
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37332e302f32342d3234203d3e203233363935.roa
File: 3230322e3137332e37332e302f32342d3234203d3e203233363935.roa (raw, json)
Hash identifier: vdC1/lIsYXzLi92D+PXAhnM+9Ha0NvbHPaIYWCbNBRk=
Subject key identifier: B0:B1:D1:EB:20:DB:78:52:43:DE:C6:FD:4B:BC:E1:F1:98:18:52:30
Certificate issuer: /CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Certificate serial: 5F3F82C482DEADC9E22AA7BE0B2FF01D9CEC883D
Authority key identifier: B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37332e302f32342d3234203d3e203233363935.roa
Signing time: Sun 03 May 2026 02:41:58 +0000
ROA not before: Sun 03 May 2026 02:36:58 +0000
ROA not after: Sun 02 May 2027 02:41:58 +0000
asID: 23695
IP address blocks: 202.173.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:3f:82:c4:82:de:ad:c9:e2:2a:a7:be:0b:2f:f0:1d:9c:ec:88:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Validity
Not Before: May 3 02:36:58 2026 GMT
Not After : May 2 02:41:58 2027 GMT
Subject: CN=B0B1D1EB20DB785243DEC6FD4BBCE1F198185230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b5:3c:ae:10:32:66:3a:3f:a8:36:2f:7d:d4:
de:c6:ac:4c:68:c3:c7:20:cd:16:90:d6:5d:36:4c:
76:6a:3b:dd:ca:5c:94:87:54:fc:ff:26:9c:c2:44:
ee:b5:a5:0a:a7:0f:e8:03:77:25:cd:11:06:ef:50:
81:80:a5:6d:ac:87:7a:08:2b:06:1a:19:cc:fe:80:
d9:47:9c:17:52:e4:d7:02:17:c7:08:3d:86:46:c0:
ea:a5:c9:24:9e:06:81:16:ab:59:1c:e5:60:70:25:
98:1a:71:67:af:28:8a:bf:6a:69:e2:84:b1:4c:43:
7b:ee:fe:87:93:60:1b:e0:2b:6e:56:04:97:77:97:
27:b1:9c:b5:0f:33:df:99:1f:56:5f:91:a3:34:40:
65:5d:14:95:58:a4:64:d7:7a:84:a9:f1:01:9d:89:
26:73:b6:11:27:82:1b:b6:98:04:0d:dd:2e:60:97:
ad:2f:04:bb:84:6e:36:0c:ed:d1:fe:67:d4:f5:f9:
7f:0f:40:55:e9:aa:d3:37:bf:51:43:4d:df:69:e7:
72:22:e0:e9:26:d2:7d:67:3e:17:b2:eb:88:1f:69:
5f:02:4c:4d:c5:34:70:d5:b2:b4:68:c9:8e:f3:49:
22:56:8c:f7:17:24:9c:9a:38:01:08:c4:de:2b:15:
19:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B1:D1:EB:20:DB:78:52:43:DE:C6:FD:4B:BC:E1:F1:98:18:52:30
X509v3 Authority Key Identifier:
keyid:B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37332e302f32342d3234203d3e203233363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.173.73.0/24
Signature Algorithm: sha256WithRSAEncryption
32:a2:e9:1e:ee:c4:ea:08:1f:1f:e8:4c:b6:f0:9a:c4:47:ac:
70:00:b6:a5:36:14:c2:80:4f:ac:04:d9:a0:9f:47:58:e5:b1:
f2:36:c3:bc:37:5e:6c:a0:30:0a:7d:61:b5:f3:b5:d5:22:a4:
70:d4:e8:b6:e7:ef:a6:45:db:9c:54:8c:db:49:8a:7e:21:68:
e5:37:a5:01:62:da:76:12:ad:7c:84:b5:98:43:e6:d0:1b:7b:
67:8e:97:3e:7b:ac:5d:44:ef:31:bb:d9:f0:d2:92:6b:a4:7b:
c8:b0:7c:e9:2e:0e:47:87:4f:15:44:20:0f:4f:05:0a:59:5b:
88:19:84:4a:2c:af:5c:26:91:0f:e2:4d:2e:2b:50:57:f3:7e:
e5:57:17:dd:46:22:9f:78:ce:ec:4c:de:09:ee:37:32:de:b3:
86:d3:74:30:b6:d8:d0:93:d6:7b:71:d4:3e:26:3a:71:59:9c:
27:76:e5:b4:5c:60:aa:45:93:e7:3a:51:9d:1b:0c:c6:16:7b:
31:ac:ba:7d:b2:12:4a:c8:94:6b:25:4e:d1:bf:0c:4d:c9:c9:
83:cd:a9:eb:ef:ef:f2:3b:72:1b:23:4c:55:ac:e0:6e:12:cd:
f0:17:ae:6a:24:ad:c1:47:70:92:cc:69:cf:82:94:7b:fa:94:
58:40:e0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:53 2026 by rpki-client