
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/3230322e34372e3138382e302f32332d3234203d3e203435333035.roa
File: 3230322e34372e3138382e302f32332d3234203d3e203435333035.roa (raw, json)
Hash identifier: 33NiGbYdtDmBYZOujjSA6jD1gzuaQyCdU/IY17iD170=
Subject key identifier: 57:58:6E:25:32:78:1E:BB:C5:F4:B5:66:2B:BE:0F:09:DB:92:A9:AE
Certificate issuer: /CN=79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E
Certificate serial: 085B803415E31CA14E6A8B9E61E4B3A9A2728B68
Authority key identifier: 79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/3230322e34372e3138382e302f32332d3234203d3e203435333035.roa
Signing time: Wed 08 Apr 2026 03:02:45 +0000
ROA not before: Wed 08 Apr 2026 02:57:45 +0000
ROA not after: Wed 07 Apr 2027 03:02:45 +0000
asID: 45305
IP address blocks: 202.47.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl
rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 15:56:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:5b:80:34:15:e3:1c:a1:4e:6a:8b:9e:61:e4:b3:a9:a2:72:8b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E
Validity
Not Before: Apr 8 02:57:45 2026 GMT
Not After : Apr 7 03:02:45 2027 GMT
Subject: CN=57586E2532781EBBC5F4B5662BBE0F09DB92A9AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e7:0f:73:6e:5c:89:20:fb:54:ac:ee:ba:d1:
c4:4e:a8:0e:2a:9e:15:94:03:f6:ee:0e:40:03:ae:
53:8c:d2:cb:e3:d9:69:a4:c1:59:72:4d:50:ea:10:
7c:fb:14:22:1a:ab:43:48:54:a1:6e:89:a5:d9:98:
f1:8f:ee:73:f1:e4:23:f3:87:df:f4:7a:15:00:58:
76:ba:c8:64:58:c9:bf:c0:39:1d:57:c7:f8:5c:2a:
9b:b7:e8:01:23:d6:7a:2e:d1:24:c6:2c:f3:a3:10:
45:16:64:2f:b9:a0:ea:99:8a:21:c8:2f:1d:c0:0e:
b0:3f:b7:6a:5f:02:e8:68:65:80:b7:52:ae:a9:b0:
be:f0:a0:41:5c:54:e1:25:be:d0:10:35:fc:18:87:
65:69:80:a0:da:45:16:69:54:17:a2:4f:95:65:6d:
d5:25:ae:16:68:c5:f1:97:ea:32:c9:c1:01:a5:66:
37:dc:7f:06:dc:1c:5d:60:be:a5:71:77:74:f0:76:
5a:60:da:e3:aa:8d:2e:75:0f:12:79:75:f5:fb:10:
00:e6:d4:d7:1c:df:c5:ca:ae:db:02:6e:16:71:68:
00:2d:b4:09:6f:fc:69:04:6a:c9:6c:3d:c6:ad:f6:
21:67:78:58:e9:5f:18:9a:ae:55:94:71:28:71:5a:
58:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:58:6E:25:32:78:1E:BB:C5:F4:B5:66:2B:BE:0F:09:DB:92:A9:AE
X509v3 Authority Key Identifier:
keyid:79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/3230322e34372e3138382e302f32332d3234203d3e203435333035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.47.188.0/23
Signature Algorithm: sha256WithRSAEncryption
47:f6:97:09:e8:da:15:e0:4b:fa:c5:7a:d7:70:59:86:82:aa:
f4:52:ce:c0:82:52:48:64:3b:6f:37:1a:4e:75:4d:e4:62:ae:
