
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38332e302f32342d3234203d3e203233363935.roa
File: 3230322e3137332e38332e302f32342d3234203d3e203233363935.roa (raw, json)
Hash identifier: L9/41HJ0IvQi6O0xxDbn47FOyT7XU6DPAh9PNdhvcjc=
Subject key identifier: DA:52:1F:0E:7B:59:E8:E7:7A:33:1E:86:0C:09:08:93:4B:78:F8:16
Certificate issuer: /CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Certificate serial: 42FA5C114C4BC9A1F8A9810E757C7E3F183AAD3A
Authority key identifier: B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38332e302f32342d3234203d3e203233363935.roa
Signing time: Sun 03 May 2026 02:41:58 +0000
ROA not before: Sun 03 May 2026 02:36:58 +0000
ROA not after: Sun 02 May 2027 02:41:58 +0000
asID: 23695
IP address blocks: 202.173.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:fa:5c:11:4c:4b:c9:a1:f8:a9:81:0e:75:7c:7e:3f:18:3a:ad:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Validity
Not Before: May 3 02:36:58 2026 GMT
Not After : May 2 02:41:58 2027 GMT
Subject: CN=DA521F0E7B59E8E77A331E860C0908934B78F816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f7:b2:2c:f3:b2:30:00:7f:49:4d:42:72:f7:
db:61:ec:75:94:e5:11:86:09:b6:57:00:31:1f:05:
69:b4:92:4b:9e:d4:de:b8:76:3d:62:72:b9:e4:e2:
f9:b5:c2:3e:ab:9b:bb:30:c9:24:cb:b3:0c:27:5b:
cf:8a:51:6a:a0:3f:37:61:1d:62:05:88:6c:ab:47:
1c:d0:0c:a6:6c:69:39:3e:8a:91:b0:9e:00:c4:e9:
1f:0d:8b:65:50:1d:1f:55:43:62:a3:b6:fc:1f:43:
ad:50:4f:ea:7c:8a:8c:9c:41:6e:35:2f:3e:df:da:
a4:66:b6:4e:e9:c4:4c:ea:ac:dd:62:2c:32:7b:1d:
1a:44:6f:68:82:d5:1b:3f:1a:00:e2:61:14:62:25:
9c:75:e7:6f:98:0f:f3:56:14:99:83:66:d3:8f:a3:
9e:89:ad:14:31:47:5c:b4:54:e2:39:df:37:8e:95:
65:77:8a:c8:da:fc:9c:4a:c5:dc:59:30:b5:68:ea:
93:fd:bc:9d:15:6d:2a:2c:60:ce:f2:64:21:5e:41:
ed:6b:19:2b:f1:1d:44:02:fa:54:c4:fb:f9:ee:70:
10:d9:91:9d:e3:86:8b:48:e4:a9:02:29:08:b6:de:
d2:ba:bd:d7:c8:61:e9:c8:b2:ed:96:be:e1:3d:d6:
c1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:52:1F:0E:7B:59:E8:E7:7A:33:1E:86:0C:09:08:93:4B:78:F8:16
X509v3 Authority Key Identifier:
keyid:B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38332e302f32342d3234203d3e203233363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.173.83.0/24
Signature Algorithm: sha256WithRSAEncryption
74:97:da:b6:22:ab:43:fc:c6:64:83:ff:2a:17:e6:7b:7d:b0:
c4:cf:8b:d4:d5:53:e9:70:19:e3:a4:b6:6c:83:f4:5e:05:72:
e0:06:8a:ff:bd:18:4a:ab:ae:cd:8f:0a:15:c6:e0:c8:f0:e2:
c3:15:31:27:b3:b8:ab:c4:71:78:aa:ee:fa:ee:78:7a:fe:20:
01:fa:19:eb:46:4e:98:52:81:a7:26:46:ac:69:f2:6a:50:16:
28:3e:4b:5f:7b:c5:27:b9:b5:a4:c5:70:81:99:6d:69:e7:b0:
8b:e1:b9:f6:9a:65:10:2e:7d:31:9f:e2:9a:4d:63:5a:f3:40:
60:a5:2f:09:e2:2d:1a:40:4a:0c:6a:b9:c3:81:2c:30:48:ae:
72:21:c6:3f:4e:29:7b:d3:30:67:dc:03:66:17:f4:e8:08:c0:
0b:32:66:61:4a:2a:d6:88:06:cc:98:a7:ff:a3:ef:33:24:fa:
e5:a0:5e:75:c1:31:27:d7:f6:64:40:11:5d:79:cf:0b:2c:4a:
27:45:52:af:16:27:24:eb:64:b2:0c:0c:13:44:3d:04:e8:8e:
de:e5:fe:d1:cd:66:74:fd:1c:14:93:21:e1:5c:41:e1:03:16:
46:05:0e:5c:01:bf:65:c8:47:d9:00:a9:21:cf:80:06:c1:b1:
95:4f:12:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:51:10 2026 by rpki-client