
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33362e302f32332d3233203d3e203538343837.roa
File: 3230322e31302e33362e302f32332d3233203d3e203538343837.roa (raw, json)
Hash identifier: 3+sc48XmywgFU1ZvL1vyhkkAhqAoAPyr2oFdpTdyfN4=
Subject key identifier: ED:8A:3A:BB:A7:3E:9E:1A:1F:EC:43:25:42:17:DB:C9:AC:E7:26:B4
Certificate issuer: /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial: 72FDAE674C54A80D456CED1AABCAD255E7A99669
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33362e302f32332d3233203d3e203538343837.roa
Signing time: Thu 12 Feb 2026 11:02:43 +0000
ROA not before: Thu 12 Feb 2026 10:57:43 +0000
ROA not after: Thu 11 Feb 2027 11:02:43 +0000
asID: 58487
IP address blocks: 202.10.36.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 16:38:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:fd:ae:67:4c:54:a8:0d:45:6c:ed:1a:ab:ca:d2:55:e7:a9:96:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Validity
Not Before: Feb 12 10:57:43 2026 GMT
Not After : Feb 11 11:02:43 2027 GMT
Subject: CN=ED8A3ABBA73E9E1A1FEC43254217DBC9ACE726B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e4:e7:57:09:aa:5d:7f:69:bb:06:c4:7c:67:
b8:74:30:76:3d:97:ce:86:ae:ec:08:60:19:7a:d4:
13:21:47:0b:4f:1a:bd:f8:9b:7c:d4:5d:e4:f0:4e:
7a:9e:e8:6f:5e:50:27:e7:e7:ee:a1:b5:6a:a2:e0:
fc:58:99:da:bc:6d:c0:56:e5:ce:79:b6:8d:85:3b:
25:57:90:35:a2:1a:6b:c7:eb:b3:9d:c4:d9:53:e0:
9b:b5:83:4e:c7:90:a8:16:80:03:af:26:4b:dd:1a:
e2:1b:33:24:4e:50:9f:4c:0f:b3:82:b0:89:5b:41:
5e:15:5c:89:d8:eb:3d:9c:95:44:47:84:29:a6:75:
1c:96:f1:0e:ee:80:bc:58:98:b2:14:21:e6:e0:83:
8d:ec:51:65:93:48:de:34:65:65:0e:50:f3:fd:b4:
3f:0a:a9:1c:85:8b:6d:6b:7e:45:e3:1f:47:b6:83:
26:c7:cd:79:cb:56:d7:32:c3:88:43:3d:c6:1b:a5:
f6:19:13:a8:4f:b8:04:13:f8:19:02:74:ea:49:e5:
7f:e4:73:e1:35:1c:22:79:3c:51:4a:7e:1d:56:00:
78:67:41:d0:3b:30:99:a2:08:90:21:d8:41:55:c3:
40:2b:e7:b5:9a:d4:85:4c:25:bd:20:6b:9f:58:a7:
ae:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8A:3A:BB:A7:3E:9E:1A:1F:EC:43:25:42:17:DB:C9:AC:E7:26:B4
X509v3 Authority Key Identifier:
keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33362e302f32332d3233203d3e203538343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.10.36.0/23
Signature Algorithm: sha256WithRSAEncryption
69:0e:42:9e:78:f4:27:35:96:03:b7:71:34:3c:92:4f:52:90:
ae:71:bc:d5:4a:10:12:33:a7:53:3e:1f:71:a0:82:84:e6:de:
