
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37342e302f32342d3234203d3e203233363935.roa
File: 3230322e3137332e37342e302f32342d3234203d3e203233363935.roa (raw, json)
Hash identifier: uog+haZno/RfxIazE2AO1ctMBJVOkGxn5IW05EKGgZg=
Subject key identifier: 91:34:21:C1:E4:B0:54:EC:8B:4B:BB:FF:FA:E3:5F:23:60:05:0D:FD
Certificate issuer: /CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Certificate serial: 5C8BB66BA0B16F5A335469E812C1AD4C590F7B65
Authority key identifier: B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37342e302f32342d3234203d3e203233363935.roa
Signing time: Sun 03 May 2026 02:41:59 +0000
ROA not before: Sun 03 May 2026 02:36:59 +0000
ROA not after: Sun 02 May 2027 02:41:59 +0000
asID: 23695
IP address blocks: 202.173.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:8b:b6:6b:a0:b1:6f:5a:33:54:69:e8:12:c1:ad:4c:59:0f:7b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Validity
Not Before: May 3 02:36:59 2026 GMT
Not After : May 2 02:41:59 2027 GMT
Subject: CN=913421C1E4B054EC8B4BBBFFFAE35F2360050DFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9c:b9:f7:8f:e5:dc:24:19:8b:df:e3:5b:d8:
d9:88:0c:f7:ae:43:4e:c6:92:5a:4f:0d:9c:ff:c2:
0c:94:c6:86:c9:e9:f7:40:2e:b3:bd:d0:a8:26:67:
a2:c1:24:43:21:92:c4:34:00:c1:36:17:02:e1:ba:
74:32:f9:13:67:21:83:d5:30:9a:92:e1:ae:bf:1c:
cc:34:3f:6c:e0:85:b7:db:ce:ee:5e:87:a7:04:94:
63:7a:dc:81:cb:c4:64:89:9b:bf:2c:e3:8b:58:49:
d0:a0:bf:1d:74:51:3d:dd:9c:a6:ea:39:8a:2e:a8:
36:5f:56:c6:5e:f3:94:d2:2f:b2:75:8d:2a:dd:3b:
ba:21:e4:59:b3:92:28:2b:cd:0d:84:c1:c9:97:2e:
80:24:ab:49:ae:8e:4c:3f:50:d1:27:ca:98:77:03:
5f:c4:dd:ab:b8:83:c8:b8:61:d0:de:94:89:72:1d:
d1:16:62:30:75:19:7d:52:20:93:85:66:f8:dd:fa:
d4:89:e5:1c:62:57:28:80:57:1d:b1:a1:09:48:95:
bd:8a:ba:f6:b9:7d:df:12:9d:1f:0f:87:a8:bc:eb:
85:31:56:f0:62:55:71:d3:8e:08:91:e1:48:1f:fd:
32:ff:9b:f6:5f:ee:6c:f1:58:4c:d5:15:b9:07:2a:
34:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:34:21:C1:E4:B0:54:EC:8B:4B:BB:FF:FA:E3:5F:23:60:05:0D:FD
X509v3 Authority Key Identifier:
keyid:B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37342e302f32342d3234203d3e203233363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.173.74.0/24
Signature Algorithm: sha256WithRSAEncryption
55:f7:13:eb:4a:5a:20:cf:68:51:bf:7e:1e:9f:81:73:64:eb:
e0:b6:23:56:2d:75:5f:f7:57:3c:67:40:61:61:4b:11:0e:61:
f0:9c:8b:9d:af:5a:7a:7e:08:f2:69:7a:aa:23:18:fc:a9:0f:
c6:e7:b5:48:30:08:fa:1c:cc:b2:a8:64:d2:5a:3c:30:b3:fb:
17:76:93:bb:3b:b4:16:3a:1b:3d:3b:ad:c7:fb:1d:5f:41:8f:
5e:4b:58:a1:ba:b4:ff:c4:03:da:f4:89:f0:e2:1f:4a:18:bd:
36:bb:4d:f2:4d:fd:94:de:dc:03:c2:4b:53:5f:e4:e0:70:21:
44:d7:fa:a5:3a:0c:11:c4:be:84:79:6c:35:c6:29:da:8f:c5:
35:e3:9a:ec:31:9c:a8:e5:12:20:a9:62:38:c6:0d:de:4d:84:
79:ee:35:b7:09:9f:dd:05:fe:c3:32:f6:69:d4:57:01:67:28:
81:da:db:d9:c3:fe:22:3c:94:d1:85:f0:c0:aa:9d:0e:51:56:
82:20:f6:13:1d:8e:c4:e6:ce:cc:40:c4:00:1e:f7:59:c2:e6:
8b:03:90:06:41:9e:fa:4b:e6:40:0d:84:79:49:87:a3:0e:38:
88:7b:7e:50:02:2b:9b:f5:33:87:81:52:24:13:3e:58:6a:29:
5c:c3:ab:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:09:16 2026 by rpki-client