
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36352e302f32342d3234203d3e203233363935.roa
File: 3230322e3137332e36352e302f32342d3234203d3e203233363935.roa (raw, json)
Hash identifier: eLr0XxRRyECy4QrPK+3MOU27khMISGnu2tsIqRRTGNc=
Subject key identifier: 4B:E3:5E:FF:5A:14:76:F5:3D:1A:30:7D:86:FD:8C:91:AA:95:67:D7
Certificate issuer: /CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Certificate serial: 2F96B6A1C8FDD53D3B8F1D1B648B17CF092019AE
Authority key identifier: B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36352e302f32342d3234203d3e203233363935.roa
Signing time: Sun 03 May 2026 02:42:05 +0000
ROA not before: Sun 03 May 2026 02:37:05 +0000
ROA not after: Sun 02 May 2027 02:42:05 +0000
asID: 23695
IP address blocks: 202.173.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:96:b6:a1:c8:fd:d5:3d:3b:8f:1d:1b:64:8b:17:cf:09:20:19:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Validity
Not Before: May 3 02:37:05 2026 GMT
Not After : May 2 02:42:05 2027 GMT
Subject: CN=4BE35EFF5A1476F53D1A307D86FD8C91AA9567D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4a:55:19:f4:c3:42:d8:c4:a9:96:68:f6:0b:
f2:f6:ba:a9:d6:0d:b1:14:d6:5a:79:b1:13:cb:fe:
81:a3:93:2e:d1:18:50:e6:27:1f:a9:ab:ea:75:ac:
29:03:e4:c0:e8:d4:d7:e9:33:f8:a3:25:b4:88:9c:
f6:b6:a7:2a:ac:0f:d0:89:7c:d1:78:61:42:23:8a:
72:ed:91:51:cf:0c:1e:26:36:d0:3e:54:11:6e:8d:
f9:75:9d:94:9b:5c:30:b3:39:16:f2:84:cc:cb:bf:
29:64:16:07:be:cc:45:39:a3:42:60:c1:e8:a6:0f:
51:d5:21:9b:e6:ba:3d:8e:12:8f:a9:77:27:79:5f:
b7:10:3f:2b:6a:97:31:53:05:dc:77:60:4e:4a:c8:
4e:06:e9:e4:3d:78:33:bf:c9:01:43:a1:a6:4f:09:
74:ef:f9:77:b1:7b:d6:9e:e2:5c:9a:32:5b:ca:53:
4e:32:98:80:50:8a:11:05:e5:b6:a0:93:d8:a3:df:
f1:f8:4b:96:9d:7a:95:77:82:03:ad:58:c6:9f:c8:
cb:37:af:4e:23:ac:7e:ef:f1:6d:a1:2e:50:df:37:
43:8d:4c:62:5d:b3:f3:6e:ac:73:99:6d:52:09:eb:
45:8b:4d:c2:a4:cb:ad:48:1f:40:31:ee:11:98:ef:
eb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E3:5E:FF:5A:14:76:F5:3D:1A:30:7D:86:FD:8C:91:AA:95:67:D7
X509v3 Authority Key Identifier:
keyid:B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36352e302f32342d3234203d3e203233363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.173.65.0/24
Signature Algorithm: sha256WithRSAEncryption
35:7b:f0:a3:c1:2c:09:63:df:c1:eb:37:69:ef:3e:ab:73:df:
9e:33:c6:82:87:24:3a:d2:cd:a6:21:ef:e3:11:44:c8:73:c4:
0c:aa:71:f9:6e:16:b4:7d:44:ee:7f:82:0d:c3:de:5e:7b:4d:
a9:aa:10:29:64:ac:3c:f5:31:2f:eb:da:80:93:57:b8:b8:1b:
1b:5e:74:ab:ca:53:00:c0:45:0e:d7:50:33:6f:f9:c1:77:4a:
e8:30:d2:a8:e6:b7:78:fb:9e:90:2a:ae:f7:28:28:bd:16:14:
93:5b:22:ee:18:98:b0:41:55:35:7c:06:89:f5:d4:a8:ee:63:
a8:b3:e0:0e:98:55:cb:3f:31:80:ab:1e:d6:66:dd:a5:38:21:
de:66:9b:bf:82:1c:4e:d1:2e:75:c8:8f:fa:d9:5b:ad:63:88:
4b:4c:cc:6f:b0:80:90:71:37:f1:04:5c:87:0b:a6:82:95:31:
bb:a2:31:5b:58:8d:b7:37:0b:ac:0d:b0:6c:cb:22:df:4d:aa:
13:76:f7:f6:32:8e:93:fe:7c:8a:a4:f4:bb:64:53:d2:5f:25:
f3:a3:4f:65:65:77:f5:af:cc:ff:c1:4d:1b:7c:b9:9d:14:df:
e2:93:81:62:b2:f6:53:28:58:3b:3e:b0:02:d5:89:00:26:65:
27:84:a0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:02:41 2026 by rpki-client