
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33352e302f32342d3234203d3e203538343837.roa
File: 3230322e31302e33352e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier: 5/En3sFfLfh4OXyzY5rKmuD9bDISfTgXJe0exdmJsIY=
Subject key identifier: E1:3D:90:2F:DC:D8:FF:89:E6:00:04:A0:91:5F:AD:11:74:14:54:AC
Certificate issuer: /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial: 3B82C563276E0382A648CFE9AD97354C3A36279F
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33352e302f32342d3234203d3e203538343837.roa
Signing time: Thu 12 Feb 2026 10:02:37 +0000
ROA not before: Thu 12 Feb 2026 09:57:37 +0000
ROA not after: Thu 11 Feb 2027 10:02:37 +0000
asID: 58487
IP address blocks: 202.10.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 16:38:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:82:c5:63:27:6e:03:82:a6:48:cf:e9:ad:97:35:4c:3a:36:27:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Validity
Not Before: Feb 12 09:57:37 2026 GMT
Not After : Feb 11 10:02:37 2027 GMT
Subject: CN=E13D902FDCD8FF89E60004A0915FAD11741454AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8d:5a:1a:53:27:8a:ab:5a:6b:1a:88:18:2f:
32:0a:70:58:7d:3e:4e:17:f5:35:10:19:c8:ab:c6:
c1:65:80:23:e6:11:b2:a3:77:74:d7:bc:51:62:09:
22:c3:5c:13:2e:e1:c0:07:64:fd:48:7c:de:c6:13:
b2:fd:b8:3b:3a:12:3b:e8:93:02:31:db:a4:36:a8:
84:07:f1:06:94:53:ce:56:2b:d9:b2:13:83:d7:17:
44:a2:62:d2:28:cc:61:fa:4d:a1:3b:b4:5f:38:66:
66:96:37:75:11:b5:15:da:b5:b9:d7:3a:fb:59:b8:
02:fd:8f:77:74:9c:8a:e0:72:9a:79:9c:42:58:1a:
7d:56:98:d3:fb:fb:8e:85:e4:c0:7a:5a:d2:20:88:
70:17:5e:1c:32:f0:5c:a1:40:fe:3d:f9:34:a4:52:
3e:0d:6b:f0:32:d1:f6:39:4e:9c:dc:fe:77:f7:aa:
f5:77:40:44:db:8e:37:88:a2:54:71:9c:c8:c8:79:
c2:91:cb:a0:65:45:c9:b9:47:27:46:2e:b3:54:05:
31:5a:72:5e:4a:6b:a9:5d:42:63:e3:9c:60:e0:82:
e0:ed:29:d5:8a:56:65:f0:7d:29:cd:1f:53:67:17:
2f:c2:d7:7f:11:44:13:ca:6d:de:71:bf:7a:21:2a:
41:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3D:90:2F:DC:D8:FF:89:E6:00:04:A0:91:5F:AD:11:74:14:54:AC
X509v3 Authority Key Identifier:
keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33352e302f32342d3234203d3e203538343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.10.35.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:3e:16:4d:b9:92:a3:f3:a3:bc:81:e0:55:67:2e:e2:15:e6:
68:a1:97:1c:11:d0:cd:82:cd:db:85:67:01:30:a4:c8:16:20:
e3:39:74:21:eb:e4:f1:d9:90:04:cd:db:57:a7:06:08:f3:36:
83:7d:48:b0:e2:24:ed:61:5a:3c:f0:a3:8b:c3:cc:fc:60:4a:
24:83:ba:c1:13:72:9b:31:49:1d:a8:f1:3d:e4:59:fc:1f:b1:
54:a0:37:a2:33:82:dd:65:57:40:5c:f4:d7:4f:5b:41:84:e7:
9b:e4:98:56:8b:db:83:f1:c6:72:c6:07:46:66:b5:43:01:b2:
f4:00:08:89:bc:23:1c:da:ea:82:77:0e:a8:c5:8c:b0:0a:64:
b2:24:b5:3b:d6:2e:b8:23:7a:7b:82:70:ae:20:7c:e8:43:35:
4a:ed:f0:8f:11:b4:cb:06:6a:9c:0e:81:80:59:7a:33:8d:64:
4e:46:2c:e9:84:68:98:52:57:cf:fc:a9:ac:f9:53:83:62:35:
3d:64:f9:92:8a:21:ec:5e:24:84:cc:c2:6e:17:f5:8a:88:05:
55:14:db:f4:8e:dd:d7:ef:ea:21:b3:95:f0:cf:ec:e2:00:f1:
99:0e:ec:ca:b6:06:06:05:15:6b:b8:05:50:26:38:f1:43:36:
18:45:d0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:35 2026 by rpki-client