fc:71:b5:dd:c6:a3:81:c5:b9:29:ee:0b:94:99:c6:a6:bc:15:
d1:6e:77:33:6c:20:03:84:e1:f7:3a:83:5a:d5:26:1a:a4:06:
8f:de:d5:f2:c5:7a:d7:60:52:a8:b1:2a:c5:3c:4a:63:f5:e3:
53:5b:cb:a5:2d:36:1f:be:2c:5a:05:f0:b3:89:e1:76:3a:71:
97:6c:36:13:23:db:0c:c4:e9:a1:e6:53:8a:4f:00:3c:5a:62:
53:2b:83:92:7c:fc:56:1d:36:9a:7b:ba:d3:d1:37:af:c9:86:
c1:e3:73:fd:34:2c:d7:24:e6:b0:ac:eb:4a:09:77:35:56:1b:
1f:79:f6:1a:75:fb:70:56:67:6b:3e:96:41:bf:4c:e2:ff:70:
eb:97:8f:00:ec:2e:da:a6:f6:4b:1c:18:21:4c:46:d8:7a:ea:
33:09:27:d1:49:e1:33:3b:6f:df:04:4d:25:21:6c:44:7c:85:
4c:ca:cf:9f:d1:e2:6d:58:77:16:10:5a:c5:0a:cf:8f:27:86:
6c:52:ff:30:ba:a1:d3:10:48:b5:4b:32:d7:f4:e0:7e:0c:c6:
97:30:a6:dc
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUcv2uZ0xUqA1FbO0aq8rSVeeplmkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5
MkFBQkU2RTAeFw0yNjAyMTIxMDU3NDNaFw0yNzAyMTExMTAyNDNaMDMxMTAvBgNV
BAMTKEVEOEEzQUJCQTczRTlFMUExRkVDNDMyNTQyMTdEQkM5QUNFNzI2QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf5OdXCapdf2m7BsR8Z7h0MHY9
l86GruwIYBl61BMhRwtPGr34m3zUXeTwTnqe6G9eUCfn5+6htWqi4PxYmdq8bcBW
5c55to2FOyVXkDWiGmvH67OdxNlT4Ju1g07HkKgWgAOvJkvdGuIbMyROUJ9MD7OC
sIlbQV4VXInY6z2clURHhCmmdRyW8Q7ugLxYmLIUIebgg43sUWWTSN40ZWUOUPP9
tD8KqRyFi21rfkXjH0e2gybHzXnLVtcyw4hDPcYbpfYZE6hPuAQT+BkCdOpJ5X/k
c+E1HCJ5PFFKfh1WAHhnQdA7MJmiCJAh2EFVw0Ar57Wa1IVMJb0ga59Yp661AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU7Yo6u6c+nhof7EMlQhfbyaznJrQwHwYDVR0j
BBgwFoAUtvEyIyFBLv0EGmwsCyl6EJKqvm4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZDhmMDYwZi1lNGIzLTRhNGUtOTdmZC1mNjFhYjE3ZGVlZWQvMC9CNkYxMzIyMzIx
NDEyRUZEMDQxQTZDMkMwQjI5N0ExMDkyQUFCRTZFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5MkFB
QkU2RS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkOGYwNjBmLWU0YjMtNGE0ZS05
N2ZkLWY2MWFiMTdkZWVlZC8wLzMyMzAzMjJlMzEzMDJlMzMzNjJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDM1MzgzNDM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHKCiQwDQYJKoZIhvcN
AQELBQADggEBAGkOQp549Cc1lgO3cTQ8kk9SkK5xvNVKEBIzp1M+H3GggoTm3vxx
td3Go4HFuSnuC5SZxqa8FdFudzNsIAOE4fc6g1rVJhqkBo/e1fLFetdgUqixKsU8
SmP141Nby6UtNh++LFoF8LOJ4XY6cZdsNhMj2wzE6aHmU4pPADxaYlMrg5J8/FYd
Npp7utPRN6/JhsHjc/00LNck5rCs60oJdzVWGx959hp1+3BWZ2s+lkG/TOL/cOuX
jwDsLtqm9kscGCFMRth66jMJJ9FJ4TM7b98ETSUhbER8hUzKz5/R4m1YdxYQWsUK
z48nhmxS/zC6odMQSLVLMtf04H4Mxpcwptw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:59:14 2026 by rpki-client