
$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3230322e37332e31372e302f32342d3234203d3e203538383136.roa
File: 3230322e37332e31372e302f32342d3234203d3e203538383136.roa (raw, json)
Hash identifier: tIzQ0fE2t5htIEimJtucpSpR/DIQVl9j/kAVCJL7yGU=
Subject key identifier: D3:F4:D2:C3:67:A3:4D:4D:78:07:DC:3C:0A:C3:AF:07:9D:04:8C:22
Certificate issuer: /CN=2042008AEC80152F373D2A04DFD3893EE2F92166
Certificate serial: 47D0E1076F126F39D2A9E1CF9700C5B99058BDAD
Authority key identifier: 20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3230322e37332e31372e302f32342d3234203d3e203538383136.roa
Signing time: Thu 12 Feb 2026 11:02:02 +0000
ROA not before: Thu 12 Feb 2026 10:57:02 +0000
ROA not after: Thu 11 Feb 2027 11:02:02 +0000
asID: 58816
IP address blocks: 202.73.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl
rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:d0:e1:07:6f:12:6f:39:d2:a9:e1:cf:97:00:c5:b9:90:58:bd:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2042008AEC80152F373D2A04DFD3893EE2F92166
Validity
Not Before: Feb 12 10:57:02 2026 GMT
Not After : Feb 11 11:02:02 2027 GMT
Subject: CN=D3F4D2C367A34D4D7807DC3C0AC3AF079D048C22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:f1:11:49:45:56:44:23:87:fd:bd:2f:41:
bb:75:f0:a8:dd:f1:8a:2b:38:9b:45:2c:d8:e9:a8:
d5:ff:fc:41:ff:e2:ec:01:a9:c3:39:3a:f6:65:ed:
a1:91:fa:d0:cc:d4:35:bc:24:e3:33:19:39:3b:09:
c0:fa:0f:82:7c:45:70:74:92:cd:f5:78:1c:99:76:
3c:08:04:bb:82:92:8e:82:99:f0:bf:ad:f6:98:c7:
19:5e:12:9a:9f:42:71:ae:aa:1c:73:61:e0:05:f8:
78:30:ad:4d:d0:55:7a:67:d8:32:09:2a:ff:c5:b6:
fb:43:db:7d:1d:d4:89:c4:85:3a:14:3e:4e:e5:37:
fe:71:c5:70:8e:e6:37:45:e1:88:3c:c9:84:60:03:
1a:45:1e:fd:d7:a0:46:c6:25:58:e5:82:45:ab:7f:
e5:db:ea:4d:15:7f:7e:dc:3d:61:b7:9d:0d:bd:91:
36:e0:21:12:e8:3c:fe:93:f0:f8:b5:41:8a:53:bf:
0e:9d:50:be:20:33:73:80:c8:11:f8:07:bf:cb:99:
d0:df:2b:e6:2f:21:6c:ca:d3:c4:48:53:d2:ba:58:
2a:29:5d:9d:ab:1e:11:99:cc:d6:29:d4:dc:1a:b8:
af:67:f3:f0:6b:f1:39:65:d1:cc:24:f6:d9:b6:04:
60:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F4:D2:C3:67:A3:4D:4D:78:07:DC:3C:0A:C3:AF:07:9D:04:8C:22
X509v3 Authority Key Identifier:
keyid:20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3230322e37332e31372e302f32342d3234203d3e203538383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.73.17.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:89:18:95:3a:55:3f:fb:a7:d7:cc:38:f1:a2:ab:08:2d:00:
62:ee:82:b2:9e:1a:6e:88:ac:0e:4d:72:cf:69:6a:45:1d:54:
