
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36372e302f32342d3234203d3e203233363935.roa
File: 3230322e3137332e36372e302f32342d3234203d3e203233363935.roa (raw, json)
Hash identifier: OSQg8zfswLuq3LsnqSEZGCpIjJecbgk7y0F6Is3KsmU=
Subject key identifier: 66:72:4D:47:13:5A:CE:A9:52:72:CB:94:73:8C:C6:2A:7E:83:D9:F8
Certificate issuer: /CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Certificate serial: 028A7D3DE9CD91B50A369431602B31A4F5E44AB0
Authority key identifier: B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36372e302f32342d3234203d3e203233363935.roa
Signing time: Sun 03 May 2026 02:41:57 +0000
ROA not before: Sun 03 May 2026 02:36:57 +0000
ROA not after: Sun 02 May 2027 02:41:57 +0000
asID: 23695
IP address blocks: 202.173.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:8a:7d:3d:e9:cd:91:b5:0a:36:94:31:60:2b:31:a4:f5:e4:4a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Validity
Not Before: May 3 02:36:57 2026 GMT
Not After : May 2 02:41:57 2027 GMT
Subject: CN=66724D47135ACEA95272CB94738CC62A7E83D9F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cf:4c:41:87:75:c5:a3:dc:7b:b5:7d:12:f0:
3e:78:03:67:7c:2c:cf:a5:38:cd:c0:d7:5a:76:32:
81:5c:68:41:5d:7a:18:08:5a:39:05:65:79:28:15:
1a:a3:59:be:99:f8:3b:bd:52:d5:17:8b:74:91:16:
a9:15:ae:9e:fc:5f:47:e0:68:1e:41:c5:b3:5e:41:
73:7d:fd:20:1d:c1:fa:2b:d0:87:4a:b2:a8:f2:3e:
a9:65:40:e2:96:57:89:d1:e5:19:51:fa:77:83:58:
23:28:00:b5:17:7f:42:92:72:55:57:a4:d9:de:d0:
82:a3:3a:66:7e:52:69:fa:7f:73:32:66:b2:bb:7f:
13:9e:71:db:43:24:a9:d4:77:fc:77:89:51:0a:9b:
fe:dd:a4:01:4f:5e:6a:02:52:7f:5d:7a:b8:a2:45:
e6:3f:e7:c4:ca:7f:1f:14:41:0a:1f:55:0b:bf:a3:
c2:77:9a:88:26:19:24:11:f9:0c:56:38:cb:79:87:
ce:05:72:04:94:4a:73:5c:84:31:55:18:ed:6a:58:
9b:d9:8c:70:97:08:1c:5f:73:7f:47:87:0d:bd:b2:
a1:1c:1f:6f:99:27:5f:ef:e4:b0:3d:c7:4f:79:21:
21:9d:89:62:5e:1d:de:34:ce:64:f0:60:9b:f4:4c:
45:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:72:4D:47:13:5A:CE:A9:52:72:CB:94:73:8C:C6:2A:7E:83:D9:F8
X509v3 Authority Key Identifier:
keyid:B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36372e302f32342d3234203d3e203233363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.173.67.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:33:c2:da:f3:85:95:a8:12:8f:67:5b:d2:25:0f:62:a0:ae:
84:6c:47:84:95:b8:72:f4:0a:71:7a:30:70:de:c8:d9:eb:51:
56:bb:af:14:1d:af:14:16:b9:86:eb:20:4b:cd:5d:20:cc:6a:
6e:12:74:e2:23:c4:ad:d2:09:c8:6e:b5:19:94:f7:81:d4:24:
f3:58:78:71:ba:f8:47:b0:a1:76:68:92:0b:3c:98:ed:c5:08:
8d:20:22:bb:d7:bf:a2:ce:4e:bc:83:fd:91:a7:69:70:7b:b3:
7e:c2:e9:0a:b4:3a:78:d9:99:4c:a4:75:ab:b4:77:60:8a:3e:
81:72:20:c2:08:b5:74:2e:88:7b:95:d6:05:e9:cc:09:6d:6a:
b6:11:3e:78:14:d6:14:5b:0a:1e:92:3c:25:ee:89:df:4d:d1:
31:e1:a3:e3:47:83:d5:26:90:43:4c:d7:78:a1:c9:1d:60:5f:
76:4b:7d:d9:7a:f4:4b:4c:5a:a8:4d:00:10:62:fd:0e:bb:18:
a0:c0:57:eb:db:88:75:88:f3:88:45:f1:df:17:3c:75:8f:7c:
f3:12:bd:c9:f7:11:91:da:2d:46:2a:6f:e9:65:0e:f8:db:da:
9c:f5:2d:c3:cc:95:69:01:21:df:0f:b4:02:3e:b0:c0:75:27:
06:39:69:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:26:46 2026 by rpki-client