
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34342e302f32342d3234203d3e203538343837.roa
File: 3230322e31302e34342e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier: VrEOCkhBKJ1iZQXeyjlEAfB2A+y8nA0v+WdwMw955f4=
Subject key identifier: 8A:A3:97:A9:83:36:C2:D2:51:D0:23:73:12:AB:2E:52:AB:6E:E0:62
Certificate issuer: /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial: 0425CDA79376A21C73D298F557E194E4C4FE3F2B
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34342e302f32342d3234203d3e203538343837.roa
Signing time: Thu 12 Feb 2026 11:02:42 +0000
ROA not before: Thu 12 Feb 2026 10:57:42 +0000
ROA not after: Thu 11 Feb 2027 11:02:42 +0000
asID: 58487
IP address blocks: 202.10.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 16:38:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:25:cd:a7:93:76:a2:1c:73:d2:98:f5:57:e1:94:e4:c4:fe:3f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Validity
Not Before: Feb 12 10:57:42 2026 GMT
Not After : Feb 11 11:02:42 2027 GMT
Subject: CN=8AA397A98336C2D251D0237312AB2E52AB6EE062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:96:b8:cc:3d:3d:26:ce:b8:df:2c:04:2b:23:
78:ae:e1:c6:db:c5:4e:95:a1:30:bc:74:bb:f3:7f:
6d:cd:60:40:46:98:53:d8:da:d3:98:34:c8:6e:91:
13:96:f1:4f:43:5a:63:70:35:11:01:80:49:4d:27:
ee:d9:e7:6b:98:2e:9b:36:b2:a2:5f:f3:e8:4d:88:
a0:c7:a4:84:76:74:dd:ec:98:d9:69:72:69:93:b4:
33:46:b7:b9:cc:01:ff:78:82:91:a6:d2:64:87:1f:
2c:29:51:a5:5d:cd:49:27:3f:87:1f:14:e8:d8:ec:
ec:2f:ea:c2:5d:ca:24:ec:c3:8f:26:b8:d9:48:1e:
9e:b2:b5:70:ab:62:89:8e:1c:f0:6b:d3:34:2d:39:
3c:f5:cb:8e:6e:d1:c5:b3:29:50:1d:84:b4:b0:9d:
14:f7:d6:65:cd:a3:2b:c0:b5:46:ee:30:8d:91:c2:
0f:99:9b:34:9e:67:e6:a3:be:4f:69:c3:2e:39:db:
6a:d8:04:ca:58:ee:3e:da:d4:bc:e3:d1:9e:07:e6:
b7:0c:6d:e5:6b:a2:f9:bd:18:76:f6:02:41:6e:c9:
c9:32:f3:5c:63:96:04:bd:e7:81:28:36:49:1a:1c:
66:03:ba:5d:36:8a:ba:15:07:93:b1:a8:4e:29:64:
78:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A3:97:A9:83:36:C2:D2:51:D0:23:73:12:AB:2E:52:AB:6E:E0:62
X509v3 Authority Key Identifier:
keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34342e302f32342d3234203d3e203538343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.10.44.0/24
Signature Algorithm: sha256WithRSAEncryption
47:0d:2a:47:9d:c9:9d:6e:67:9b:76:d0:2d:ef:58:32:32:a7:
52:28:ce:dd:5d:b2:47:3e:d6:3d:6d:f9:d9:13:02:7b:19:f0:
d0:1f:78:e3:63:73:e9:03:83:e5:8f:b2:be:22:94:20:34:98:
c6:3b:aa:4b:eb:fa:1a:3f:23:5a:35:93:97:5a:52:bf:d2:17:
6c:f3:d8:c7:35:e9:ea:9e:a2:98:8c:17:47:46:d8:14:ce:d3:
7e:95:f9:cb:65:ab:c2:9d:12:93:57:e2:5c:56:60:9a:f6:9a:
9a:3f:9c:19:32:96:8a:de:5b:29:a6:47:4d:a8:4d:20:97:c3:
2c:c2:15:29:ac:80:5e:27:45:8a:02:75:a1:8b:4f:be:39:88:
20:19:79:5d:ed:d6:41:10:1e:82:86:8a:8c:56:34:6f:f9:91:
e7:cc:3d:ba:a7:03:95:ab:90:13:d1:fb:f6:9d:41:e1:fb:e9:
22:74:2b:8b:c9:bc:65:a0:c6:ec:6d:ad:88:ec:46:4c:2f:3b:
71:c1:9d:54:9a:c4:4e:b8:ec:31:5d:7d:b2:34:d3:46:11:95:
d4:47:45:44:d4:eb:b6:21:36:6d:b1:3f:f9:d4:b0:55:cc:9f:
17:c9:25:7d:d9:8a:54:af:8f:1a:6f:37:d5:61:cf:d8:fb:2d:
c3:ee:fe:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:04 2026 by rpki-client