13:66:32:6b:c6:5e:6a:8b:0e:eb:61:26:e0:8b:82:be:8c:b0:
42:39:7c:dd:14:ed:91:9a:93:1d:c1:a1:68:a9:ec:ba:ad:85:
5b:5d:aa:e5:96:61:2b:f2:80:f7:2d:3f:fd:08:26:68:d0:83:
ec:91:ef:c8:23:e4:93:d2:a6:9d:1d:16:ec:de:6f:17:92:1c:
69:c2:66:a8:6d:23:ff:51:7e:37:26:3d:f7:79:e6:28:f6:72:
d2:15:b4:ce:97:f4:ab:c0:62:a1:bb:00:7f:96:5c:c5:d8:e8:
ef:5d:4f:0b:8d:ca:2a:17:71:a4:e5:46:4d:47:76:6b:6c:bb:
77:77:06:d2:f4:cf:b8:b5:85:a9:26:0f:40:91:7a:a3:a7:bb:
28:c9:7f:c0:4c:07:b4:f9:c2:32:83:3e:29:c1:6a:4e:7d:de:
af:8c:ba:a3:52:cc:e9:b9:32:49:07:98:55:04:e5:18:ba:91:
09:e4:69:72:1c:f9:b5:1a:f7:98:c5:0e:65:d7:70:d9:05:6b:
3e:46:48:43:18:4b:d3:b7:2f:bb:77:ff:6e:49:85:6b:ad:5b:
47:5a:2c:03
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUCFuANBXjHKFOaoueYeSzqaJyi2gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlCRDA3NUQxQkM0QkQ4QUUwQzI2RUZEMkQzNzIyQ0NG
NkVGRjY1RTAeFw0yNjA0MDgwMjU3NDVaFw0yNzA0MDcwMzAyNDVaMDMxMTAvBgNV
BAMTKDU3NTg2RTI1MzI3ODFFQkJDNUY0QjU2NjJCQkUwRjA5REI5MkE5QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa5w9zblyJIPtUrO660cROqA4q
nhWUA/buDkADrlOM0svj2WmkwVlyTVDqEHz7FCIaq0NIVKFuiaXZmPGP7nPx5CPz
h9/0ehUAWHa6yGRYyb/AOR1Xx/hcKpu36AEj1nou0STGLPOjEEUWZC+5oOqZiiHI
Lx3ADrA/t2pfAuhoZYC3Uq6psL7woEFcVOElvtAQNfwYh2VpgKDaRRZpVBeiT5Vl
bdUlrhZoxfGX6jLJwQGlZjfcfwbcHF1gvqVxd3Twdlpg2uOqjS51DxJ5dfX7EADm
1Ncc38XKrtsCbhZxaAAttAlv/GkEaslsPcat9iFneFjpXxiarlWUcShxWlh5AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUV1huJTJ4HrvF9LVmK74PCduSqa4wHwYDVR0j
BBgwFoAUeb0HXRvEvYrgwm79LTcizPbv9l4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ZWU5NDAxNC04N2ZhLTRiYzItYjFjNi03ZmQyYTg5NDc2ZjMvMC83OUJEMDc1RDFC
QzRCRDhBRTBDMjZFRkQyRDM3MjJDQ0Y2RUZGNjVFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzlCRDA3NUQxQkM0QkQ4QUUwQzI2RUZEMkQzNzIyQ0NGNkVG
RjY1RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFlZTk0MDE0LTg3ZmEtNGJjMi1i
MWM2LTdmZDJhODk0NzZmMy8wLzMyMzAzMjJlMzQzNzJlMzEzODM4MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzQzNTMzMzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcovvDANBgkqhkiG
9w0BAQsFAAOCAQEAR/aXCejaFeBL+sV613BZhoKq9FLOwIJSSGQ7bzcaTnVN5GKu
E2Yya8ZeaosO62Em4IuCvoywQjl83RTtkZqTHcGhaKnsuq2FW12q5ZZhK/KA9y0/
/QgmaNCD7JHvyCPkk9KmnR0W7N5vF5IcacJmqG0j/1F+NyY993nmKPZy0hW0zpf0
q8BiobsAf5Zcxdjo711PC43KKhdxpOVGTUd2a2y7d3cG0vTPuLWFqSYPQJF6o6e7
KMl/wEwHtPnCMoM+KcFqTn3er4y6o1LM6bkySQeYVQTlGLqRCeRpchz5tRr3mMUO
Zddw2QVrPkZIQxhL07cvu3f/bkmFa61bR1osAw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:52:54 2026 by rpki-client