56:9c:2f:22:99:19:30:a2:25:31:f7:93:8c:6c:11:28:e1:9b:
7e:d7:8c:47:47:8b:64:16:3a:c9:38:87:ce:99:d4:46:dc:62:
13:f9:cf:60:9b:37:e8:59:68:c7:86:dd:64:1c:59:9a:a4:aa:
e9:45:14:8e:cb:89:f4:d6:8d:0c:0e:2e:fb:f8:49:33:97:10:
22:cc:14:a1:2c:17:80:01:0f:fd:b5:f2:e6:60:9b:4c:fd:11:
ee:33:42:9b:74:8c:e4:ff:48:99:61:90:f0:89:1e:9b:e0:2d:
f8:73:8e:ca:93:7b:e1:8f:c2:27:87:a6:27:0b:93:c7:05:cc:
03:2e:1a:47:82:67:2c:68:36:2e:6b:d5:e3:97:33:75:e8:a1:
01:83:18:7c:4f:b2:7b:05:4d:0c:73:93:a0:dc:07:08:5e:1d:
6a:90:0e:a4:5e:65:a5:9c:9f:04:8f:06:65:9d:c6:8e:82:93:
db:10:a9:ac:8b:67:c3:e1:27:97:f0:5e:d5:e6:a6:37:4a:9f:
15:1b:09:cb:8e:47:06:9f:ec:1f:77:1f:b7:6b:96:1a:82:11:
ff:c1:b6:6f
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUR9DhB28SbznSqeHPlwDFuZBYva0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA0MjAwOEFFQzgwMTUyRjM3M0QyQTA0REZEMzg5M0VF
MkY5MjE2NjAeFw0yNjAyMTIxMDU3MDJaFw0yNzAyMTExMTAyMDJaMDMxMTAvBgNV
BAMTKEQzRjREMkMzNjdBMzRENEQ3ODA3REMzQzBBQzNBRjA3OUQwNDhDMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7g/ERSUVWRCOH/b0vQbt18Kjd
8YorOJtFLNjpqNX//EH/4uwBqcM5OvZl7aGR+tDM1DW8JOMzGTk7CcD6D4J8RXB0
ks31eByZdjwIBLuCko6CmfC/rfaYxxleEpqfQnGuqhxzYeAF+HgwrU3QVXpn2DIJ
Kv/FtvtD230d1InEhToUPk7lN/5xxXCO5jdF4Yg8yYRgAxpFHv3XoEbGJVjlgkWr
f+Xb6k0Vf37cPWG3nQ29kTbgIRLoPP6T8Pi1QYpTvw6dUL4gM3OAyBH4B7/LmdDf
K+YvIWzK08RIU9K6WCopXZ2rHhGZzNYp1NwauK9n8/Br8Tll0cwk9tm2BGDVAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU0/TSw2ejTU14B9w8CsOvB50EjCIwHwYDVR0j
BBgwFoAUIEIAiuyAFS83PSoE39OJPuL5IWYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
ZmMzY2JjNC04ODgzLTQxMWMtODc2ZS1lOWUyM2E4ZDhhZDkvMC8yMDQyMDA4QUVD
ODAxNTJGMzczRDJBMDRERkQzODkzRUUyRjkyMTY2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjA0MjAwOEFFQzgwMTUyRjM3M0QyQTA0REZEMzg5M0VFMkY5
MjE2Ni5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZmYzNjYmM0LTg4ODMtNDExYy04
NzZlLWU5ZTIzYThkOGFkOS8wLzMyMzAzMjJlMzczMzJlMzEzNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM1MzgzODMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKSREwDQYJKoZIhvcN
AQELBQADggEBAEuJGJU6VT/7p9fMOPGiqwgtAGLugrKeGm6IrA5Ncs9pakUdVFac
LyKZGTCiJTH3k4xsESjhm37XjEdHi2QWOsk4h86Z1EbcYhP5z2CbN+hZaMeG3WQc
WZqkqulFFI7LifTWjQwOLvv4STOXECLMFKEsF4ABD/218uZgm0z9Ee4zQpt0jOT/
SJlhkPCJHpvgLfhzjsqTe+GPwieHpicLk8cFzAMuGkeCZyxoNi5r1eOXM3XooQGD
GHxPsnsFTQxzk6DcBwheHWqQDqReZaWcnwSPBmWdxo6Ck9sQqayLZ8PhJ5fwXtXm
pjdKnxUbCcuORwaf7B93H7drlhqCEf/Btm8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:35:55 2026 by rpki-client