
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37322e302f32342d3234203d3e203233363935.roa
File: 3230322e3137332e37322e302f32342d3234203d3e203233363935.roa (raw, json)
Hash identifier: 2zmJmWfAYb7geUAr85lE5DJITrLeg3wtHhl3b8oCfe4=
Subject key identifier: 18:C4:03:8A:2C:15:33:8F:63:86:09:23:77:CB:16:4D:9B:3E:CB:B8
Certificate issuer: /CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Certificate serial: 2EFC48BAA199DDAB74600A73187C0F29EA504933
Authority key identifier: B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37322e302f32342d3234203d3e203233363935.roa
Signing time: Sun 03 May 2026 02:41:58 +0000
ROA not before: Sun 03 May 2026 02:36:58 +0000
ROA not after: Sun 02 May 2027 02:41:58 +0000
asID: 23695
IP address blocks: 202.173.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:fc:48:ba:a1:99:dd:ab:74:60:0a:73:18:7c:0f:29:ea:50:49:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Validity
Not Before: May 3 02:36:58 2026 GMT
Not After : May 2 02:41:58 2027 GMT
Subject: CN=18C4038A2C15338F6386092377CB164D9B3ECBB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4f:d6:00:c4:a1:26:a9:4a:8a:7e:c9:d1:b8:
db:32:41:2a:f9:ff:ff:ec:24:85:16:72:10:6c:fd:
ba:21:0d:73:1a:d8:73:f0:f6:08:8d:43:f8:9a:a0:
18:70:20:c9:e0:c3:58:10:a9:47:00:ef:a9:f8:61:
13:df:bf:e6:67:65:df:f5:95:91:ed:0b:cb:1f:08:
c6:e2:21:eb:52:11:42:95:11:9c:d4:d5:af:ce:3a:
49:0b:cd:54:4c:c9:8f:19:be:dd:f6:77:58:50:60:
3f:b7:b0:67:69:1b:0f:ca:e6:b7:fb:1b:c4:d5:55:
0b:ed:8b:8d:8d:a9:54:38:11:0d:20:b5:36:0f:44:
6a:d5:37:5d:8b:4c:6c:16:ab:20:5c:04:9f:ee:7f:
0f:db:f5:04:ea:ad:7e:70:16:97:84:b5:70:f5:7c:
53:e2:0b:56:18:3c:30:cb:ee:e2:2c:3b:1f:2c:87:
c8:e2:75:8a:e7:8a:57:47:3f:21:c2:65:51:52:60:
c0:f4:68:49:c1:a8:5f:fe:79:ab:ab:f5:f4:f0:23:
32:a2:7f:df:84:90:a3:20:a7:e2:83:42:be:56:41:
58:52:3c:19:9a:f8:45:00:77:a8:d7:79:6a:40:38:
83:73:e4:4a:f3:d7:bd:2e:f7:fe:e8:49:3d:76:93:
47:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C4:03:8A:2C:15:33:8F:63:86:09:23:77:CB:16:4D:9B:3E:CB:B8
X509v3 Authority Key Identifier:
keyid:B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37322e302f32342d3234203d3e203233363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.173.72.0/24
Signature Algorithm: sha256WithRSAEncryption
32:a3:16:43:5f:dd:6c:2a:68:c9:bf:11:5e:12:01:0e:1c:2e:
50:ea:ac:3d:a7:11:7b:d3:96:75:bf:28:17:05:75:6e:f2:28:
97:d3:d7:fa:cf:20:04:24:6b:c3:45:b2:69:d8:01:90:77:a9:
16:a4:c1:34:f0:17:00:d3:d5:5d:d7:79:0a:72:49:59:e0:a8:
f2:b2:64:46:1c:a9:77:c0:ac:7f:8c:d8:5c:cb:b0:c4:5f:7c:
56:12:f1:e4:76:f6:f0:7f:59:4e:f2:db:47:a9:be:e8:4c:9f:
df:c3:21:ae:d2:20:c0:eb:36:21:50:60:0d:1b:7f:ac:4a:63:
2d:fb:d9:91:ff:ca:a2:ff:16:47:70:e5:8a:69:ed:81:79:a9:
ab:4e:d1:31:00:cc:c5:af:d1:69:ac:5f:85:5a:cf:5f:3d:49:
bd:95:38:a1:77:85:e9:3a:72:5e:2e:d8:43:77:13:1e:4c:c3:
57:08:dd:56:7f:6b:ad:d0:ca:cc:0d:3c:5d:52:0f:0d:5d:56:
ad:46:bc:c5:cd:fc:a3:d9:82:55:11:e1:53:4d:a7:25:1b:75:
b2:74:76:16:65:b9:f1:ef:2e:89:89:7a:e9:0a:f8:3a:2d:f5:
c9:78:54:9f:6c:41:d4:cd:4b:85:8e:72:db:bd:01:2f:9d:da:
fc:80:4e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:44:06 2026 by rpki-client