
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e39342e302f32342d3234203d3e203233363935.roa
File: 3230322e3137332e39342e302f32342d3234203d3e203233363935.roa (raw, json)
Hash identifier: qvafi8m8huVP8hz52ikCDy5s6ig7C5HewMKREL83WPQ=
Subject key identifier: 4B:9E:C3:C6:B7:FE:85:05:46:39:8D:09:DB:31:81:FD:81:D2:CC:67
Certificate issuer: /CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Certificate serial: 2FDD6A29CAFA3507575B1A25EA55F32AA3299890
Authority key identifier: B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e39342e302f32342d3234203d3e203233363935.roa
Signing time: Sun 03 May 2026 02:41:56 +0000
ROA not before: Sun 03 May 2026 02:36:56 +0000
ROA not after: Sun 02 May 2027 02:41:56 +0000
asID: 23695
IP address blocks: 202.173.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:dd:6a:29:ca:fa:35:07:57:5b:1a:25:ea:55:f3:2a:a3:29:98:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Validity
Not Before: May 3 02:36:56 2026 GMT
Not After : May 2 02:41:56 2027 GMT
Subject: CN=4B9EC3C6B7FE850546398D09DB3181FD81D2CC67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:19:e2:24:fd:a5:f1:a8:1e:95:69:33:58:fc:
54:39:bb:95:14:ec:df:55:4a:f3:3f:08:8a:ac:8b:
31:46:c5:b7:42:68:f0:5b:b2:2b:be:70:7e:0f:5d:
19:0b:31:a6:55:4d:de:8b:f6:9d:e8:97:83:73:f2:
a2:c5:2c:4e:1b:3f:2f:53:3b:13:da:44:97:0a:d3:
bf:c9:11:c8:7b:40:af:75:f0:2c:08:4b:68:05:33:
9d:b1:b2:6e:a6:f8:24:cc:46:d5:0a:5b:e5:72:f8:
b2:28:fe:1d:f3:9d:46:20:e4:e4:81:c0:82:2a:b0:
45:c8:c0:1a:23:e2:48:e6:21:20:51:f8:3d:03:9c:
bb:59:d9:84:e2:cf:58:22:cf:59:89:49:f3:38:71:
1c:56:f7:50:b9:ff:2a:cc:7b:6f:22:9a:e5:7b:4e:
fb:2a:f3:b4:73:61:16:51:a1:9e:18:a4:b4:7e:63:
5a:1c:b7:8d:fd:16:0f:b7:94:6a:9e:d4:9e:58:5a:
44:23:37:d5:0d:bd:0b:9d:88:f9:9f:39:3e:45:ab:
ff:d6:5a:19:5e:78:5f:18:52:03:fc:6c:81:75:c1:
e7:c4:21:97:67:c5:c1:22:24:aa:e4:2d:51:b2:26:
0a:38:d8:e7:2c:17:13:e9:6f:2b:bc:e4:ea:0b:36:
9d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9E:C3:C6:B7:FE:85:05:46:39:8D:09:DB:31:81:FD:81:D2:CC:67
X509v3 Authority Key Identifier:
keyid:B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e39342e302f32342d3234203d3e203233363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.173.94.0/24
Signature Algorithm: sha256WithRSAEncryption
37:c5:85:e5:ae:6f:19:50:84:9c:8b:80:7d:f8:8c:ef:b5:c4:
dc:96:bf:75:c0:38:e3:4e:26:7b:ac:39:b3:14:f3:17:a1:95:
72:b3:5b:4a:fd:04:24:49:32:f4:37:ac:a7:57:69:f9:87:5b:
20:22:ba:ca:63:22:f1:f5:e9:1c:9f:94:21:24:2b:32:38:bf:
39:10:23:2d:c3:d1:37:fb:2d:ff:5d:4a:49:f5:01:6d:11:19:
66:cb:49:64:a8:f6:18:11:d4:78:78:9e:3e:0c:6c:83:40:03:
e0:d8:18:05:28:9b:a4:eb:89:ac:4c:42:a0:ab:c1:66:e1:6c:
aa:b2:4d:f9:77:d0:3c:6c:7c:5b:c1:96:39:4d:1b:94:b4:ef:
93:bf:96:5c:0f:cd:95:8c:f4:8f:ec:0b:b5:61:48:cb:da:a4:
e4:e8:7c:70:30:d3:65:44:50:77:03:c1:17:44:cd:4e:ff:2e:
62:d2:16:47:c1:8a:84:93:e4:84:7a:c9:e2:f5:b9:b9:14:35:
b5:f1:57:5a:35:ca:d3:90:f0:20:f3:0b:75:0f:72:3c:e5:4a:
8f:8a:db:73:2e:b5:b2:03:58:d1:eb:07:c7:8c:02:f9:5c:1e:
2d:98:c2:34:96:f6:2c:c5:0e:ab:e5:8d:20:6e:c1:3e:e9:39:
3d:1e:38:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:51:53 2026 by rpki-client