
$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3230322e34332e37322e302f32342d3234203d3e203435323938.roa
File: 3230322e34332e37322e302f32342d3234203d3e203435323938.roa (raw, json)
Hash identifier: jDiUEHNdOW0W156ifBRgYX7rTv/4v0ShYtKyTk4mP1Y=
Subject key identifier: F5:66:B2:94:46:3F:1F:4F:68:18:BC:54:0F:BE:FE:FD:E8:B5:B3:FB
Certificate issuer: /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Certificate serial: 4E21D8185BDCE3EF68707B78AFF9929845F9353A
Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3230322e34332e37322e302f32342d3234203d3e203435323938.roa
Signing time: Tue 03 Feb 2026 10:02:36 +0000
ROA not before: Tue 03 Feb 2026 09:57:36 +0000
ROA not after: Tue 02 Feb 2027 10:02:36 +0000
asID: 45298
IP address blocks: 202.43.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl
rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 04:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:21:d8:18:5b:dc:e3:ef:68:70:7b:78:af:f9:92:98:45:f9:35:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Validity
Not Before: Feb 3 09:57:36 2026 GMT
Not After : Feb 2 10:02:36 2027 GMT
Subject: CN=F566B294463F1F4F6818BC540FBEFEFDE8B5B3FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e7:10:6b:d5:e9:ad:17:1e:5e:4f:a1:54:be:
d6:56:f1:2d:16:2c:51:b6:8e:64:e9:32:28:4f:32:
35:7e:c7:68:83:74:50:44:05:e6:e6:31:a3:81:f5:
ec:6b:12:6c:82:aa:f2:dc:fb:6f:50:35:3c:9e:d8:
51:87:62:88:d9:43:db:87:c8:d9:15:06:f3:f3:93:
c0:6e:8f:55:62:e2:04:91:79:2d:5c:22:54:2c:73:
83:6e:c7:c7:ed:8e:d6:17:67:b1:07:37:e5:aa:1a:
60:d4:e9:cd:22:90:b5:41:0b:49:58:48:65:11:bf:
c6:ca:46:fc:33:87:5a:9c:bc:01:5c:7a:71:9b:a3:
a0:4e:b1:e0:18:1a:23:74:46:3b:c6:fb:07:44:dc:
f9:fe:c3:ea:16:08:7f:c5:51:df:c0:80:ec:9e:bf:
62:8e:3c:85:b3:c6:d8:5c:23:16:5f:db:9c:55:5a:
4c:ad:fd:01:a8:5a:d5:6b:6d:2d:75:79:da:c8:9a:
9b:05:97:1f:22:c9:da:b3:29:69:d0:81:dd:97:07:
da:b1:40:08:37:9e:b0:73:df:b6:e7:df:ad:3a:07:
ed:43:fd:08:9a:6a:78:29:e4:b6:fb:1a:d3:3e:da:
dc:b7:de:50:3f:3e:74:c8:f1:b4:a9:d4:d5:dd:14:
2f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:66:B2:94:46:3F:1F:4F:68:18:BC:54:0F:BE:FE:FD:E8:B5:B3:FB
X509v3 Authority Key Identifier:
keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3230322e34332e37322e302f32342d3234203d3e203435323938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.43.72.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:ab:0c:5a:9f:ae:56:17:54:28:b8:38:a0:96:18:38:e9:db:
91:5f:10:aa:f4:38:dc:e2:00:06:3e:0d:f3:14:af:d5:71:45:
b8:bc:5b:25:91:c4:9d:51:71:17:fe:07:7b:40:de:b6:92:96:
91:8c:20:be:94:18:d5:82:3c:34:87:3b:3a:59:23:35:d8:3e:
d6:4f:19:85:b5:0f:6b:85:0d:c9:38:66:0a:91:a5:0a:3d:03:
2e:d0:c0:b7:71:f3:29:6b:06:67:20:5a:99:52:e3:01:a4:a8:
9d:2a:bb:98:a7:41:13:3c:ca:26:39:d4:51:af:6c:31:f3:76:
6c:14:c1:b0:93:9d:d7:91:df:8d:83:3b:84:a2:91:d6:d1:a6:
06:b7:8f:1f:c7:ee:70:39:0f:c7:e2:85:0c:c6:4d:23:96:a9:
2e:07:70:aa:26:6a:d2:51:08:ff:b4:58:13:06:74:01:e5:23:
43:18:a7:31:dc:5a:bf:2b:00:1c:22:67:d6:c2:02:3c:40:73:
15:a0:a7:41:de:89:1b:29:22:35:4b:26:54:a6:e7:6a:82:7b:
f0:40:61:44:58:f6:08:c7:d3:da:52:23:5f:ec:70:23:12:91:
60:59:bd:1c:00:d0:db:23:71:9b:b2:f2:3f:4d:c5:99:d6:53:
11:1e:65:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:32:57 2026 by rpki-client