificate issuer: /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Certificate serial: 31BA455228B5616A3DCEE4D23B50718A8A72E2E3
Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136392e302f32342d3234203d3e203137373237.roa
Signing time: Sun 03 May 2026 02:38:26 +0000
ROA not before: Sun 03 May 2026 02:33:26 +0000
ROA not after: Sun 02 May 2027 02:38:26 +0000
asID: 17727
IP address blocks: 202.59.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 07 May 2026 23:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:ba:45:52:28:b5:61:6a:3d:ce:e4:d2:3b:50:71:8a:8a:72:e2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Validity
Not Before: May 3 02:33:26 2026 GMT
Not After : May 2 02:38:26 2027 GMT
Subject: CN=56F9B108441671C2183DD11AA83CE52F7046CAB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:63:20:d3:47:db:41:ff:70:b7:af:f5:95:1d:
26:88:01:8e:a4:6d:af:05:96:17:c2:e2:31:a3:08:
df:aa:06:d2:80:99:63:b3:e9:b3:7d:39:2e:ba:ae:
e1:eb:44:f1:9c:ab:64:d9:5c:5e:f8:70:cf:1f:32:
64:b5:19:52:c2:f5:c6:a0:f6:bb:11:f2:10:f5:e4:
0a:88:c1:8a:c5:68:86:67:65:ee:80:8e:ce:a0:17:
9c:d8:0b:1e:c6:35:39:3b:86:be:4a:03:fc:89:ee:
52:94:69:64:4b:7a:30:46:f3:8a:c5:fc:1c:d0:c3:
c5:70:a4:d9:39:a4:9f:54:04:bb:b8:99:34:2e:d5:
cf:5b:37:40:6f:3a:3d:b3:e4:5b:4c:b7:70:80:34:
93:79:cf:ec:21:58:a4:f1:8f:67:e7:84:0c:b2:92:
d1:46:77:15:b4:7f:7d:5e:7b:03:fb:5e:26:5e:e5:
09:cb:68:0d:77:e2:5e:95:9a:60:a6:85:b5:4a:d7:
6d:99:9f:a4:f9:05:ac:90:37:0f:ec:80:35:4f:47:
b0:2e:89:37:c5:f7:40:e5:c7:eb:0d:45:3c:cc:92:
91:7a:7e:51:6b:04:0e:8d:79:45:b0:66:6a:09:e4:
50:37:7f:11:a9:a4:b9:7f:e8:68:f5:1e:dd:fe:44:
1a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F9:B1:08:44:16:71:C2:18:3D:D1:1A:A8:3C:E5:2F:70:46:CA:B5
X509v3 Authority Key Identifier:
keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3230322e35392e3136392e302f32342d3234203d3e203137373237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.59.169.0/24
Signature Algorithm: sha256WithRSAEncryption
05:a0:9d:a4:2b:41:48:74:9f:3c:5a:ee:2b:22:27:68:60:1d:
b2:4a:42:1a:0e:75:32:a5:ba:df:06:78:52:b2:81:52:0a:f3:
54:a0:12:d3:49:1e:d4:eb:68:da:a8:39:62:47:22:06:fd:f3:
17:88:17:1e:87:ae:dc:cd:d4:9a:c6:7b:f5:d0:c8:d7:29:59:
1b:72:e5:38:0e:64:cf:0a:af:5d:10:9b:1c:6e:56:52:ef:39:
6a:7f:2d:ea:14:f8:23:bf:64:ef:41:e6:ff:5b:60:9a:66:33:
89:8d:97:b4:fb:35:30:25:82:6a:e3:d0:c7:2c:00:86:1d:04:
89:e2:e2:83:97:b6:b1:4e:22:09:5c:df:10:90:53:7a:7d:63:
5a:5c:9b:81:48:6f:30:2f:da:17:d2:78:04:03:db:b6:3a:24:
cb:1f:95:bc:46:93:59:32:59:9f:7e:5b:de:57:31:79:93:69:
a2:c6:06:fc:2a:ad:a6:b0:03:a6:5b:5e:cc:d5:f2:da:d1:0b:
b1:c0:7f:8e:76:2d:16:3f:36:16:62:fb:c1:77:a0:ff:17:5e:
a9:fa:72:c8:e6:0a:7e:d5:68:80:ee:f7:2a:84:9b:f1:86:27:
55:f8:52:5f:1b:ed:0c:7f:58:a9:e1:ff:18:0d:40:c4:8e:42:
d4:c1:b5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:31:32 2026 by rpki-client