
$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3230322e37332e31362e302f32342d3234203d3e203538383136.roa
File: 3230322e37332e31362e302f32342d3234203d3e203538383136.roa (raw, json)
Hash identifier: Fqdl1sb+h6leJuhfojKOfkvGAlovkHlBo0ChmPhMVvw=
Subject key identifier: C6:8E:8A:93:53:56:FF:69:93:DD:40:F0:4B:7F:B5:FB:D0:A9:93:BB
Certificate issuer: /CN=2042008AEC80152F373D2A04DFD3893EE2F92166
Certificate serial: 525691597D0D52C12EEA2F311F877681C42AECCA
Authority key identifier: 20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3230322e37332e31362e302f32342d3234203d3e203538383136.roa
Signing time: Thu 12 Feb 2026 11:02:02 +0000
ROA not before: Thu 12 Feb 2026 10:57:02 +0000
ROA not after: Thu 11 Feb 2027 11:02:02 +0000
asID: 58816
IP address blocks: 202.73.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl
rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:56:91:59:7d:0d:52:c1:2e:ea:2f:31:1f:87:76:81:c4:2a:ec:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2042008AEC80152F373D2A04DFD3893EE2F92166
Validity
Not Before: Feb 12 10:57:02 2026 GMT
Not After : Feb 11 11:02:02 2027 GMT
Subject: CN=C68E8A935356FF6993DD40F04B7FB5FBD0A993BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:35:25:47:25:58:5b:b1:31:23:c2:45:42:cf:
a2:3e:fd:23:86:89:a0:7d:8f:bb:33:b8:1e:35:e0:
ea:1b:37:48:ab:a9:6b:2d:15:a9:77:f2:96:1e:f5:
24:69:93:6f:e2:e6:85:90:f4:69:28:22:3c:50:c1:
9f:c9:33:4b:46:94:7e:5d:c3:55:27:4b:4b:a3:c1:
62:70:88:27:de:31:40:39:65:8b:83:74:74:ca:03:
fa:2f:25:69:d9:a8:88:42:a7:97:2e:df:e4:93:a8:
64:de:81:e4:14:0c:9f:a1:9c:03:71:90:2e:8b:25:
4c:70:2d:56:67:f0:ae:c3:7a:55:a9:f8:f8:17:36:
91:99:97:a9:e5:c0:79:cb:24:7f:9f:6e:b5:61:67:
3c:fa:d1:91:a4:29:2f:f9:c1:92:e0:4f:a4:dc:c8:
98:50:b5:de:67:d0:42:2b:de:b6:cd:46:3f:81:74:
f7:e5:4f:98:bc:1f:68:94:dc:8e:ce:18:22:c3:f6:
42:34:db:88:87:b5:4b:f6:79:f5:d5:3d:99:5b:2d:
10:af:bc:be:e3:3a:da:a3:38:73:5e:fa:01:0b:42:
2f:15:54:6f:4a:ef:95:fd:6c:f2:63:da:3e:a8:db:
5a:85:1c:54:9c:ee:d4:4e:e4:6b:d7:fc:13:4b:48:
88:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8E:8A:93:53:56:FF:69:93:DD:40:F0:4B:7F:B5:FB:D0:A9:93:BB
X509v3 Authority Key Identifier:
keyid:20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3230322e37332e31362e302f32342d3234203d3e203538383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.73.16.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:b4:48:f3:c6:36:27:a7:2f:3f:38:52:6d:c2:f4:f3:9d:cb:
42:c4:48:dc:dd:5f:bf:4b:3a:14:56:87:9e:c0:b1:34:b6:44:
da:f6:e5:29:c3:40:78:2a:60:d4:8a:71:14:c6:b4:f3:34:63:
08:68:ab:c6:ee:90:fe:d8:8b:ab:42:62:00:bb:f2:43:ac:11:
f2:33:af:d7:84:8d:b1:cc:0d:0a:69:02:ac:1a:24:38:58:11:
0f:6b:2b:e4:94:7e:7a:49:85:2a:f9:b5:07:dc:0f:e2:05:78:
ca:a7:ec:62:b6:c5:8e:0a:83:38:db:7e:63:04:b7:7a:69:53:
5f:19:10:d5:d6:34:f5:b6:6d:c3:a7:52:53:e7:a5:4c:06:55:
f6:c5:9d:54:c5:3e:45:9b:97:35:32:f3:54:a1:0c:01:5d:9a:
6c:1d:8a:2b:a0:5c:b3:1c:98:32:cc:21:fd:9a:9b:e2:80:f4:
ce:c7:8c:02:fc:ad:89:18:ea:4b:20:b9:06:bc:99:a0:05:5d:
9e:29:19:59:39:15:53:94:ce:5c:58:8a:c7:e6:e8:15:ea:ed:
1d:20:70:22:a9:1e:60:57:5a:45:d8:0f:d1:8b:85:a0:93:9a:
0b:8f:24:7d:49:11:39:f9:87:05:db:d6:8a:59:cb:78:03:da:
18:a6:e8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:34:50 2026 by rpki-client