
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e39352e302f32342d3234203d3e203233363935.roa
File: 3230322e3137332e39352e302f32342d3234203d3e203233363935.roa (raw, json)
Hash identifier: IxSe3Xr1qddMwZDfLIWYsSivDYhp37EtqjK86ZCa4Ps=
Subject key identifier: 36:DF:D4:40:7D:6A:48:B5:47:32:BA:2C:46:18:48:CB:AC:BB:0F:BA
Certificate issuer: /CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Certificate serial: 1C06DCCEC948F55F2A8CE27584E59581CB36F909
Authority key identifier: B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e39352e302f32342d3234203d3e203233363935.roa
Signing time: Sun 03 May 2026 02:41:58 +0000
ROA not before: Sun 03 May 2026 02:36:58 +0000
ROA not after: Sun 02 May 2027 02:41:58 +0000
asID: 23695
IP address blocks: 202.173.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 14:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:06:dc:ce:c9:48:f5:5f:2a:8c:e2:75:84:e5:95:81:cb:36:f9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E
Validity
Not Before: May 3 02:36:58 2026 GMT
Not After : May 2 02:41:58 2027 GMT
Subject: CN=36DFD4407D6A48B54732BA2C461848CBACBB0FBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:de:4b:ab:be:db:f7:5d:7e:8b:1b:23:e4:8c:
1f:9b:aa:38:a5:8a:fc:c1:38:2c:0c:02:dc:f4:3f:
d0:46:5b:ed:8b:6d:7e:0f:76:1b:37:ac:34:2e:a7:
9f:ce:a7:53:36:a5:86:43:1f:97:41:f1:76:9e:1e:
e2:83:14:a3:db:42:31:0f:bc:c8:aa:3a:63:36:c5:
21:ba:95:53:b8:76:d3:bc:9f:6e:0e:c4:8a:a7:7a:
ff:75:83:88:8e:28:91:67:fb:6e:bd:7e:bc:c7:4f:
5f:52:af:b1:28:81:83:30:54:8b:94:21:13:43:d2:
ea:5d:9e:7d:ef:aa:af:97:e3:13:2b:15:6b:93:e9:
fc:c1:89:a6:47:63:fb:01:c7:54:5d:f5:1e:f1:03:
d3:68:f9:23:fa:7b:80:af:2e:6b:90:96:29:b0:88:
00:e4:6a:98:eb:03:96:44:fc:86:7f:3c:51:36:bc:
68:d8:63:df:9f:ed:1c:78:f0:09:35:7b:25:d5:6f:
cc:c2:e7:e5:29:f4:4d:62:85:9c:07:90:98:39:f4:
1e:6d:7f:90:58:b8:cd:0b:48:a4:e6:a7:ea:49:97:
82:6b:0c:92:2c:f8:f3:3b:a1:cc:97:ee:0a:55:c7:
f1:13:c9:ce:df:14:2a:0d:11:e8:25:f7:83:fb:ae:
3f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DF:D4:40:7D:6A:48:B5:47:32:BA:2C:46:18:48:CB:AC:BB:0F:BA
X509v3 Authority Key Identifier:
keyid:B1:6F:3B:47:BB:02:1C:61:D2:68:F0:A4:DB:EA:15:69:F0:9F:3E:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B16F3B47BB021C61D268F0A4DBEA1569F09F3E5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e39352e302f32342d3234203d3e203233363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.173.95.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:24:4b:c0:53:7f:b9:e2:df:10:c5:45:69:33:b2:69:cc:d0:
05:27:ca:2e:f6:19:76:23:57:48:3f:20:df:05:36:9e:f7:77:
3d:22:8c:96:23:e0:ba:fb:f7:25:e8:8f:53:27:c1:3c:b5:93:
35:79:4f:5e:00:6e:79:d3:98:53:a6:cf:db:a5:d8:ca:66:31:
86:c3:0e:dd:20:af:b9:c9:71:7a:71:85:a2:e5:44:d6:5e:d5:
f4:ea:ea:4f:aa:14:7e:f8:48:3e:2b:b8:be:92:14:c4:19:0d:
7f:e4:c4:6f:26:b9:85:14:58:36:dc:37:89:3f:a7:6f:65:6e:
a1:5b:db:28:c8:36:77:8a:b5:da:d9:de:68:48:30:a0:43:81:
6f:2c:93:aa:9b:51:c0:92:64:c1:a0:4e:f6:74:ca:c0:09:84:
55:1c:e7:e1:be:52:7e:93:cd:43:e5:de:70:a5:bc:98:44:46:
ec:2e:20:51:71:04:45:8f:03:80:ba:f2:e6:65:0f:a1:58:19:
bc:ed:b3:2d:eb:8a:19:ad:e1:bd:3e:12:7f:02:62:54:b6:23:
15:f7:11:37:8c:ae:69:e3:c4:50:a1:72:ef:95:c5:e7:53:b5:
70:f7:23:cc:97:82:fc:49:b1:21:17:0a:9c:f8:ee:b7:35:36:
6b:11:57:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:15:54 2026 by rpki-client