
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e39312e302f32342d3234203d3e203233363935.roa
File: 3230322e3137332e39312e302f32342d3234203d3e203233363935.roa (raw, json)
Hash identifier: VydmoEbyQmfRw4AFdgDISzsLAqy1bTQlDhmMdK1BRUg=
Subject key identifier: A0:06:C5:51:1D:05:2A:06:A0:36:53:F1:16:F0:DA:05:A4:EE:62:B7
Certificate issuer: /CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Certificate serial: 02934BF96DFCC8C196EB04694E8F80DB79DF4EE4
Authority key identifier: B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e39312e302f32342d3234203d3e203233363935.roa
Signing time: Sun 03 May 2026 02:42:06 +0000
ROA not before: Sun 03 May 2026 02:37:06 +0000
ROA not after: Sun 02 May 2027 02:42:06 +0000
asID: 23695
IP address blocks: 202.173.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:93:4b:f9:6d:fc:c8:c1:96:eb:04:69:4e:8f:80:db:79:df:4e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Validity
Not Before: May 3 02:37:06 2026 GMT
Not After : May 2 02:42:06 2027 GMT
Subject: CN=A006C5511D052A06A03653F116F0DA05A4EE62B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9d:7e:41:15:2e:29:56:64:e5:6c:87:44:f3:
54:78:6c:86:19:80:28:f6:55:4d:b3:c2:48:87:9c:
76:94:13:62:37:7c:f3:c2:d7:57:c0:8d:84:a1:3b:
98:51:dd:44:7a:1c:d8:11:40:8e:c7:e8:ee:db:03:
3f:82:41:38:78:10:b3:ab:cd:0f:09:46:9b:70:8f:
51:4b:9f:df:ca:b7:1b:50:83:16:15:d9:6c:29:0d:
05:8e:48:ca:44:69:72:c2:91:8e:c1:34:a2:8a:50:
81:fc:1d:d2:9f:ef:18:05:e3:5d:18:ff:62:c7:4b:
12:0e:16:43:54:c3:03:23:bc:ed:c5:39:12:30:94:
bf:ae:67:86:30:f7:fd:f3:5f:00:0a:6c:da:4f:e5:
14:93:80:83:0f:35:b6:21:fa:e6:a3:f6:82:26:58:
a7:49:65:d9:88:a4:4c:f7:33:59:f8:1d:0e:08:4e:
17:3a:a8:0b:36:7f:e7:13:4e:b2:92:40:d4:7c:50:
22:d8:58:5e:90:d2:2d:9a:6d:e1:a7:3c:a8:59:98:
28:f2:10:df:f2:65:13:fb:38:61:9b:5d:a3:92:6c:
65:61:fd:3f:30:77:f6:57:b2:44:18:f7:54:b2:72:
2a:73:f4:a4:09:ed:d1:1c:10:0f:6b:f3:c3:5f:ee:
f5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:06:C5:51:1D:05:2A:06:A0:36:53:F1:16:F0:DA:05:A4:EE:62:B7
X509v3 Authority Key Identifier:
keyid:B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e39312e302f32342d3234203d3e203233363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.173.91.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:c9:d7:07:3e:7c:41:4e:50:be:02:70:e0:1f:9d:33:3b:c8:
f8:a6:b6:fd:65:5d:f2:85:89:0f:70:52:58:33:14:ba:58:16:
b2:b7:9d:cd:5c:56:d1:b7:f3:72:dd:95:5f:8d:a4:49:5a:c4:
3e:85:f9:22:1b:29:d7:ab:87:db:79:f5:c1:b7:27:85:5b:79:
af:b3:9f:6e:ca:45:87:7c:c1:63:71:4e:e3:c2:b1:c8:5a:05:
df:12:a0:79:84:7a:0f:a4:05:88:8f:fa:41:8f:43:45:57:93:
5c:11:33:81:da:ed:5f:ac:57:90:8c:de:ed:db:c7:b1:fc:fd:
70:4e:0c:33:b5:8b:b9:89:13:28:88:10:a8:0e:62:3d:e4:7f:
f3:cd:0f:42:1e:73:14:b1:c9:5a:ba:20:10:fa:92:ff:94:43:
85:1c:23:c0:e3:b5:76:e0:f0:b1:de:a1:f4:2f:62:ce:e2:6d:
99:7e:e2:ba:fe:78:16:63:c1:db:8d:67:1d:5e:5e:ca:29:10:
c2:e1:35:c5:e9:46:6b:1f:43:15:53:fc:a0:cf:ba:87:dd:1e:
b7:77:75:70:1e:f8:8c:bd:0e:69:71:5e:b7:69:d7:12:7e:89:
58:7c:25:c1:ad:92:27:ca:58:ec:7a:90:7a:2b:6e:da:4c:b8:
79:7f:6d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:17 2026 by rpki-client