
$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3230322e37332e32302e302f32342d3234203d3e203538383136.roa
File: 3230322e37332e32302e302f32342d3234203d3e203538383136.roa (raw, json)
Hash identifier: ibMCbvRmujOjjKM1ZMmmc3qZwnyhuI2nbsEkJjHoxDY=
Subject key identifier: CC:CA:2B:CC:B9:EC:A6:50:13:64:C1:45:3F:01:9E:05:C1:33:13:C7
Certificate issuer: /CN=2042008AEC80152F373D2A04DFD3893EE2F92166
Certificate serial: 5BB4A7A705E682319E03CA06C3FC5EA610C59E5C
Authority key identifier: 20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3230322e37332e32302e302f32342d3234203d3e203538383136.roa
Signing time: Thu 12 Feb 2026 11:02:02 +0000
ROA not before: Thu 12 Feb 2026 10:57:02 +0000
ROA not after: Thu 11 Feb 2027 11:02:02 +0000
asID: 58816
IP address blocks: 202.73.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl
rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:b4:a7:a7:05:e6:82:31:9e:03:ca:06:c3:fc:5e:a6:10:c5:9e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2042008AEC80152F373D2A04DFD3893EE2F92166
Validity
Not Before: Feb 12 10:57:02 2026 GMT
Not After : Feb 11 11:02:02 2027 GMT
Subject: CN=CCCA2BCCB9ECA6501364C1453F019E05C13313C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:73:38:8b:2e:65:92:53:e1:c4:22:e8:00:7f:
7c:3e:d0:cf:17:5e:91:c1:90:89:6a:ea:d1:2d:0a:
2a:54:66:2f:4d:4d:20:a4:8b:29:3d:38:63:99:94:
46:ea:07:c6:1f:c4:b6:f5:4a:81:64:cd:dc:a1:19:
3c:82:f7:27:45:a0:12:3c:09:af:e2:f7:2d:a0:27:
39:b9:5e:42:f6:9d:66:8d:04:5f:26:8e:e7:38:d8:
e3:71:72:ea:f4:cf:0d:0b:24:cc:03:60:1a:52:90:
11:5a:18:16:b2:cf:af:27:19:36:14:d9:00:8d:72:
32:ec:0f:dd:d4:2f:13:82:85:18:42:db:55:c7:14:
6c:8a:f7:a2:3b:6b:ef:24:46:54:2d:84:ae:c5:c5:
40:77:66:84:51:cf:f2:2c:4e:5b:ad:84:1c:a6:a4:
08:0b:af:92:52:97:6b:2d:6c:d1:4f:59:13:80:83:
36:c8:02:63:f3:51:47:fe:90:fd:7e:b5:7e:f4:fc:
31:ea:cd:9a:4a:e4:67:46:b4:cc:3f:b4:86:56:61:
cf:d2:79:ad:95:0b:0e:9c:3c:41:3a:7e:98:6b:fe:
82:ab:05:0f:42:b6:df:39:26:02:9f:a7:34:e3:38:
fc:75:b9:2f:a1:3f:2d:f5:7e:5e:71:9b:a2:d5:73:
f9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CA:2B:CC:B9:EC:A6:50:13:64:C1:45:3F:01:9E:05:C1:33:13:C7
X509v3 Authority Key Identifier:
keyid:20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3230322e37332e32302e302f32342d3234203d3e203538383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.73.20.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:6d:89:8f:cb:5c:2e:4e:56:b9:7f:5e:ed:ba:a1:5a:50:60:
ba:d5:b5:32:09:f6:14:2b:10:9a:39:ad:fe:2e:64:1e:1c:85:
62:c4:a5:6e:46:27:1c:df:a5:39:18:63:5b:f0:dc:5a:97:12:
88:e8:52:d6:9f:a3:50:75:23:9a:aa:3d:b3:43:1a:53:a5:99:
f3:9a:71:b9:60:44:2a:a0:29:03:2a:53:f7:96:6d:b0:73:d0:
73:89:27:a7:fd:be:66:7c:1c:cb:44:be:7b:6c:6d:a6:68:24:
91:25:fe:f9:f7:0c:55:81:b3:f9:f2:16:a5:72:12:97:59:76:
eb:6f:5d:6d:b0:3d:45:08:95:06:ab:d0:f0:a7:4d:a2:bd:4f:
1f:62:39:d4:7d:72:1d:af:02:2c:ab:4a:d1:09:fc:38:92:70:
cc:43:dd:a9:92:00:68:01:68:e1:18:0b:2a:70:2b:77:87:b4:
6f:7b:57:a7:a2:4c:36:4d:54:c8:7b:f9:92:68:9f:26:d1:ac:
6a:b3:74:14:d1:1b:b5:4d:60:bf:28:00:a1:e4:ee:79:34:07:
32:b1:da:c1:8d:ed:99:19:e0:f3:a9:35:e6:6e:ae:37:c8:af:
eb:43:5d:09:ba:7d:07:ca:76:28:c5:e7:67:3e:51:2e:95:f4:
31:23:d4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:18:08 2026 by rpki-client