
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e39302e302f32342d3234203d3e203233363935.roa
File: 3230322e3137332e39302e302f32342d3234203d3e203233363935.roa (raw, json)
Hash identifier: 1LInoDy3k5OOK/tSYmnU5lFvL3cDpKbQjHtV3PKo6zc=
Subject key identifier: 4C:C8:E0:87:0B:3C:F4:70:C9:E4:36:00:3C:6D:C5:E3:76:6D:47:A1
Certificate issuer: /CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Certificate serial: 2C8385AC5EDF342AC5ECF261D5CCB3BE38302F95
Authority key identifier: B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e39302e302f32342d3234203d3e203233363935.roa
Signing time: Sun 03 May 2026 02:42:04 +0000
ROA not before: Sun 03 May 2026 02:37:04 +0000
ROA not after: Sun 02 May 2027 02:42:04 +0000
asID: 23695
IP address blocks: 202.173.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:83:85:ac:5e:df:34:2a:c5:ec:f2:61:d5:cc:b3:be:38:30:2f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Validity
Not Before: May 3 02:37:04 2026 GMT
Not After : May 2 02:42:04 2027 GMT
Subject: CN=4CC8E0870B3CF470C9E436003C6DC5E3766D47A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:20:6f:99:34:02:dd:9c:8c:58:f0:4c:4a:84:
3e:d6:19:10:66:1f:3a:78:cf:77:3c:98:88:95:5d:
f9:40:3a:85:99:05:a2:3e:8c:12:7a:11:2f:39:77:
dd:d3:a8:99:87:d4:47:ba:ab:57:81:d9:8e:f0:5a:
a0:b1:fb:36:9e:d0:14:fe:ca:da:b6:7b:b9:40:00:
bd:1a:8f:32:34:19:d8:59:9b:e0:cf:4f:d0:3f:3e:
17:1a:09:7f:a4:17:d6:91:7b:0b:bc:66:22:f2:ea:
a1:f3:bc:37:05:25:b4:49:e3:42:fd:1e:ca:47:0f:
1f:ba:98:2b:26:26:6c:14:6b:45:46:ce:eb:d2:5b:
42:94:2f:ee:1c:a3:a3:43:04:17:f3:4c:f4:6e:d1:
24:35:f1:f9:d1:50:8a:54:51:ef:8e:1e:e0:d6:2b:
32:41:50:6f:af:8a:90:16:be:72:36:86:c7:2e:a9:
22:e3:14:37:37:1f:61:02:bb:4f:cd:0a:c2:db:96:
53:28:27:0b:29:cd:77:ae:1a:7e:d3:74:f5:3d:01:
6d:f0:1b:ff:8a:47:d6:7e:e9:bb:50:96:30:3d:a2:
53:29:0b:a7:84:bb:cb:e3:2b:e0:03:e3:6c:72:cf:
97:6b:01:f9:6a:1f:09:a8:6f:c7:5b:55:c3:23:1d:
9a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C8:E0:87:0B:3C:F4:70:C9:E4:36:00:3C:6D:C5:E3:76:6D:47:A1
X509v3 Authority Key Identifier:
keyid:B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e39302e302f32342d3234203d3e203233363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.173.90.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:d9:6d:48:3b:ec:ad:b8:94:a6:19:21:a6:fd:62:99:b8:03:
b7:c5:b6:2e:75:39:96:c6:29:97:3f:e2:53:73:1a:31:06:66:
fd:73:c2:f4:f7:c4:d1:0c:64:8c:7d:c0:a5:06:a5:1c:71:0d:
5a:33:ac:da:04:bc:11:85:b7:ce:42:68:26:00:66:11:38:fe:
94:39:89:11:c7:02:90:3a:d7:9d:29:5f:c5:24:36:46:d6:cf:
af:c7:91:34:14:33:56:98:e2:27:67:02:3d:3d:7b:24:5a:e9:
17:f7:a0:6d:1a:18:16:62:7a:34:a0:ee:8b:c8:a4:07:38:9d:
8a:3a:f7:2e:5f:1e:5a:ed:c5:f1:d4:fa:c0:99:b2:fe:8f:c1:
cd:7a:d4:11:db:9d:52:98:4e:9f:3f:be:94:ce:ba:bd:a1:6b:
be:ff:18:12:82:da:d4:19:92:24:24:b2:18:38:8a:12:3e:f7:
76:eb:e9:a7:2f:1f:dd:d4:28:c4:75:5f:6c:f4:5d:3d:4f:be:
1d:56:ea:fd:e2:25:b6:26:01:72:03:1d:fe:c3:62:f6:85:1f:
dc:27:02:ac:af:7b:40:cc:98:44:c4:4a:d8:c9:d6:5b:96:e1:
f1:d9:c4:b8:70:a0:d1:f5:2f:22:98:9a:29:18:66:94:3e:c4:
19:eb:8e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:52:01 2026 by rpki-client