
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38372e302f32342d3234203d3e203233363935.roa
File: 3230322e3137332e38372e302f32342d3234203d3e203233363935.roa (raw, json)
Hash identifier: jCfwrRycE8FTo6GABwIw2MdaCznQM7t5u6VgZpyL7dA=
Subject key identifier: 66:E4:AB:BB:41:7C:90:23:35:0D:E0:8F:E0:27:92:60:CC:69:0D:75
Certificate issuer: /CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Certificate serial: 66F5AD62D4087ECE3A31AE7E5CD76A6D96BAD9FE
Authority key identifier: B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38372e302f32342d3234203d3e203233363935.roa
Signing time: Sun 03 May 2026 02:42:05 +0000
ROA not before: Sun 03 May 2026 02:37:05 +0000
ROA not after: Sun 02 May 2027 02:42:05 +0000
asID: 23695
IP address blocks: 202.173.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:f5:ad:62:d4:08:7e:ce:3a:31:ae:7e:5c:d7:6a:6d:96:ba:d9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Validity
Not Before: May 3 02:37:05 2026 GMT
Not After : May 2 02:42:05 2027 GMT
Subject: CN=66E4ABBB417C9023350DE08FE0279260CC690D75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:b0:23:32:40:f1:87:59:42:f5:eb:57:20:
c3:67:b5:48:c0:eb:56:55:35:0a:f7:87:e8:b5:1b:
6e:7c:01:c1:17:29:9b:3a:67:46:be:18:6d:8e:4e:
f1:c3:a9:96:11:37:3e:73:dd:fd:09:81:99:5d:b1:
15:43:02:23:e3:17:81:bb:48:fd:2f:3a:58:42:77:
62:76:19:3a:9e:46:74:5b:bc:25:29:f1:d7:99:29:
07:cf:aa:c6:a3:dc:cb:87:9b:fd:10:8c:4c:e0:3c:
47:b0:f0:ea:9d:98:fa:ea:63:bb:5c:b1:21:41:3a:
7f:a9:84:9e:7f:d0:35:f5:a0:80:2d:ac:ee:e1:c2:
37:cc:a4:50:96:cf:79:a0:ac:75:06:d8:76:dc:19:
d6:a4:33:b7:07:a7:43:ce:d5:fb:68:77:4a:dc:0e:
27:2d:80:3e:42:0a:64:1e:e9:5c:e3:87:da:c7:b9:
89:bd:f7:6a:fb:69:5d:91:bb:37:1c:05:c8:06:6a:
61:0a:85:a6:02:c1:13:b0:68:30:4e:39:43:51:52:
ca:c3:76:e0:20:12:f2:c5:b8:ea:d4:bc:f5:a0:56:
84:76:ca:88:6e:d5:30:02:1d:8f:ad:1e:03:a6:60:
91:d1:5b:fa:5c:92:13:4a:2b:c4:67:1f:15:fb:69:
49:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E4:AB:BB:41:7C:90:23:35:0D:E0:8F:E0:27:92:60:CC:69:0D:75
X509v3 Authority Key Identifier:
keyid:B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e38372e302f32342d3234203d3e203233363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.173.87.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ff:36:40:20:2c:ce:64:27:6d:b0:01:bf:b2:a0:7d:fe:02:
96:db:7b:9e:db:07:db:74:7e:fa:a5:09:5e:c9:2f:1c:05:08:
6b:bc:58:73:0f:ec:1a:a9:ed:09:50:9a:86:80:be:b0:5c:bc:
3b:9a:18:fe:52:70:aa:1b:15:b8:84:21:20:6d:34:2a:8b:f8:
4c:ef:0e:62:7f:04:50:c1:58:60:8a:af:1b:3c:29:32:6a:6c:
3a:83:05:33:02:a4:72:d1:96:0c:9a:0b:b3:9c:a9:fb:f6:ce:
ab:5a:d0:80:d5:d5:67:c8:b3:a7:6e:08:74:fa:25:f7:bd:fc:
d9:e1:54:33:71:ee:b1:56:50:9b:90:22:85:a4:28:23:dd:03:
e8:99:52:95:8f:2b:62:b7:5e:f1:e2:bd:1e:d4:fd:8b:8f:27:
60:89:01:f0:28:2a:40:ae:0f:8d:3b:05:d9:96:69:26:1d:35:
a0:e8:11:ce:9a:13:eb:e1:b0:df:94:e1:ae:1c:d0:f2:e2:b5:
21:d4:e3:cb:0e:4a:69:0e:4a:c0:c2:89:e4:fb:02:bb:a3:cc:
85:7b:58:da:67:70:ec:83:ce:dc:d3:26:b1:94:ff:8b:81:3e:
95:ce:80:b4:76:fe:3e:6a:aa:02:bd:d1:7f:34:27:8d:47:b8:
7b:5a:2f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:44 2026 by rpki-client