
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33392e302f32342d3234203d3e203538343837.roa
File: 3230322e31302e33392e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier: YfWAEovDWm47k4nnNajyrOnGWb61zRghNEHh532fAiM=
Subject key identifier: B4:AA:E7:0E:A1:89:E7:FB:65:59:C4:A7:40:8F:D3:4F:BE:78:8C:C6
Certificate issuer: /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial: 5B25426932E4DB9264F722BCFAC4F1132C1AF076
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33392e302f32342d3234203d3e203538343837.roa
Signing time: Thu 12 Feb 2026 11:02:43 +0000
ROA not before: Thu 12 Feb 2026 10:57:43 +0000
ROA not after: Thu 11 Feb 2027 11:02:43 +0000
asID: 58487
IP address blocks: 202.10.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 16:38:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:25:42:69:32:e4:db:92:64:f7:22:bc:fa:c4:f1:13:2c:1a:f0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Validity
Not Before: Feb 12 10:57:43 2026 GMT
Not After : Feb 11 11:02:43 2027 GMT
Subject: CN=B4AAE70EA189E7FB6559C4A7408FD34FBE788CC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:a4:5b:0c:cb:a7:00:a5:2b:12:a7:b3:63:
5d:36:52:9d:bb:97:f9:de:40:95:ec:bf:7b:34:80:
d9:04:a7:d9:f9:03:8a:76:b0:c6:1c:f3:fd:da:f3:
e9:85:a7:30:4b:80:22:45:84:0d:80:04:66:dc:6c:
a5:9b:75:96:49:49:2c:b3:c0:6f:57:e6:5d:99:b4:
9b:7b:7f:b4:64:8f:c4:7a:b0:e0:10:0e:bd:0a:23:
d0:2f:36:38:05:e2:1e:b2:9f:f9:f6:29:91:1e:55:
12:d9:5c:32:62:5f:0c:13:16:a5:58:08:fe:7d:fd:
61:46:95:06:b4:fc:2c:e1:b2:99:cc:75:81:47:8f:
0f:1c:00:e9:55:49:4f:69:64:29:7e:e5:71:88:77:
7e:bd:16:92:94:e9:29:29:13:3d:3d:ec:45:81:e2:
58:f4:a2:f5:f3:a8:d4:6d:b6:20:8d:76:c4:30:6a:
bf:ff:9b:64:40:df:66:91:d1:ac:8c:dc:2f:cf:d3:
1c:bc:01:f5:9a:33:50:95:76:6a:7b:72:3f:36:a7:
10:49:33:c8:4d:f8:53:7f:d8:bd:27:d5:69:d1:93:
7f:75:9e:9b:7c:34:eb:ad:79:29:ad:45:46:ce:49:
c0:dd:6b:f9:2d:88:f9:1a:6e:05:e5:4e:ae:67:1b:
21:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AA:E7:0E:A1:89:E7:FB:65:59:C4:A7:40:8F:D3:4F:BE:78:8C:C6
X509v3 Authority Key Identifier:
keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e33392e302f32342d3234203d3e203538343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.10.39.0/24
Signature Algorithm: sha256WithRSAEncryption
97:31:be:df:3d:32:12:92:71:83:e7:aa:91:9d:3d:e4:24:9f:
0c:2a:fe:96:cb:7f:88:ca:56:64:90:ae:53:97:91:05:dc:70:
75:f5:25:5f:5a:0d:84:48:cd:ce:2c:ee:33:82:9a:cf:95:e5:
6b:9f:68:ed:4c:21:0f:31:5c:e0:06:a5:b4:53:63:26:37:87:
e0:e1:a1:cd:15:b3:aa:d3:58:00:da:5a:8a:30:12:79:33:f8:
54:25:bd:53:80:c1:99:74:60:2e:b7:d8:29:3b:36:bb:bd:fc:
e9:db:9a:89:63:a1:f4:ea:1e:05:9a:d2:ce:e0:cb:58:08:2a:
1e:28:1a:87:b3:4e:c8:1f:a1:13:ed:6b:d4:44:21:7a:1b:63:
0e:1d:7d:59:27:dd:f8:9b:52:8c:f8:06:7a:f3:8e:14:38:02:
a2:cd:aa:f2:ce:d7:cc:56:dc:e8:4c:36:b5:fc:c3:9d:04:9c:
68:8a:a7:63:39:74:a1:42:c5:c2:bd:83:35:35:3a:06:b2:31:
ed:00:ed:44:49:99:f1:ba:a2:11:1d:7c:31:0a:48:92:52:ef:
79:48:be:75:47:ab:d8:c9:43:68:d5:31:f2:84:30:61:3b:b4:
71:f2:8a:52:0d:70:38:01:3c:c7:a0:c3:45:74:5e:97:9a:f6:
1d:ce:ef:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:24 2026 by rpki-client