
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36392e302f32342d3234203d3e203233363935.roa
File: 3230322e3137332e36392e302f32342d3234203d3e203233363935.roa (raw, json)
Hash identifier: JEbErrO+Yn5TM7UexrEhHER+8zwUzh2qmCtatGzpsN8=
Subject key identifier: FE:68:74:DF:3D:DB:55:F0:87:8B:5E:7D:28:4C:32:30:79:81:5E:6C
Certificate issuer: /CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Certificate serial: 2C7ADDBA4053FFF53D88394E3B1E9E56BE583F76
Authority key identifier: B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36392e302f32342d3234203d3e203233363935.roa
Signing time: Sun 03 May 2026 02:42:03 +0000
ROA not before: Sun 03 May 2026 02:37:03 +0000
ROA not after: Sun 02 May 2027 02:42:03 +0000
asID: 23695
IP address blocks: 202.173.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:7a:dd:ba:40:53:ff:f5:3d:88:39:4e:3b:1e:9e:56:be:58:3f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Validity
Not Before: May 3 02:37:03 2026 GMT
Not After : May 2 02:42:03 2027 GMT
Subject: CN=FE6874DF3DDB55F0878B5E7D284C323079815E6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:73:22:39:52:2c:fa:0b:36:a6:b3:fd:99:31:
0e:95:43:06:67:63:90:92:2d:08:3b:1f:2b:1a:fb:
f9:fd:16:1d:de:2b:80:7f:18:42:46:38:13:42:0a:
5f:68:75:82:01:cd:d2:d3:cc:75:7f:ec:81:9f:87:
d2:16:1d:68:7a:04:a9:e1:fe:64:6b:00:9c:8b:37:
98:54:44:17:30:57:54:40:a8:d9:54:0b:02:ad:d1:
07:63:18:c6:05:14:06:c5:a5:da:2a:61:92:0f:36:
ea:aa:38:14:64:fb:d8:41:ba:f5:6b:de:d7:e6:4f:
80:f2:be:b2:9f:c5:c6:16:ac:02:82:07:7f:f5:f2:
3b:5f:3c:6c:9b:15:c9:06:19:4c:41:9b:8c:26:29:
76:ea:c4:16:12:a9:61:aa:16:af:9f:c2:29:21:80:
d3:78:ac:7f:7e:08:2b:bd:e9:54:71:e3:42:97:f2:
b8:6f:c0:d1:ee:d1:eb:0e:75:5e:91:33:f0:c2:90:
ab:6f:47:84:79:37:73:4e:c1:6e:73:b8:b9:d7:db:
7e:4b:2e:43:20:d0:e6:af:d1:4d:86:c3:d4:ef:ac:
f2:9d:1c:71:51:68:db:86:d8:cb:14:65:c9:40:31:
ee:4f:8f:5b:d4:6d:ee:6c:04:1e:57:aa:ca:3d:57:
e7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:68:74:DF:3D:DB:55:F0:87:8B:5E:7D:28:4C:32:30:79:81:5E:6C
X509v3 Authority Key Identifier:
keyid:B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e36392e302f32342d3234203d3e203233363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.173.69.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:61:62:e3:57:bd:ed:12:f9:7a:52:f3:95:76:29:99:72:29:
67:26:b1:8a:b3:0f:4c:27:b5:ff:cd:eb:1b:bf:d8:20:e4:d6:
42:2b:55:2a:34:d3:af:da:bc:4f:52:cb:a3:48:85:1c:5a:69:
