
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37372e302f32342d3234203d3e203233363935.roa
File: 3230322e3137332e37372e302f32342d3234203d3e203233363935.roa (raw, json)
Hash identifier: x+wKwqxB/yyG/7JO6/ExKWK7kGWLoTOE+AsQ2kPsjqo=
Subject key identifier: A1:5C:6A:11:45:49:2F:B4:D3:46:86:75:13:03:B6:16:CB:F0:9C:A7
Certificate issuer: /CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Certificate serial: 55E4C4657277FF9D9645D2F6ED23A810322E0401
Authority key identifier: B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37372e302f32342d3234203d3e203233363935.roa
Signing time: Sun 03 May 2026 02:41:59 +0000
ROA not before: Sun 03 May 2026 02:36:59 +0000
ROA not after: Sun 02 May 2027 02:41:59 +0000
asID: 23695
IP address blocks: 202.173.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:e4:c4:65:72:77:ff:9d:96:45:d2:f6:ed:23:a8:10:32:2e:04:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Validity
Not Before: May 3 02:36:59 2026 GMT
Not After : May 2 02:41:59 2027 GMT
Subject: CN=A15C6A1145492FB4D34686751303B616CBF09CA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:38:5d:3f:b7:3f:2b:ba:60:25:59:68:60:7e:
3d:68:98:df:b8:ff:72:fd:aa:d4:35:3c:5c:18:21:
98:ea:15:dc:13:c0:63:b3:de:30:e7:8e:df:29:d9:
f1:d5:d0:e0:68:ea:df:b0:f4:62:30:13:bd:6c:f2:
c2:36:33:9a:d5:c8:f9:bb:a5:09:30:d7:29:21:40:
3e:57:55:1a:2b:91:3c:ea:a1:73:46:a1:23:71:a1:
b1:e0:01:28:43:29:70:a6:c6:0e:5e:0c:9d:69:74:
2a:8d:9c:0d:ae:58:39:b9:6a:ea:5f:2e:af:bb:85:
6d:db:ea:04:5b:3d:9c:09:66:c4:49:6f:95:10:2d:
6a:f6:85:53:a3:31:f2:a6:d6:12:66:99:07:1c:a9:
38:9e:82:2c:ad:c2:aa:f3:a3:6b:bf:36:a9:76:96:
61:ee:72:18:b6:f4:b7:c2:1b:6c:9a:ce:98:49:a7:
1e:f6:4b:44:f4:6c:3f:a6:14:7f:d0:a7:ce:3e:6a:
aa:ce:f6:90:a5:6c:98:36:ee:a1:5d:2d:b3:1c:2c:
c8:be:35:62:d5:98:a1:dd:9e:c3:87:d1:15:d5:7d:
24:8a:a7:04:ad:1e:89:07:25:1b:e9:20:fa:bd:91:
45:69:97:14:d4:2d:5d:8d:a9:3d:8b:8f:f6:54:3d:
bb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5C:6A:11:45:49:2F:B4:D3:46:86:75:13:03:B6:16:CB:F0:9C:A7
X509v3 Authority Key Identifier:
keyid:B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37372e302f32342d3234203d3e203233363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.173.77.0/24
Signature Algorithm: sha256WithRSAEncryption
02:65:e6:7e:87:89:7a:5d:30:62:9f:05:0f:53:1f:08:1e:f4:
39:1e:70:a3:dc:f1:92:74:f3:a1:b1:72:70:28:96:09:3f:80:
e9:e9:2c:66:5a:1e:24:9c:2d:a3:67:5d:d9:39:de:41:2d:3e:
