
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38322e302f32342d3234203d3e203233363935.roa
File: 3230322e3137332e38322e302f32342d3234203d3e203233363935.roa (raw, json)
Hash identifier: PPdjeCZapqt1vplyLZL45WylLiKXCMrs2rRBsDVyvOo=
Subject key identifier: 2D:50:65:C9:1B:68:82:A4:15:FE:B9:53:26:C7:3F:2F:22:57:8E:74
Certificate issuer: /CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Certificate serial: 6F376BF17EFA202A5FE3D0C41F09E7BD69A78C14
Authority key identifier: B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38322e302f32342d3234203d3e203233363935.roa
Signing time: Sun 03 May 2026 02:42:02 +0000
ROA not before: Sun 03 May 2026 02:37:02 +0000
ROA not after: Sun 02 May 2027 02:42:02 +0000
asID: 23695
IP address blocks: 202.173.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:37:6b:f1:7e:fa:20:2a:5f:e3:d0:c4:1f:09:e7:bd:69:a7:8c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Validity
Not Before: May 3 02:37:02 2026 GMT
Not After : May 2 02:42:02 2027 GMT
Subject: CN=2D5065C91B6882A415FEB95326C73F2F22578E74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7b:77:00:68:e2:d8:0b:fc:32:75:5d:81:28:
3e:56:51:f2:0c:ed:28:51:89:86:65:39:e4:03:8b:
3a:4e:76:17:0c:f3:60:88:8d:d7:82:0c:d4:67:96:
bc:f6:b9:59:b5:fe:61:5c:50:3f:63:a2:4c:c3:55:
d6:39:c9:0a:97:ab:fb:ae:32:99:5b:12:57:21:7a:
37:c3:f0:de:42:d6:6e:0e:e5:da:ed:59:17:d7:84:
fb:5c:da:e5:d4:f3:b1:7a:70:43:3d:c7:ff:8a:70:
58:9e:74:97:c0:05:91:38:98:ee:fc:77:93:f4:d1:
45:cf:88:9e:bc:94:bc:df:d6:48:78:21:2d:05:2b:
e4:48:a1:be:f1:d7:33:11:56:91:4c:eb:be:68:83:
35:eb:aa:db:a4:c8:5d:3c:24:5a:5e:dc:5a:bb:3f:
c4:5d:f2:43:2b:f0:cc:7a:94:12:73:31:b3:f9:be:
c0:ac:5e:35:cb:d6:d1:4a:66:06:43:b6:66:34:1b:
7d:18:61:19:7c:8e:4b:48:fc:f4:1d:44:91:01:86:
91:1a:98:35:3d:ea:01:37:c9:74:51:b5:e1:5e:58:
0c:a8:0e:ef:bc:88:49:7c:61:5a:96:7e:63:b4:86:
14:b1:cf:f9:29:cd:27:ed:20:f3:4c:f2:60:8b:cf:
c7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:50:65:C9:1B:68:82:A4:15:FE:B9:53:26:C7:3F:2F:22:57:8E:74
X509v3 Authority Key Identifier:
keyid:B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38322e302f32342d3234203d3e203233363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.173.82.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:9b:08:6e:bc:53:f9:6a:af:23:d1:36:89:49:39:c7:50:36:
3e:1f:72:9e:ce:f1:86:f6:ad:10:c0:a5:88:15:87:7e:a2:8b:
74:97:a6:c1:5c:bb:31:37:95:11:f9:20:56:61:b5:6e:b6:6b:
2a:a8:24:74:12:d8:bd:e8:0b:32:2f:ff:6f:c5:4d:47:30:f9:
a2:47:cc:e1:65:21:bb:78:e3:f8:2f:f8:ba:9a:98:59:d2:d7:
8c:3b:ac:d1:d1:82:20:e3:da:12:c4:c5:4e:42:ca:f3:5d:ee:
6d:97:27:6b:54:24:a0:e4:df:af:a0:31:a4:77:5f:15:b1:9e:
6b:c5:b5:33:68:27:e5:73:13:ab:52:04:4a:09:42:00:3c:91:
38:10:0a:3d:1f:cd:33:09:7c:7e:1d:32:21:21:48:b8:e3:44:
40:7d:69:f5:a3:79:46:4d:26:c1:52:78:69:95:5d:60:4b:2c:
86:c9:17:a9:4e:ca:39:51:72:5d:6f:d6:9c:97:dd:a6:d1:09:
3b:53:4f:85:b4:11:7f:51:8f:f3:1d:2f:de:29:06:a4:c7:83:
96:cd:a6:a3:1e:42:2d:51:0a:b2:0a:ed:a1:31:e6:a8:cb:fa:
7c:15:82:01:79:38:cc:75:6d:f5:a5:0d:30:cc:89:45:a9:7e:
e4:70:f4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:20 2026 by rpki-client