1c:7b:ce:db:5f:10:35:07:10:da:a7:7d:20:1b:1b:72:63:ba:
87:c5:e6:c2:fd:81:92:0b:75:83:12:bb:e6:b0:24:f8:2f:74:
95:c2:e5:e9:6f:9d:2d:c2:a4:05:95:d5:26:38:d3:f0:79:75:
a1:f6:e0:68:b0:02:b5:30:4e:0b:ac:4b:7a:d9:ba:c5:2a:1c:
5a:92:b5:83:32:ab:ef:ab:46:44:39:ae:08:43:0d:ba:41:e7:
f8:1c:9c:e4:4d:94:e1:c8:4e:93:62:af:5e:7a:c1:ba:a2:39:
0f:55:7c:ff:2b:fd:46:38:a0:f6:3c:4e:43:59:38:ec:27:73:
f4:fe:af:61:bc:64:88:3d:08:0b:b0:33:e1:95:47:8c:c0:16:
28:9e:39:be:ea:f4:cb:14:01:95:1b:34:96:43:5a:81:ab:48:
81:69:fe:c7:cc:34:1c:b3:6c:29:da:0c:e1:20:de:02:34:a4:
92:84:d8:20:9a:36:a1:f9:34:8f:b8:77:22:bc:e5:6e:87:a1:
27:c1:8e:53
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIULHrdukBT//U9iDlOOx6eVr5YP3YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjE2RjNCNDdCQjAyMUM2MUQyNjhGMEE0REJFQTE1NjlG
MDlGM0U1RTAeFw0yNjA1MDMwMjM3MDNaFw0yNzA1MDIwMjQyMDNaMDMxMTAvBgNV
BAMTKEZFNjg3NERGM0REQjU1RjA4NzhCNUU3RDI4NEMzMjMwNzk4MTVFNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJcyI5Uiz6Czams/2ZMQ6VQwZn
Y5CSLQg7Hysa+/n9Fh3eK4B/GEJGOBNCCl9odYIBzdLTzHV/7IGfh9IWHWh6BKnh
/mRrAJyLN5hURBcwV1RAqNlUCwKt0QdjGMYFFAbFpdoqYZIPNuqqOBRk+9hBuvVr
3tfmT4DyvrKfxcYWrAKCB3/18jtfPGybFckGGUxBm4wmKXbqxBYSqWGqFq+fwikh
gNN4rH9+CCu96VRx40KX8rhvwNHu0esOdV6RM/DCkKtvR4R5N3NOwW5zuLnX235L
LkMg0Oav0U2Gw9TvrPKdHHFRaNuG2MsUZclAMe5Pj1vUbe5sBB5Xqso9V+c1AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU/mh03z3bVfCHi159KEwyMHmBXmwwHwYDVR0j
BBgwFoAUsW87R7sCHGHSaPCk2+oVafCfPl4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmYwZjJiZDktNDJhZS00NDlhLThkNTctYjI2ZGEwNGQ3ZWUxLzAvQjE2RjNCNDdC
QjAyMUM2MUQyNjhGMEE0REJFQTE1NjlGMDlGM0U1RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CMTZGM0I0N0JCMDIxQzYxRDI2OEYwQTREQkVBMTU2OUYwOUYz
RTVFLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZmMGYyYmQ5LTQyYWUtNDQ5YS04
ZDU3LWIyNmRhMDRkN2VlMS8wLzMyMzAzMjJlMzEzNzMzMmUzNjM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMqtRTANBgkqhkiG
9w0BAQsFAAOCAQEATmFi41e97RL5elLzlXYpmXIpZyaxirMPTCe1/83rG7/YIOTW
QitVKjTTr9q8T1LLo0iFHFppHHvO218QNQcQ2qd9IBsbcmO6h8Xmwv2Bkgt1gxK7
5rAk+C90lcLl6W+dLcKkBZXVJjjT8Hl1ofbgaLACtTBOC6xLetm6xSocWpK1gzKr
76tGRDmuCEMNukHn+Byc5E2U4chOk2KvXnrBuqI5D1V8/yv9Rjig9jxOQ1k47Cdz
9P6vYbxkiD0IC7Az4ZVHjMAWKJ45vur0yxQBlRs0lkNagatIgWn+x8w0HLNsKdoM
4SDeAjSkkoTYIJo2ofk0j7h3IrzlboehJ8GOUw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:47:50 2026 by rpki-client