fe:c5:14:ca:8d:68:0e:76:84:2b:bf:7f:4b:dd:28:e2:e0:fb:
df:eb:5e:1f:2a:4a:5f:5f:e4:2d:29:e6:d1:73:fb:32:21:1a:
e2:d0:99:21:01:ed:7e:43:71:ac:db:da:c5:27:2e:0e:b1:e2:
75:7d:9d:53:b6:39:ad:42:d8:e7:0a:41:0c:31:43:3f:7d:70:
68:e6:0a:3f:79:7a:a6:2f:c1:02:89:ea:24:c9:af:fd:b4:8b:
c2:17:cd:ac:6b:f8:27:fe:38:ca:bf:8c:45:75:8b:7f:f0:af:
e2:e2:57:c0:7d:9a:29:86:15:ba:00:3a:19:13:31:10:f0:5a:
70:2a:ea:fc:fe:70:75:94:ef:50:cc:04:95:96:4d:45:14:83:
c0:71:a1:bc:f1:a9:1b:d3:c9:da:f7:57:06:16:7f:51:29:83:
16:37:47:32:76:32:59:a3:66:f7:50:60:0b:1f:61:12:7c:d6:
17:a8:f7:6a:76:4b:86:12:de:ff:a7:25:49:85:c1:ea:5a:b5:
a3:49:f8:7f
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUVeTEZXJ3/52WRdL27SOoEDIuBAEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjE2RjNCNDdCQjAyMUM2MUQyNjhGMEE0REJFQTE1NjlG
MDlGM0U1RTAeFw0yNjA1MDMwMjM2NTlaFw0yNzA1MDIwMjQxNTlaMDMxMTAvBgNV
BAMTKEExNUM2QTExNDU0OTJGQjREMzQ2ODY3NTEzMDNCNjE2Q0JGMDlDQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChOF0/tz8rumAlWWhgfj1omN+4
/3L9qtQ1PFwYIZjqFdwTwGOz3jDnjt8p2fHV0OBo6t+w9GIwE71s8sI2M5rVyPm7
pQkw1ykhQD5XVRorkTzqoXNGoSNxobHgAShDKXCmxg5eDJ1pdCqNnA2uWDm5aupf
Lq+7hW3b6gRbPZwJZsRJb5UQLWr2hVOjMfKm1hJmmQccqTiegiytwqrzo2u/Nql2
lmHuchi29LfCG2yazphJpx72S0T0bD+mFH/Qp84+aqrO9pClbJg27qFdLbMcLMi+
NWLVmKHdnsOH0RXVfSSKpwStHokHJRvpIPq9kUVplxTULV2NqT2Lj/ZUPbtnAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUoVxqEUVJL7TTRoZ1EwO2FsvwnKcwHwYDVR0j
BBgwFoAUsW87R7sCHGHSaPCk2+oVafCfPl4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmYwZjJiZDktNDJhZS00NDlhLThkNTctYjI2ZGEwNGQ3ZWUxLzAvQjE2RjNCNDdC
QjAyMUM2MUQyNjhGMEE0REJFQTE1NjlGMDlGM0U1RS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CMTZGM0I0N0JCMDIxQzYxRDI2OEYwQTREQkVBMTU2OUYwOUYz
RTVFLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZmMGYyYmQ5LTQyYWUtNDQ5YS04
ZDU3LWIyNmRhMDRkN2VlMS8wLzMyMzAzMjJlMzEzNzMzMmUzNzM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMqtTTANBgkqhkiG
9w0BAQsFAAOCAQEAAmXmfoeJel0wYp8FD1MfCB70OR5wo9zxknTzobFycCiWCT+A
6eksZloeJJwto2dd2TneQS0+/sUUyo1oDnaEK79/S90o4uD73+teHypKX1/kLSnm
0XP7MiEa4tCZIQHtfkNxrNvaxScuDrHidX2dU7Y5rULY5wpBDDFDP31waOYKP3l6
pi/BAonqJMmv/bSLwhfNrGv4J/44yr+MRXWLf/Cv4uJXwH2aKYYVugA6GRMxEPBa
cCrq/P5wdZTvUMwElZZNRRSDwHGhvPGpG9PJ2vdXBhZ/USmDFjdHMnYyWaNm91Bg
Cx9hEnzWF6j3anZLhhLe/6clSYXB6lq1o0n4fw==
-----END CERTIFICATE-----
Generated at Wed May 13 03:58:49 2026 by rpki-client