
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34302e302f32332d3233203d3e203538343837.roa
File: 3230322e31302e34302e302f32332d3233203d3e203538343837.roa (raw, json)
Hash identifier: 5/VXdcQfhvCIwrAO21i2SACXTkt6iLhYBg+R5oYTSac=
Subject key identifier: 8A:9F:79:D7:76:67:0F:B0:F5:82:DB:60:0F:4A:FC:78:E7:F9:B8:47
Certificate issuer: /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial: 49C839F6025737B4B5309855F38D54D7852BD462
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34302e302f32332d3233203d3e203538343837.roa
Signing time: Thu 12 Feb 2026 11:02:41 +0000
ROA not before: Thu 12 Feb 2026 10:57:41 +0000
ROA not after: Thu 11 Feb 2027 11:02:41 +0000
asID: 58487
IP address blocks: 202.10.40.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 16:38:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:c8:39:f6:02:57:37:b4:b5:30:98:55:f3:8d:54:d7:85:2b:d4:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Validity
Not Before: Feb 12 10:57:41 2026 GMT
Not After : Feb 11 11:02:41 2027 GMT
Subject: CN=8A9F79D776670FB0F582DB600F4AFC78E7F9B847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9d:2a:0d:a3:c9:2b:86:f2:72:fa:e7:30:2c:
10:a5:4c:5d:e4:88:e5:80:91:57:e8:e7:f4:a4:74:
3a:cf:70:26:1f:0e:c9:be:29:2e:af:73:da:11:62:
04:a3:53:d2:c1:46:3d:5c:70:46:62:6c:22:f9:55:
8c:c4:20:b1:ed:66:29:b8:e5:c5:7d:4e:4a:6c:d9:
79:88:dd:60:af:94:e9:e1:a0:1b:b0:f0:34:25:d5:
53:b4:f1:0c:89:13:57:fc:ad:6a:b6:ce:5a:d3:66:
1b:d5:92:ce:e1:0d:e9:6d:a1:b0:cc:9c:38:bd:26:
8c:37:27:8b:8b:46:bb:eb:3a:33:58:a3:5d:99:e2:
c4:4c:ce:fe:34:a6:10:ea:87:f3:a4:48:7b:36:f9:
2f:d9:72:d8:fe:ef:86:70:56:cf:a3:f5:f7:37:f5:
73:a7:98:fa:3c:94:83:5c:e0:cd:79:44:20:ef:ae:
11:22:1e:61:9f:0a:df:72:8e:78:82:59:27:9f:de:
1b:ac:96:bf:28:89:61:2a:49:d0:7f:70:5b:2c:d8:
50:93:8a:99:35:b4:a4:17:1d:93:fd:1f:f6:4d:48:
ee:10:c0:31:3d:2b:eb:ce:77:a3:c0:79:42:4b:3e:
a5:00:05:44:88:bb:15:f6:47:e2:4b:8a:1b:3f:db:
04:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9F:79:D7:76:67:0F:B0:F5:82:DB:60:0F:4A:FC:78:E7:F9:B8:47
X509v3 Authority Key Identifier:
keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34302e302f32332d3233203d3e203538343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.10.40.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:e7:28:a2:d8:ba:17:5d:16:ae:0b:42:d5:6d:94:93:28:1a:
48:d3:24:c4:8b:9c:e5:c6:7e:91:d7:2a:c0:48:8c:ea:c7:e9:
f8:4f:cf:67:b3:f3:8d:af:8c:72:01:da:0a:1b:80:37:db:ea:
89:0d:7f:2a:51:94:f7:30:67:bb:18:8e:10:b7:0e:4a:30:b4:
b0:30:b8:37:d1:fc:26:2e:32:26:03:59:16:f7:80:ab:05:11:
94:f8:68:97:ac:9c:df:f0:39:5b:62:1c:45:74:26:43:5f:ea:
d8:58:ff:85:af:94:54:ed:80:6f:ec:f4:57:6f:83:d0:d7:e3:
2d:8f:0a:bb:d2:6d:8b:e1:ec:66:f4:7c:a4:98:4d:17:7c:04:
c0:a4:a0:cb:2f:51:47:69:d9:1e:1c:ec:e8:55:4c:72:a9:00:
c8:04:11:d9:96:71:a3:61:b0:17:8b:21:2d:d3:c6:1f:aa:a4:
a3:db:56:e0:ca:e7:de:03:bd:be:1d:5c:02:fd:f1:6e:64:d8:
01:63:01:6a:79:61:8d:cb:2a:13:e9:ae:83:f5:23:82:c7:0b:
14:35:f6:07:e8:ca:44:e6:f3:c9:3d:7b:d9:f2:2e:f8:a1:57:
f7:a3:3b:32:5c:aa:c5:f8:83:b4:94:94:c5:2a:bb:25:fb:7f:
89:df:27:d8
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUScg59gJXN7S1MJhV841U14Ur1GIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5
MkFBQkU2RTAeFw0yNjAyMTIxMDU3NDFaFw0yNzAyMTExMTAyNDFaMDMxMTAvBgNV
BAMTKDhBOUY3OUQ3NzY2NzBGQjBGNTgyREI2MDBGNEFGQzc4RTdGOUI4NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDnSoNo8krhvJy+ucwLBClTF3k
iOWAkVfo5/SkdDrPcCYfDsm+KS6vc9oRYgSjU9LBRj1ccEZibCL5VYzEILHtZim4
5cV9Tkps2XmI3WCvlOnhoBuw8DQl1VO08QyJE1f8rWq2zlrTZhvVks7hDeltobDM
nDi9Jow3J4uLRrvrOjNYo12Z4sRMzv40phDqh/OkSHs2+S/Zctj+74ZwVs+j9fc3
9XOnmPo8lINc4M15RCDvrhEiHmGfCt9yjniCWSef3huslr8oiWEqSdB/cFss2FCT
ipk1tKQXHZP9H/ZNSO4QwDE9K+vOd6PAeUJLPqUABUSIuxX2R+JLihs/2wR3AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUip9513ZnD7D1gttgD0r8eOf5uEcwHwYDVR0j
BBgwFoAUtvEyIyFBLv0EGmwsCyl6EJKqvm4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZDhmMDYwZi1lNGIzLTRhNGUtOTdmZC1mNjFhYjE3ZGVlZWQvMC9CNkYxMzIyMzIx
NDEyRUZEMDQxQTZDMkMwQjI5N0ExMDkyQUFCRTZFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5MkFB
QkU2RS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkOGYwNjBmLWU0YjMtNGE0ZS05
N2ZkLWY2MWFiMTdkZWVlZC8wLzMyMzAzMjJlMzEzMDJlMzQzMDJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDM1MzgzNDM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHKCigwDQYJKoZIhvcN
AQELBQADggEBAKTnKKLYuhddFq4LQtVtlJMoGkjTJMSLnOXGfpHXKsBIjOrH6fhP
z2ez842vjHIB2gobgDfb6okNfypRlPcwZ7sYjhC3DkowtLAwuDfR/CYuMiYDWRb3
gKsFEZT4aJesnN/wOVtiHEV0JkNf6thY/4WvlFTtgG/s9Fdvg9DX4y2PCrvSbYvh
7Gb0fKSYTRd8BMCkoMsvUUdp2R4c7OhVTHKpAMgEEdmWcaNhsBeLIS3Txh+qpKPb
VuDK594Dvb4dXAL98W5k2AFjAWp5YY3LKhPproP1I4LHCxQ19gfoykTm88k9e9ny
LvihV/ejOzJcqsX4g7SUlMUquyX7f4nfJ9g=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:06 2026 by rpki-client