
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36362e302f32342d3234203d3e203233363935.roa
File: 3230322e3137332e36362e302f32342d3234203d3e203233363935.roa (raw, json)
Hash identifier: bAiWHLTdRVWm3EKVOPaVRyGKs6RrUZdpen99ggO8mDs=
Subject key identifier: 76:2A:93:E1:C0:DB:8C:D2:62:A1:3D:C1:BE:4F:F6:ED:06:85:8C:4B
Certificate issuer: /CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Certificate serial: 6CA020A3F6AC09CEDE2BBC91433AC4C0651BD6B2
Authority key identifier: B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36362e302f32342d3234203d3e203233363935.roa
Signing time: Sun 03 May 2026 02:41:57 +0000
ROA not before: Sun 03 May 2026 02:36:57 +0000
ROA not after: Sun 02 May 2027 02:41:57 +0000
asID: 23695
IP address blocks: 202.173.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:a0:20:a3:f6:ac:09:ce:de:2b:bc:91:43:3a:c4:c0:65:1b:d6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Validity
Not Before: May 3 02:36:57 2026 GMT
Not After : May 2 02:41:57 2027 GMT
Subject: CN=762A93E1C0DB8CD262A13DC1BE4FF6ED06858C4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8c:81:c2:2a:ef:b7:41:b3:02:6d:3f:0f:f9:
46:87:b0:f7:36:23:98:7d:a4:62:12:89:2c:e4:b0:
bb:86:6e:6e:b6:89:2c:01:88:e9:20:c9:d7:68:6b:
23:57:6c:d3:75:d4:50:eb:01:ae:35:ba:70:39:5f:
9b:82:ef:d0:cc:d9:50:ab:cd:9a:64:d4:e3:be:df:
fe:46:93:56:46:fe:ff:b9:14:3a:6b:60:f9:18:a1:
10:ad:3e:2b:c9:c7:88:86:c0:4f:06:9f:60:68:b6:
cb:48:ab:d3:f1:3d:a1:6d:e2:03:3a:ea:11:54:a8:
45:ca:7d:16:c3:93:8e:e0:41:a3:2d:ac:da:4e:76:
18:bf:e8:be:ab:84:92:ab:16:42:00:3d:9e:7b:11:
cc:bc:2a:3c:c7:9f:f5:2d:a7:54:e1:86:6a:ce:c0:
99:7d:76:b3:45:f4:5e:8f:63:cd:65:4c:47:96:84:
4a:58:ca:e5:87:90:de:b2:42:0f:b8:a0:8c:44:a8:
af:b7:f5:60:b2:74:ee:af:30:4d:bd:33:8e:8c:a4:
d4:ae:20:54:bb:54:62:59:bf:a6:60:07:8d:a7:08:
55:24:0c:d6:66:34:d5:f4:bb:4d:86:30:92:55:19:
7f:2d:af:0a:60:37:68:73:33:54:ce:af:1c:50:7c:
b3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2A:93:E1:C0:DB:8C:D2:62:A1:3D:C1:BE:4F:F6:ED:06:85:8C:4B
X509v3 Authority Key Identifier:
keyid:B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36362e302f32342d3234203d3e203233363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.173.66.0/24
Signature Algorithm: sha256WithRSAEncryption
50:ab:89:68:61:f3:c9:6d:0a:c1:c9:88:c0:55:d6:df:3f:6d:
cd:c2:0c:99:26:70:96:80:10:67:eb:3d:5f:ee:2e:19:2c:28:
1c:62:a5:47:19:40:ab:5f:cb:f3:e2:23:63:2e:4c:3a:ed:a8:
30:73:6b:1d:3c:27:38:cb:88:08:7c:75:c6:54:84:57:91:7b:
5c:08:fd:fe:9d:73:12:f3:52:b5:66:81:54:85:87:52:3a:66:
8e:80:35:22:ce:51:db:6a:0b:4f:f4:f8:6c:52:7c:8a:4f:3e:
d7:a8:16:bd:63:3b:66:33:9f:8e:1f:62:25:e5:d9:47:35:12:
81:9b:ab:83:13:38:04:73:81:7c:d1:f4:da:5e:84:b4:89:76:
3a:3b:47:79:fe:14:85:4d:c9:d7:e5:32:9a:aa:58:f7:15:0d:
2b:7f:b6:70:70:59:86:ef:f6:be:c9:9e:0d:c1:be:e6:d3:c4:
e1:36:3e:f5:d4:a4:d8:33:e1:30:3d:4e:52:bb:05:be:a7:19:
af:91:6e:e0:75:57:57:84:9a:42:e6:80:9a:1c:d1:be:de:0f:
85:c6:8d:b1:f2:8c:78:92:59:f8:3b:cd:11:35:1a:2b:cc:93:
93:ea:25:3f:56:32:7f:2c:b5:66:58:7f:e5:7b:64:a1:5b:77:
e2:cf:86:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:55 2026 by rpki-client