
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133362e302f32342d3234203d3e20323135373438.roa
File: 3230332e38342e3133362e302f32342d3234203d3e20323135373438.roa (raw, json)
Hash identifier: PGJpqj97a4FLmBoFNBDINXicODmeYOoNb+ofVxYKueU=
Subject key identifier: 0D:E1:FC:31:46:24:AE:01:B1:F6:36:98:C5:9E:A8:57:92:76:CD:A2
Certificate issuer: /CN=E6B678AE8DC843399DF534610764D871D4D698D8
Certificate serial: 2A5016B33B6F2148AD9433FB9242E4723D3903E9
Authority key identifier: E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133362e302f32342d3234203d3e20323135373438.roa
Signing time: Mon 05 Oct 2026 03:54:12 +0000
ROA not before: Mon 05 Oct 2026 03:49:12 +0000
ROA not after: Mon 04 Oct 2027 03:54:12 +0000
asID: 215748
IP address blocks: 203.84.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl
rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 12:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:50:16:b3:3b:6f:21:48:ad:94:33:fb:92:42:e4:72:3d:39:03:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E6B678AE8DC843399DF534610764D871D4D698D8
Validity
Not Before: Oct 5 03:49:12 2026 GMT
Not After : Oct 4 03:54:12 2027 GMT
Subject: CN=0DE1FC314624AE01B1F63698C59EA8579276CDA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:57:23:39:14:4c:aa:f6:01:d8:a5:38:dc:21:
7a:57:e5:09:10:cc:21:a0:71:be:18:8c:a2:ce:fb:
80:3e:cc:fa:ec:60:1e:99:7f:81:28:1b:16:50:ab:
42:21:11:07:7f:36:35:c5:1f:63:36:55:0a:26:0e:
5b:29:1c:9c:0d:57:ed:ea:43:03:92:d3:78:1f:7d:
f8:b2:f9:f9:79:f3:db:34:58:13:92:c0:43:fd:c2:
12:51:6a:7e:9e:a9:3e:46:6c:a7:4f:d5:11:cd:a0:
68:81:62:98:5d:9d:a0:bc:73:f5:1b:67:11:a1:8c:
1c:97:72:20:1e:32:3b:3b:2b:01:76:79:36:c9:d4:
0b:dd:09:48:45:bc:1d:89:50:d1:aa:8c:01:b3:70:
56:f0:fc:10:42:d3:13:aa:a8:48:db:2e:25:ab:3e:
c8:8b:ae:b4:cf:60:24:bd:b4:db:f9:90:dc:be:e5:
c6:3f:b6:93:8b:b0:b1:ca:2a:fe:89:99:b0:5c:73:
c6:39:ce:59:bf:7d:1d:8c:f7:1b:70:df:dc:45:f9:
6e:60:8d:d2:46:97:5c:4b:90:dd:ca:08:d6:32:2f:
c0:88:04:79:f6:3f:13:54:22:39:02:92:f5:76:16:
6b:90:e4:47:83:51:84:8e:4d:ad:65:e0:8c:d6:1c:
be:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E1:FC:31:46:24:AE:01:B1:F6:36:98:C5:9E:A8:57:92:76:CD:A2
X509v3 Authority Key Identifier:
keyid:E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133362e302f32342d3234203d3e20323135373438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.84.136.0/24
Signature Algorithm: sha256WithRSAEncryption
74:2b:bb:ba:c3:51:36:25:62:8b:c3:77:92:9b:35:6b:98:73:
f4:9d:30:36:17:10:49:1a:3c:da:74:04:57:c2:93:7f:c5:cf:
a9:b9:16:d4:bc:cb:84:6a:a7:86:82:7f:7c:7f:78:93:72:96:
5d:14:70:b8:c9:5a:ea:5d:42:d9:c6:29:b0:ac:c6:e3:d3:6f:
c0:fa:25:41:56:80:39:52:50:07:9d:34:72:c9:db:b9:0e:c0:
99:81:9d:5f:c0:4f:13:b0:48:18:49:7d:be:cd:ab:6a:e1:d6:
32:44:92:e3:09:6a:9d:5c:12:b2:71:b7:11:56:8d:05:66:2e:
74:a2:df:84:9e:a6:10:17:60:98:31:26:76:f4:21:d4:76:de:
b7:e5:f2:d1:36:2f:61:66:6f:f0:7a:03:a7:ee:2b:a1:45:c9:
e0:a5:d1:26:0c:b9:bd:71:74:d0:2e:8b:3e:83:bd:83:7e:92:
e9:7f:40:ff:bf:01:c2:20:8d:9c:14:16:0e:8d:30:2b:fb:b2:
15:9c:0b:c4:b8:93:0a:7a:71:b4:99:38:71:6c:00:51:77:11:
7f:bb:1b:6a:db:7b:8f:40:6b:eb:24:02:cc:9b:0b:64:49:3c:
71:fc:90:a0:96:e9:f7:80:ff:f7:c6:2e:82:cc:49:66:ec:29:
41:02:45:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 01:52:20 2026 by rpki-client