
$ rpki-client -vvf repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3230322e37332e3232342e302f32312d3234203d3e203138303034.roa
File: 3230322e37332e3232342e302f32312d3234203d3e203138303034.roa (raw, json)
Hash identifier: j197qNOY6wT7VNdm2bQJsJLcn2mn63fggKQKF5A/w3Q=
Subject key identifier: 49:F1:99:DC:E3:6C:58:85:19:84:87:38:6B:A8:A7:49:E7:98:9D:7C
Certificate issuer: /CN=735D87BA86773AC70137CF53116358A1F3B19766
Certificate serial: 6E0B0CEB0CB88CB392318911A2065F8EF5B27651
Authority key identifier: 73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3230322e37332e3232342e302f32312d3234203d3e203138303034.roa
Signing time: Sun 05 Apr 2026 04:00:02 +0000
ROA not before: Sun 05 Apr 2026 03:55:02 +0000
ROA not after: Sun 04 Apr 2027 04:00:02 +0000
asID: 18004
IP address blocks: 202.73.224.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl
rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 18:25:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:0b:0c:eb:0c:b8:8c:b3:92:31:89:11:a2:06:5f:8e:f5:b2:76:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735D87BA86773AC70137CF53116358A1F3B19766
Validity
Not Before: Apr 5 03:55:02 2026 GMT
Not After : Apr 4 04:00:02 2027 GMT
Subject: CN=49F199DCE36C5885198487386BA8A749E7989D7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:87:57:d0:f9:d1:68:c1:a7:9b:c3:d7:2c:b7:
ff:29:72:06:85:a4:bd:b3:4f:08:8f:00:19:9c:3c:
54:d7:7b:5c:83:59:9b:a7:94:da:ec:86:6e:f2:ed:
48:28:b3:4c:94:bd:46:59:bc:f1:c8:0c:42:2b:d8:
5b:df:27:1c:09:fb:4b:40:76:6d:51:3e:bb:48:b1:
61:42:fa:ba:0d:0f:98:da:9e:b7:bb:67:f0:c1:9d:
fd:c5:fc:e9:f5:76:dd:bd:b8:d4:9a:d7:80:f3:b1:
cd:ae:0b:fb:78:0b:03:c2:25:55:7a:9e:ed:85:57:
1c:00:7b:69:35:35:93:f7:38:fc:75:aa:9b:a8:34:
96:d3:9e:6f:51:9e:08:43:b0:94:bc:11:41:93:f1:
77:e5:52:3d:d5:42:4c:a4:62:02:61:db:17:aa:51:
d8:62:fc:d8:6e:5e:fe:11:9b:47:bb:a0:58:55:7c:
95:25:78:e6:86:68:81:28:ac:b4:c7:64:00:c6:93:
cc:48:33:38:f1:6f:9a:69:2c:86:18:72:57:7d:95:
a7:4b:d9:2f:a0:0d:0c:5b:57:d1:5b:5b:64:37:5f:
4f:c4:a7:c1:d3:69:03:6c:27:03:f3:e3:00:1a:94:
6e:b2:6c:86:32:ea:1a:8f:4c:71:ca:24:1d:e9:eb:
0b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F1:99:DC:E3:6C:58:85:19:84:87:38:6B:A8:A7:49:E7:98:9D:7C
X509v3 Authority Key Identifier:
keyid:73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3230322e37332e3232342e302f32312d3234203d3e203138303034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.73.224.0/21
Signature Algorithm: sha256WithRSAEncryption
93:30:d6:19:1a:c4:73:1a:e6:c2:26:8d:c2:69:3f:a2:17:ec:
7b:2e:7a:69:49:64:f0:1f:b7:9e:2c:6c:ee:94:97:5b:38:85:
67:d9:1b:c4:51:39:15:9d:e1:41:49:8d:87:a6:f2:4c:22:80:
a8:d2:a3:86:51:b6:61:52:95:f4:c8:3b:1d:5f:49:45:32:30:
23:a3:c4:2d:a3:40:61:8d:e4:72:b2:37:e4:71:1c:0d:d4:9f:
6d:0d:76:ca:31:36:8c:62:97:8c:4c:db:48:c4:30:af:e5:c4:
0e:81:a3:2a:81:0b:e9:5f:7f:00:5d:a6:7c:43:75:ba:83:67:
42:e5:74:74:f4:b2:a8:11:87:68:da:6c:39:2b:d4:44:de:f4:
44:66:46:c7:72:19:21:41:7b:27:e5:2e:08:c1:4d:d0:fe:16:
3d:b8:de:2b:c0:a0:be:79:f5:44:13:87:72:3c:f9:09:63:9c:
cb:fa:08:dd:8b:f2:7c:7d:11:33:f1:44:6f:2e:dd:f2:83:96:
b7:48:3b:6d:ed:16:b5:dc:b9:f4:88:d5:02:55:f4:7a:7c:84:
2f:9e:a9:85:9d:2a:8e:d2:ec:16:d1:ec:32:a8:94:55:d7:b9:
e9:86:3c:c6:76:82:c7:6c:60:02:f7:16:d5:f5:d3:68:e3:d2:
45:f1:c0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:29:28 2026 by rpki-client