
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37362e302f32342d3234203d3e203233363935.roa
File: 3230322e3137332e37362e302f32342d3234203d3e203233363935.roa (raw, json)
Hash identifier: rPkyyjwXj45WXwjy7QXYxDlMyK7dBqmEXgtPMd05+4k=
Subject key identifier: EB:45:EA:88:19:FD:5E:B9:BD:26:3F:F4:BB:2A:D4:54:DB:9D:7A:58
Certificate issuer: /CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Certificate serial: 5C9D223C9046FD0009A7DB3D3D0D952375C69EFD
Authority key identifier: B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37362e302f32342d3234203d3e203233363935.roa
Signing time: Sun 03 May 2026 02:42:04 +0000
ROA not before: Sun 03 May 2026 02:37:04 +0000
ROA not after: Sun 02 May 2027 02:42:04 +0000
asID: 23695
IP address blocks: 202.173.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:9d:22:3c:90:46:fd:00:09:a7:db:3d:3d:0d:95:23:75:c6:9e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Validity
Not Before: May 3 02:37:04 2026 GMT
Not After : May 2 02:42:04 2027 GMT
Subject: CN=EB45EA8819FD5EB9BD263FF4BB2AD454DB9D7A58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2a:d2:c7:de:f1:3e:c6:86:13:e8:58:57:99:
c1:bb:5d:db:bc:ae:35:a4:58:9f:89:e2:7f:40:73:
89:63:99:6a:93:49:b2:85:7f:cd:70:91:0d:0e:c4:
53:7b:15:da:07:e3:91:1b:25:69:25:89:ba:68:1f:
20:22:92:96:97:3b:cd:5f:e2:78:51:57:71:4e:5c:
76:4a:85:5b:a9:b7:80:06:f9:56:97:da:96:e7:84:
87:de:05:2a:db:71:dd:92:f5:c7:d5:ef:79:52:f9:
d7:9d:48:13:52:9f:70:7a:37:10:6a:3b:bc:b9:cf:
f6:12:51:1a:69:16:9b:c9:5c:69:dd:c1:1c:2b:91:
02:5a:6b:1d:17:15:99:58:96:29:22:77:8d:51:c5:
33:0c:f7:54:7b:d7:ad:35:65:c2:28:12:fd:b2:81:
c0:0a:b0:be:65:2e:55:2c:df:1c:43:13:b0:71:22:
71:2d:47:1c:b8:62:36:1a:b2:67:3f:c2:3d:af:55:
c1:d5:a7:3a:73:32:a6:d5:7e:28:2b:32:d3:0e:ee:
34:ff:ee:c5:8e:9b:21:7d:a0:de:b7:ac:ae:74:34:
e2:48:87:9e:1c:ed:9b:84:d1:28:cb:83:5d:e8:28:
c4:b7:9d:4c:e6:08:6e:40:62:82:52:f9:cc:ff:36:
89:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:45:EA:88:19:FD:5E:B9:BD:26:3F:F4:BB:2A:D4:54:DB:9D:7A:58
X509v3 Authority Key Identifier:
keyid:B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37362e302f32342d3234203d3e203233363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.173.76.0/24
Signature Algorithm: sha256WithRSAEncryption
09:8a:3a:12:0d:9c:3f:13:28:78:86:e6:40:7b:40:63:00:87:
0f:55:b7:c2:d3:0a:d0:72:69:b0:e9:44:f4:8b:6c:35:27:0d:
97:02:09:5a:7e:e3:8b:af:88:91:5e:a7:ae:a5:dc:66:31:d1:
22:32:70:54:33:c8:fb:12:81:99:97:71:a5:67:2f:09:2a:b6:
0b:32:b0:1e:b6:19:9b:06:53:2c:6c:cd:20:d8:0c:75:49:ba:
71:e6:c2:f4:26:6a:7a:7d:53:5e:8c:1e:34:15:74:ac:a8:cb:
b7:cd:33:0b:59:ef:f5:e9:a2:d4:91:82:75:ad:9f:1b:c2:94:
c3:c4:3f:f2:1b:40:d4:c4:28:b2:3d:96:83:d1:60:3a:2b:8e:
c1:a5:93:ff:4e:d5:05:cb:1b:d3:2d:37:b1:e1:a0:ba:f3:f1:
33:8d:06:43:ef:be:e5:b3:d3:2d:12:ec:52:da:ee:74:6c:84:
a6:a9:f4:90:07:6a:04:80:65:29:94:f0:6e:06:29:1e:e7:f3:
2b:9d:eb:e4:be:b5:32:ff:62:eb:48:66:3c:f8:0c:f4:f4:2b:
df:d4:e2:0a:b9:f1:6a:57:d8:89:0a:d6:e4:c4:d0:52:44:ed:
a0:a6:5c:53:fa:ea:b4:82:32:39:7a:e3:ca:6a:3e:ea:af:d6:
52:07:3f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:26 2026 by rpki-client