
$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e33302e302f32342d3234203d3e203234353235.roa
File: 3230332e3135332e33302e302f32342d3234203d3e203234353235.roa (raw, json)
Hash identifier: bawKjG8h/SoSQ/nFwCrhtWOCrI76J6zME+ldh1Z5J18=
Subject key identifier: 83:86:D5:05:C2:4E:F1:C3:5A:F7:5F:A1:D2:9C:41:86:99:FD:BC:36
Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Certificate serial: 6DD97FFF0D8AF8EF35AF5AD7DF37C4A70F231C1A
Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e33302e302f32342d3234203d3e203234353235.roa
Signing time: Sat 04 Apr 2026 10:00:02 +0000
ROA not before: Sat 04 Apr 2026 09:55:02 +0000
ROA not after: Sat 03 Apr 2027 10:00:02 +0000
asID: 24525
IP address blocks: 203.153.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl
rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 11:57:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:d9:7f:ff:0d:8a:f8:ef:35:af:5a:d7:df:37:c4:a7:0f:23:1c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Validity
Not Before: Apr 4 09:55:02 2026 GMT
Not After : Apr 3 10:00:02 2027 GMT
Subject: CN=8386D505C24EF1C35AF75FA1D29C418699FDBC36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:89:d5:0b:c9:63:1c:31:11:8a:2e:f1:59:7e:
be:f2:24:d2:f0:1b:79:c3:33:da:4f:44:7e:e8:57:
2f:7c:22:e4:ed:ef:35:e6:c8:86:e9:49:18:c7:53:
e9:e3:67:22:24:4f:ce:4e:47:23:9f:28:34:e4:08:
85:c3:4b:55:94:3e:ec:87:30:7f:ef:28:ed:41:49:
1e:19:30:ce:35:9b:7d:71:fc:b3:63:88:c2:6f:7d:
7c:32:c1:30:c6:2c:ae:7a:aa:17:0d:f3:4b:e2:36:
fb:f7:45:c4:ad:5d:84:a6:87:79:cc:d9:41:a7:f3:
99:54:8c:40:2b:8c:d6:7f:b5:24:64:bb:32:21:0e:
06:14:09:62:80:ca:d7:8d:98:ea:71:27:52:68:30:
e2:37:28:7e:d6:fb:21:cd:f2:25:7f:b5:95:20:3b:
3e:cb:78:1d:28:ee:f2:49:3a:bb:29:13:66:c7:8f:
23:66:ec:53:7f:64:98:69:d5:e9:be:06:a4:d2:4f:
06:36:c0:d8:78:9c:08:ed:f1:1f:69:e0:68:63:0b:
f2:35:ac:5a:02:39:75:e5:44:29:2e:47:36:c7:67:
05:99:f0:77:0e:13:cb:71:dd:b2:98:85:f3:ad:42:
54:f7:c8:25:f7:e9:f7:fa:0c:3e:82:79:b0:ed:c0:
23:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:86:D5:05:C2:4E:F1:C3:5A:F7:5F:A1:D2:9C:41:86:99:FD:BC:36
X509v3 Authority Key Identifier:
keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e33302e302f32342d3234203d3e203234353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.153.30.0/24
Signature Algorithm: sha256WithRSAEncryption
56:4b:f8:e6:b5:7e:3f:bc:2d:69:f7:b6:ec:62:88:ae:18:a6:
61:d6:93:04:00:ae:db:a2:a0:1d:78:5c:04:a0:10:de:2e:7b:
fe:5a:2d:c9:75:ef:49:da:97:2b:9b:18:d1:44:5d:01:8c:f3:
ef:6f:20:69:a7:8c:77:e7:bb:4a:a7:e2:4b:59:0a:2b:2f:c2:
6c:de:62:18:a1:95:ae:86:1e:45:87:12:07:9f:39:43:12:e9:
5f:f1:95:71:12:13:fa:84:a0:92:02:1f:f3:fc:0e:1d:8e:91:
68:17:f2:c4:0d:07:81:23:87:11:de:fb:1c:e6:f6:5e:86:78:
c8:88:a5:71:72:ab:96:a6:8d:0c:cc:ce:36:46:8e:c2:6c:e1:
ed:2e:f7:5d:31:90:e3:38:79:a9:66:af:4f:93:8c:ef:a7:c7:
f6:35:68:12:2a:f1:6a:05:6e:32:a2:bf:50:3a:7a:02:d0:d7:
d3:ce:f6:7d:5a:14:f2:92:d6:cb:dc:df:a6:22:f8:58:97:a2:
c4:ce:1e:53:3b:03:87:c5:fd:fa:5b:50:f0:f8:d7:a9:95:74:
c5:92:b6:e8:e5:ea:04:b0:4e:a6:9d:be:7f:2c:9f:7e:39:4f:
18:9e:05:31:d5:7b:92:d1:74:ed:2d:16:5b:f5:de:92:a3:a2:
45:19:a9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:23:48 2026 by rpki-client