
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34322e302f32332d3233203d3e203538343837.roa
File: 3230322e31302e34322e302f32332d3233203d3e203538343837.roa (raw, json)
Hash identifier: dqrvduodkZhiIwY/vduDOWGasRCeryKjESzEQZ+MVDA=
Subject key identifier: 73:EF:83:20:B1:21:1C:61:75:B3:58:85:7A:97:F1:59:43:19:B8:56
Certificate issuer: /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial: 4E32807C6D47AC686826A2AE50D03C8ED76233F6
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34322e302f32332d3233203d3e203538343837.roa
Signing time: Thu 12 Feb 2026 11:02:43 +0000
ROA not before: Thu 12 Feb 2026 10:57:43 +0000
ROA not after: Thu 11 Feb 2027 11:02:43 +0000
asID: 58487
IP address blocks: 202.10.42.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 16:38:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:32:80:7c:6d:47:ac:68:68:26:a2:ae:50:d0:3c:8e:d7:62:33:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Validity
Not Before: Feb 12 10:57:43 2026 GMT
Not After : Feb 11 11:02:43 2027 GMT
Subject: CN=73EF8320B1211C6175B358857A97F1594319B856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:33:28:7b:fe:b1:c9:1f:18:2b:82:1f:49:cc:
28:56:fb:a1:8e:ef:d8:9a:ec:a9:7f:95:e5:d7:a3:
78:e2:b5:b3:a3:56:19:47:3a:aa:23:ed:8c:b3:cb:
a4:02:dd:50:ef:c8:cb:91:f7:81:d9:d8:4d:f2:b6:
8a:0a:f8:0a:c5:44:f3:84:19:35:bc:20:84:9d:7a:
06:f5:7a:42:35:7c:92:39:7a:17:5b:27:30:87:e0:
ac:5c:7c:da:05:15:47:22:b1:b9:bc:da:f0:a5:b3:
28:2b:b6:de:b5:68:8c:e7:1b:ee:46:7a:77:bb:49:
7b:cc:8a:a6:7b:b9:f4:0c:47:ba:62:e5:8b:9c:b4:
ac:17:d8:ad:ab:a3:2f:88:26:81:bb:12:33:a6:8d:
bc:5c:47:72:54:e9:de:11:5b:ba:c6:0a:83:31:24:
62:10:1f:87:f0:86:bf:11:4d:21:6c:c3:a4:e0:fe:
86:29:70:86:25:ee:01:6b:ef:20:fe:56:09:ab:65:
e9:82:e8:34:2e:14:d1:a5:05:6a:8b:3c:73:ec:e7:
70:3f:b1:e8:c0:91:da:d0:2b:f7:23:52:82:3a:80:
63:07:5b:b7:a6:81:d0:10:06:eb:c0:6a:ea:97:94:
ce:74:dd:8f:f2:c7:a5:76:51:de:33:98:e2:ca:cc:
a8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EF:83:20:B1:21:1C:61:75:B3:58:85:7A:97:F1:59:43:19:B8:56
X509v3 Authority Key Identifier:
keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34322e302f32332d3233203d3e203538343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.10.42.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:0f:0d:53:09:6d:1e:78:7f:83:91:00:56:7f:77:45:ba:64:
b8:5d:e8:be:e5:43:d1:72:ab:0a:fc:d0:74:33:e7:b0:75:73:
88:46:95:cf:54:4a:2f:89:0f:73:17:a4:fb:1b:cd:52:bd:50:
b9:4c:6a:68:f5:74:b5:bd:a4:b7:83:e0:e4:30:61:33:1f:92:
cb:44:f7:0b:15:b5:2a:34:ff:d7:c3:1c:0a:c0:40:67:62:dd:
78:ec:c2:c3:d3:fb:98:97:c8:e1:e0:6c:df:7e:61:f0:7a:a4:
45:c6:84:a6:e2:36:1d:10:9f:a0:58:9d:72:0e:a9:8b:0a:90:
9d:1b:06:25:dc:fd:a3:d7:43:54:72:90:9b:d5:db:ae:20:12:
79:e7:33:7d:ea:b4:b3:3c:94:b5:41:b5:71:49:ae:c4:26:7d:
c2:5c:94:20:4c:0c:f3:c5:ad:b3:30:8d:cf:24:ec:5d:87:c7:
eb:64:e7:60:bc:ef:60:4d:75:a8:a8:50:51:0a:d1:aa:39:06:
7a:a7:25:44:78:a5:53:81:16:3e:e4:bf:90:0f:76:99:53:60:
b8:b8:97:da:11:f1:8b:f2:a7:d2:3e:b6:0d:74:35:90:53:0c:
ed:53:cb:67:c7:6e:91:1a:be:0f:06:7c:ac:0d:d1:a1:24:aa:
99:5a:d1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:28 2026 by rpki-client