
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e39322e302f32342d3234203d3e203233363935.roa
File: 3230322e3137332e39322e302f32342d3234203d3e203233363935.roa (raw, json)
Hash identifier: DlpzDPr6l/IxdAZbqMFPLQqg+cz8Ukj3HVPxhXcpdKY=
Subject key identifier: C9:48:91:CD:14:12:DD:C6:70:23:79:F6:F8:BC:87:1E:D2:8F:4C:17
Certificate issuer: /CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Certificate serial: 791C1417F8E0F4003E6D1CC0E1F1B4A8A1464BA8
Authority key identifier: B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e39322e302f32342d3234203d3e203233363935.roa
Signing time: Sun 03 May 2026 02:42:01 +0000
ROA not before: Sun 03 May 2026 02:37:01 +0000
ROA not after: Sun 02 May 2027 02:42:01 +0000
asID: 23695
IP address blocks: 202.173.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:1c:14:17:f8:e0:f4:00:3e:6d:1c:c0:e1:f1:b4:a8:a1:46:4b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Validity
Not Before: May 3 02:37:01 2026 GMT
Not After : May 2 02:42:01 2027 GMT
Subject: CN=C94891CD1412DDC6702379F6F8BC871ED28F4C17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:32:78:3b:12:67:ee:f5:ba:2a:2b:5d:47:9a:
1e:dd:24:42:fc:28:c7:56:bd:ce:a6:a8:f4:9e:3c:
21:d4:23:cf:c5:f1:a1:11:53:90:00:57:f4:74:c7:
c1:e2:77:28:4f:76:89:5b:6f:91:71:b2:bf:28:9f:
8d:5e:ef:fa:40:c3:fe:90:d8:b7:aa:78:f6:4d:53:
ea:b4:ba:a4:98:e6:fd:17:54:fe:95:32:35:a7:b8:
5b:d1:6c:9f:0b:7b:f9:c5:69:24:ff:86:88:fe:fe:
53:ff:e2:f6:d4:41:24:62:0e:91:7b:40:ca:72:54:
7a:b0:ec:17:d6:8d:d3:c5:ac:58:51:1e:8b:47:30:
39:ee:e9:70:eb:49:e2:83:4a:ad:d1:9e:7e:18:d3:
a6:64:e3:74:da:81:23:ec:d7:ff:00:0c:ca:86:19:
bb:a6:4f:85:ef:eb:6d:65:6f:fb:ea:23:06:90:e4:
a2:d6:8b:b0:bc:7c:b7:7c:9a:8e:0c:b9:28:42:ae:
4e:d5:34:5d:c4:f6:25:f9:1e:e6:61:bd:e2:d7:00:
e1:80:fd:16:e0:68:67:88:b0:88:c5:f3:06:58:a9:
66:f5:86:d8:f8:26:0e:bb:99:21:10:08:bc:48:51:
6e:77:5c:77:8c:d7:da:d1:d3:c9:4f:8e:99:88:d3:
c1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:48:91:CD:14:12:DD:C6:70:23:79:F6:F8:BC:87:1E:D2:8F:4C:17
X509v3 Authority Key Identifier:
keyid:B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e39322e302f32342d3234203d3e203233363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.173.92.0/24
Signature Algorithm: sha256WithRSAEncryption
70:0b:5e:8c:84:3d:d3:73:49:11:2f:7b:b5:58:16:ca:79:ed:
77:44:6a:c2:49:f8:b1:ba:96:d7:0d:fd:d3:60:62:7f:4d:93:
23:29:73:80:66:59:6a:dc:e5:c4:7f:c0:49:e8:e2:7a:f2:72:
c9:99:93:04:28:1c:12:c0:fb:fa:9a:9c:6c:ac:28:91:3d:3e:
3a:f2:c8:75:50:06:c5:4b:dd:17:f5:63:28:d9:ec:88:a3:4c:
74:17:f7:23:d1:01:6f:01:be:fe:e9:f5:c7:f3:d8:6e:01:1d:
58:40:c4:69:8e:70:0c:ba:55:3a:fb:de:8f:41:96:71:12:0a:
ae:10:7e:87:8a:10:e7:9a:dc:63:8f:b7:5c:cd:7e:fe:91:ca:
70:72:e0:e6:85:a5:01:86:7d:03:fa:7d:21:e7:1b:48:ca:75:
d6:6d:4e:34:c6:12:76:97:b7:e7:94:07:91:32:83:85:50:ae:
0f:28:c3:53:b0:a9:3b:31:73:5e:8b:56:f6:70:01:9d:9c:1b:
2c:5d:5f:d0:b5:9a:a7:f8:9b:8e:73:91:76:35:ed:13:94:a8:
15:db:23:04:29:72:e8:5a:c2:2b:fe:7e:1d:b0:97:f2:90:3d:
78:48:b9:04:f1:9b:b1:08:4e:f7:b0:0e:54:d2:bf:08:49:db:
17:35:33:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:44:01 2026 by rpki-client