
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/3230322e3137332e31362e302f32312d3234203d3e203234323130.roa
File: 3230322e3137332e31362e302f32312d3234203d3e203234323130.roa (raw, json)
Hash identifier: r4SZ6eUQ/WGNZXPblXSjXtHYlTpktiYzvV0LKCEpMuY=
Subject key identifier: 9D:10:4D:8E:A2:AA:2F:C8:27:43:CB:41:0D:7D:C2:34:D7:0F:B7:36
Certificate issuer: /CN=EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E
Certificate serial: 7E868E1F501DFC3AA44813ABC00C7823D29571EA
Authority key identifier: EF:0D:C3:6F:FE:89:46:F1:04:92:74:EE:88:9B:B9:8C:5A:5A:7D:8E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/3230322e3137332e31362e302f32312d3234203d3e203234323130.roa
Signing time: Sun 03 May 2026 02:55:12 +0000
ROA not before: Sun 03 May 2026 02:50:12 +0000
ROA not after: Sun 02 May 2027 02:55:12 +0000
asID: 24210
IP address blocks: 202.173.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.crl
rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:86:8e:1f:50:1d:fc:3a:a4:48:13:ab:c0:0c:78:23:d2:95:71:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E
Validity
Not Before: May 3 02:50:12 2026 GMT
Not After : May 2 02:55:12 2027 GMT
Subject: CN=9D104D8EA2AA2FC82743CB410D7DC234D70FB736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:88:26:c5:65:a5:33:5e:30:9d:d4:d0:4a:b2:
09:5a:93:78:68:75:8f:2f:d8:fa:3a:c3:8a:44:54:
b2:37:e6:57:d2:66:ab:6d:36:07:ee:50:27:c6:58:
62:cd:de:1b:86:b3:1f:c5:90:05:3f:ff:95:d4:a7:
13:c6:df:22:2d:c8:ba:f0:1f:f3:57:72:a6:20:f2:
be:d2:d6:1c:d1:db:cc:1c:33:48:57:87:dc:3e:83:
45:6e:b3:89:3a:b8:bd:b6:7e:58:7c:3c:64:57:48:
32:6b:f7:59:3f:20:10:7e:d7:4b:cc:e5:7f:84:2b:
19:c1:5b:3c:b7:0d:0d:25:a3:d8:45:1f:d0:18:4d:
06:b4:2c:4f:a1:77:18:f7:5a:e9:41:dc:7d:40:2e:
b4:cd:88:38:65:33:93:6d:f6:3e:30:58:c0:63:02:
76:77:d2:e2:01:83:07:a4:9a:3f:06:66:9f:14:a2:
af:4e:3e:06:92:95:43:96:dd:b2:f1:e2:f7:60:4f:
1f:98:a9:17:77:75:3a:19:a6:a0:f3:4c:99:47:39:
92:96:8a:9c:c7:df:df:cc:9f:ea:21:2e:37:1a:52:
7c:4a:fb:4f:11:50:be:f3:2f:a2:3e:ac:53:fd:ad:
52:f9:7f:8e:61:c2:fe:07:a8:7a:08:7b:44:56:38:
2a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:10:4D:8E:A2:AA:2F:C8:27:43:CB:41:0D:7D:C2:34:D7:0F:B7:36
X509v3 Authority Key Identifier:
keyid:EF:0D:C3:6F:FE:89:46:F1:04:92:74:EE:88:9B:B9:8C:5A:5A:7D:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EF0DC36FFE8946F1049274EE889BB98C5A5A7D8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/3230322e3137332e31362e302f32312d3234203d3e203234323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.173.16.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:c3:1d:b3:e6:c7:bf:e6:c1:95:f0:aa:39:da:5b:66:af:1f:
8b:35:f8:39:60:f0:26:ab:63:cf:26:52:90:5a:61:bc:68:32:
4a:c3:a3:ed:4e:c1:66:3c:57:d6:16:b8:f7:ca:0f:98:ab:62:
b2:34:46:83:d7:63:57:7c:7a:ec:6d:6d:96:96:98:6f:3e:a3:
ab:6b:5c:68:5f:8e:83:ee:23:18:16:f1:fa:69:32:8a:68:2d:
91:2a:4d:b6:4a:45:82:51:86:03:08:ce:f8:54:c1:0b:12:7a:
d0:0e:f0:96:a5:a7:c4:e8:16:bd:ca:13:a0:d9:96:95:7e:f7:
44:52:28:da:fd:da:8c:df:45:df:83:db:e3:44:42:f8:60:8e:
44:f7:50:d9:3a:e1:36:4a:18:fd:63:39:f4:cd:e4:be:8a:64:
53:f9:39:e0:0f:62:98:dc:59:44:6f:33:cb:bb:84:ca:03:34:
7c:b7:84:d5:a1:bd:6d:7e:9a:4f:14:98:de:ab:eb:3f:fa:4e:
35:21:a3:9d:a6:f3:6e:2f:e1:87:fb:94:40:8b:91:ae:ab:14:
b3:de:13:a6:f1:d3:af:93:7b:74:2c:b3:66:44:fb:46:d8:69:
db:b2:e8:2b:91:75:b7:85:80:58:9c:32:65:26:8a:53:20:ac:
e9:17:1b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:50:45 2026 by rpki-client