
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230322e3136322e3230382e302f32302d3230203d3e2039333431.roa
File: 3230322e3136322e3230382e302f32302d3230203d3e2039333431.roa (raw, json)
Hash identifier: meIDJSefWRoyaaqmixwUQFr9vpDeJwToa9H8y8jMXyI=
Subject key identifier: 4A:EC:2D:52:02:17:6A:5D:C9:B2:EF:F3:A9:80:83:8D:F4:A4:4F:A1
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 0B90FC5520023F4D5E799D1D18A140E0D46B4FB6
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230322e3136322e3230382e302f32302d3230203d3e2039333431.roa
Signing time: Tue 07 Apr 2026 06:02:45 +0000
ROA not before: Tue 07 Apr 2026 05:57:45 +0000
ROA not after: Tue 06 Apr 2027 06:02:45 +0000
asID: 9341
IP address blocks: 202.162.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 16:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:90:fc:55:20:02:3f:4d:5e:79:9d:1d:18:a1:40:e0:d4:6b:4f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Apr 7 05:57:45 2026 GMT
Not After : Apr 6 06:02:45 2027 GMT
Subject: CN=4AEC2D5202176A5DC9B2EFF3A980838DF4A44FA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e4:3c:79:14:b2:3a:69:66:95:9a:d5:79:c4:
93:cd:34:41:b1:e8:8f:df:c5:df:bc:5a:8d:a7:dc:
a8:58:f1:87:ee:91:c9:a3:41:30:47:0d:06:c4:4a:
83:77:0d:df:3f:97:b9:50:f5:70:1c:91:c2:a5:19:
52:95:fe:5c:7d:a6:f6:ca:88:ce:6e:3e:74:90:7d:
49:bc:30:f3:9c:2d:1c:8d:6c:f3:02:bf:ed:cb:ac:
5d:ea:c3:5e:96:35:72:13:bf:83:d8:5d:32:e8:df:
d4:e1:48:27:bc:9d:63:8e:ea:e6:fa:e1:3c:99:68:
87:28:f9:0f:f2:e0:d2:3d:1c:04:89:d5:2f:32:f6:
a9:fa:db:65:e1:83:56:e7:13:fe:e1:70:14:2e:7d:
98:bc:fd:cc:c3:36:14:aa:71:60:09:d3:bf:78:eb:
b9:a4:40:fb:d7:a8:d0:e8:a8:3d:4b:52:eb:f6:3e:
80:fb:65:04:e1:63:79:84:f6:a2:3c:c3:75:22:3d:
7c:4f:4f:2a:87:7e:fe:bc:76:c8:63:d2:48:29:a3:
76:09:c9:1b:25:08:84:90:1f:f5:7a:ad:7b:09:c1:
46:89:b2:88:c0:53:ab:8c:bb:d3:1c:0e:17:54:4f:
f3:1b:33:be:af:bf:93:e6:93:f2:b5:ac:2c:a8:d9:
c1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EC:2D:52:02:17:6A:5D:C9:B2:EF:F3:A9:80:83:8D:F4:A4:4F:A1
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230322e3136322e3230382e302f32302d3230203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.162.208.0/20
Signature Algorithm: sha256WithRSAEncryption
a0:3f:69:0a:50:59:25:23:8b:99:e2:25:5a:ea:3b:42:48:15:
6f:f8:72:3a:03:4a:5e:7b:4e:2a:ae:d9:e5:47:96:6e:cd:4d:
1b:b4:35:52:38:b8:b8:57:2f:55:44:b5:d2:22:cc:b9:08:6d:
2a:98:7c:97:08:97:4b:58:33:bc:8f:e5:c0:03:b5:db:34:17:
55:ec:9d:49:e2:7b:c6:a5:91:47:1e:43:ce:ab:8d:97:ad:14:
83:2a:64:0a:11:30:35:73:80:db:c6:97:8b:93:a2:78:5b:fe:
69:94:5a:16:d8:57:91:c2:31:54:14:16:ba:4d:07:fe:45:bc:
93:80:2c:7e:48:20:76:d9:71:58:cd:a4:5b:04:05:6c:8c:93:
a1:51:5d:f2:46:01:f0:b7:f8:e9:25:a9:42:4d:9b:6a:e1:05:
b8:f5:a2:fe:ce:09:ea:f8:c6:b6:54:bb:2f:70:0c:d3:86:83:
ec:1f:1f:9d:1f:a5:cc:5b:be:69:e0:93:4e:02:90:e4:31:f5:
2c:4b:8a:a6:62:1a:c1:23:b2:06:1a:1c:dc:6e:af:16:a4:d6:
01:d6:53:08:d1:15:d7:2c:a6:9a:2f:db:99:d3:85:2f:99:33:
e4:15:94:87:e1:aa:11:5a:2b:74:88:c4:c5:85:a8:d2:8b:e9:
6c:51:f9:22
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUC5D8VSACP01eeZ0dGKFA4NRrT7YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0
MzU3Q0M2RDAeFw0yNjA0MDcwNTU3NDVaFw0yNzA0MDYwNjAyNDVaMDMxMTAvBgNV
BAMTKDRBRUMyRDUyMDIxNzZBNURDOUIyRUZGM0E5ODA4MzhERjRBNDRGQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg5Dx5FLI6aWaVmtV5xJPNNEGx
6I/fxd+8Wo2n3KhY8YfukcmjQTBHDQbESoN3Dd8/l7lQ9XAckcKlGVKV/lx9pvbK
iM5uPnSQfUm8MPOcLRyNbPMCv+3LrF3qw16WNXITv4PYXTLo39ThSCe8nWOO6ub6
4TyZaIco+Q/y4NI9HASJ1S8y9qn622Xhg1bnE/7hcBQufZi8/czDNhSqcWAJ0794
67mkQPvXqNDoqD1LUuv2PoD7ZQThY3mE9qI8w3UiPXxPTyqHfv68dshj0kgpo3YJ
yRslCISQH/V6rXsJwUaJsojAU6uMu9McDhdUT/MbM76vv5Pmk/K1rCyo2cFpAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUSuwtUgIXal3Jsu/zqYCDjfSkT6EwHwYDVR0j
BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG
NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3
Q0M2RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczYmRjYmFlLTJlOWQtNGYzZi04
YWI5LTM0MjRlNDQ4NDg0ZS8wLzMyMzAzMjJlMzEzNjMyMmUzMjMwMzgyZTMwMmYz
MjMwMmQzMjMwMjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMqi0DANBgkqhkiG
9w0BAQsFAAOCAQEAoD9pClBZJSOLmeIlWuo7QkgVb/hyOgNKXntOKq7Z5UeWbs1N
G7Q1Uji4uFcvVUS10iLMuQhtKph8lwiXS1gzvI/lwAO12zQXVeydSeJ7xqWRRx5D
zquNl60UgypkChEwNXOA28aXi5OieFv+aZRaFthXkcIxVBQWuk0H/kW8k4Asfkgg
dtlxWM2kWwQFbIyToVFd8kYB8Lf46SWpQk2bauEFuPWi/s4J6vjGtlS7L3AM04aD
7B8fnR+lzFu+aeCTTgKQ5DH1LEuKpmIawSOyBhoc3G6vFqTWAdZTCNEV1yymmi/b
mdOFL5kz5BWUh+GqEVordIjExYWo0ovpbFH5Ig==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:49:41 2026 by rpki-client