
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37312e302f32342d3234203d3e203233363935.roa
File: 3230322e3137332e37312e302f32342d3234203d3e203233363935.roa (raw, json)
Hash identifier: z3RvKQtSxJFODwjcDvM1/LRpgvUs52DfJr3cF70v++Y=
Subject key identifier: 67:3D:48:0E:F4:94:6F:A3:6A:0D:7C:1A:A5:D3:5D:CC:B6:92:FA:90
Certificate issuer: /CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Certificate serial: 5489E1C6B79CDEFC6E9ABA5070C4FF415887AEB5
Authority key identifier: B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37312e302f32342d3234203d3e203233363935.roa
Signing time: Sun 03 May 2026 02:42:04 +0000
ROA not before: Sun 03 May 2026 02:37:04 +0000
ROA not after: Sun 02 May 2027 02:42:04 +0000
asID: 23695
IP address blocks: 202.173.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:89:e1:c6:b7:9c:de:fc:6e:9a:ba:50:70:c4:ff:41:58:87:ae:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Validity
Not Before: May 3 02:37:04 2026 GMT
Not After : May 2 02:42:04 2027 GMT
Subject: CN=673D480EF4946FA36A0D7C1AA5D35DCCB692FA90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d4:54:e8:d7:dd:50:d9:97:50:d6:2d:37:68:
4a:de:f8:40:af:c2:98:2c:55:8a:72:1e:1e:03:71:
72:18:78:ef:81:8d:ec:a5:6c:ed:02:3a:80:61:5f:
6a:cd:dd:bb:4d:d8:33:fc:26:91:39:9c:b5:ff:d1:
9c:b1:aa:1a:b6:04:08:cf:8b:82:24:d5:f4:85:2c:
12:2f:70:55:86:66:99:49:0c:97:b6:49:bc:f5:b6:
48:92:57:c6:28:c5:81:aa:27:a9:4e:99:1a:51:bb:
8e:6d:ef:49:51:a8:fd:b2:79:f5:ef:be:51:5c:be:
28:30:d5:57:7e:25:2b:eb:d0:fc:4a:02:21:3a:0e:
4d:f2:e6:8e:c8:54:a6:10:01:4b:9e:3b:f9:22:41:
25:1c:83:da:7e:36:6b:a2:a9:33:05:31:be:11:4f:
1d:16:9c:7b:29:2b:27:bf:25:8b:03:01:ab:eb:82:
86:90:c8:aa:b6:63:74:72:f8:bb:bf:f1:59:f6:ff:
1b:eb:c0:82:7d:09:3e:66:3b:5b:41:9a:9d:6a:cd:
3e:c5:f7:dc:2d:42:77:dc:50:30:22:89:e1:ec:60:
14:39:82:ec:ba:91:c8:d8:9c:8a:72:b0:a1:bc:9b:
1a:c0:a4:33:2e:42:36:6c:3d:33:43:fb:6b:15:b8:
ec:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3D:48:0E:F4:94:6F:A3:6A:0D:7C:1A:A5:D3:5D:CC:B6:92:FA:90
X509v3 Authority Key Identifier:
keyid:B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37312e302f32342d3234203d3e203233363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.173.71.0/24
Signature Algorithm: sha256WithRSAEncryption
54:32:f1:28:a1:2c:f8:20:e0:7f:7d:7f:b3:1a:45:6e:08:f8:
55:87:c4:2a:e1:ba:1c:52:f8:39:ec:ad:3c:8d:af:e1:7e:da:
d3:79:7c:5f:e4:b0:42:70:9c:54:ba:e5:51:59:af:cc:20:ad:
de:1b:de:9e:44:e8:6a:bf:f2:15:53:a7:d1:3c:a2:49:75:ec:
a3:d0:95:50:0c:91:bf:2e:4d:c4:45:51:1f:01:55:7a:37:20:
3e:c0:80:33:30:5a:ac:aa:4d:0b:58:d2:e2:57:18:73:87:7e:
f0:7f:cd:bc:89:63:4d:c2:53:42:18:6c:87:15:9b:a0:ed:84:
eb:92:ba:14:3e:85:ef:08:f1:d5:d6:f4:7c:eb:09:dd:d5:7f:
53:53:9a:07:1c:b8:0d:44:40:d0:d5:f8:39:ac:0f:8e:ae:6e:
9f:8e:1a:1c:94:99:d0:5c:bb:1c:aa:30:74:a0:c7:0e:fc:64:
23:4f:f1:63:b9:8b:54:83:6b:c7:9f:b0:85:5f:0c:f1:62:e6:
c9:d8:13:bb:2a:bf:3b:7b:9c:92:8c:22:bb:51:63:33:16:1b:
fd:bd:79:eb:57:b5:cd:8a:47:d1:46:22:f5:41:e0:4f:e4:19:
37:56:6e:41:5c:68:83:48:64:fe:18:da:bf:ba:0b:9b:b2:c7:
22:ec:85:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:07 2026 by rpki-client