
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34322e302f32342d3234203d3e203538343837.roa
File: 3230322e31302e34322e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier: L9hZ5vwMCVmg0fp3SegXdRwDSlMQJl/4ISRmJPKATsE=
Subject key identifier: 6E:FE:C9:21:E0:2C:88:A1:12:35:4A:25:3A:DF:0C:7E:ED:3D:14:CF
Certificate issuer: /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial: 25A40310A6C730C9B5E716E2F5A4EEF1762A1904
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34322e302f32342d3234203d3e203538343837.roa
Signing time: Thu 12 Feb 2026 11:02:43 +0000
ROA not before: Thu 12 Feb 2026 10:57:43 +0000
ROA not after: Thu 11 Feb 2027 11:02:43 +0000
asID: 58487
IP address blocks: 202.10.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 16:38:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:a4:03:10:a6:c7:30:c9:b5:e7:16:e2:f5:a4:ee:f1:76:2a:19:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Validity
Not Before: Feb 12 10:57:43 2026 GMT
Not After : Feb 11 11:02:43 2027 GMT
Subject: CN=6EFEC921E02C88A112354A253ADF0C7EED3D14CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:27:6d:98:45:22:9b:70:c3:32:03:8a:da:
be:23:ac:e3:7a:67:ea:0d:e5:43:9b:b3:b3:c3:26:
1c:1a:80:a9:28:75:25:93:f0:3e:7e:98:74:f7:04:
8f:38:57:24:01:92:a9:24:cc:0a:64:5a:2f:e3:dc:
ab:58:fd:37:31:85:dc:2c:b6:5f:d3:90:2a:f5:12:
a6:fb:f5:1c:5f:e6:55:7d:e5:ca:e2:b9:34:71:93:
87:ab:1b:50:48:49:65:6b:dc:d6:ba:c7:d6:cb:4e:
65:b1:da:fd:f3:f5:12:9c:5f:19:24:56:31:25:97:
3c:a6:a6:f3:13:0b:5f:a4:65:80:86:8f:ea:27:49:
cd:ba:b1:b9:25:de:53:14:76:b2:aa:0f:db:44:df:
4d:ce:fd:99:6d:38:ee:60:2b:69:f3:ee:e1:47:a7:
ba:34:30:81:a1:fc:46:4b:b8:8a:7c:40:50:d1:33:
17:64:7f:5d:dc:ea:fa:da:86:47:3b:29:77:32:a0:
2f:49:84:7a:d2:43:66:03:3d:00:37:12:b2:c1:19:
47:44:50:26:c5:21:61:60:ea:44:77:18:b6:d2:ba:
d6:72:c3:c5:67:1b:28:61:04:12:ea:78:bd:2e:71:
ca:b8:11:0e:1a:b2:da:3f:8b:6e:21:98:2c:c3:32:
53:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FE:C9:21:E0:2C:88:A1:12:35:4A:25:3A:DF:0C:7E:ED:3D:14:CF
X509v3 Authority Key Identifier:
keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34322e302f32342d3234203d3e203538343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.10.42.0/24
Signature Algorithm: sha256WithRSAEncryption
55:93:2d:b3:ec:63:9d:81:33:29:c7:c3:cf:4f:0b:f9:b5:62:
47:36:81:f1:4c:74:71:68:ab:23:04:7f:a7:ec:a0:f3:48:a4:
c9:8f:a3:e3:97:ae:1b:ac:aa:2f:f9:38:bd:ba:4c:e2:d8:e9:
05:53:e0:59:eb:6d:ab:b7:89:8b:a2:d0:da:f4:f4:b0:21:d6:
a4:1e:14:0e:0c:59:36:1a:18:02:48:46:c1:c6:34:41:da:e6:
0a:3c:04:00:63:fa:10:4e:df:79:12:c3:1d:a8:1e:50:1a:7f:
92:b8:d5:52:83:03:a3:05:cb:46:a2:84:26:6a:03:a5:e2:56:
6c:c5:cc:91:b3:ff:14:39:e8:87:72:9c:0f:6b:27:42:c7:82:
38:fb:f8:0a:03:f2:85:03:13:5d:42:e7:cc:68:90:71:1a:42:
cb:33:13:ec:e8:a5:5a:a2:c1:74:58:7c:cc:97:28:65:ea:cc:
e1:14:4e:12:ac:18:09:9a:c2:c1:08:0a:cb:10:39:35:9e:0b:
53:26:90:1a:72:a4:58:2e:71:2d:72:93:8d:6b:97:d1:a4:08:
52:c9:f3:95:8c:00:9b:1f:dd:9e:a4:7e:80:5e:14:fd:89:af:
c3:39:e6:98:c6:f8:f6:b2:b1:cf:37:ba:c9:0f:14:d6:5d:30:
cc:af:2b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:25:42 2026 by rpki-client