
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230322e36322e382e302f32322d3232203d3e2039333431.roa
File: 3230322e36322e382e302f32322d3232203d3e2039333431.roa (raw, json)
Hash identifier: HNmgqxve9fojjBoI0c9LjOMp4gEp+NrKoyYA7CQrCLs=
Subject key identifier: E5:E9:30:19:A9:99:6D:D5:2E:04:9E:49:7E:80:FC:F0:E3:B2:C1:A4
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 2A97F7E4B60D68274EE2E21FCA4BE8E14500CF32
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230322e36322e382e302f32322d3232203d3e2039333431.roa
Signing time: Tue 07 Apr 2026 06:02:46 +0000
ROA not before: Tue 07 Apr 2026 05:57:46 +0000
ROA not after: Tue 06 Apr 2027 06:02:46 +0000
asID: 9341
IP address blocks: 202.62.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 16:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:97:f7:e4:b6:0d:68:27:4e:e2:e2:1f:ca:4b:e8:e1:45:00:cf:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Apr 7 05:57:46 2026 GMT
Not After : Apr 6 06:02:46 2027 GMT
Subject: CN=E5E93019A9996DD52E049E497E80FCF0E3B2C1A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:28:d7:5d:7a:98:38:8e:fa:93:30:a5:b2:89:
83:4a:68:c1:61:33:64:f9:6d:ad:d9:ba:cb:b6:bc:
ef:84:fb:d9:20:07:1a:c2:23:ec:d9:6f:6b:79:f3:
1b:c8:0b:3b:80:5f:8e:50:7c:56:f9:0c:62:2c:7d:
98:e5:d3:0c:cb:95:19:24:5c:a6:7d:9e:e0:4f:24:
f8:11:0e:39:f4:6e:eb:e0:4f:73:8a:f6:d8:c3:24:
e2:fd:39:71:cd:21:4c:b7:ef:c3:de:79:e8:ad:71:
6a:37:37:6b:5c:f0:3d:5f:68:42:1e:e8:e6:22:58:
12:47:dc:db:44:50:af:56:dd:9e:6e:31:d2:f9:59:
bd:45:35:57:39:5c:b6:11:73:2e:12:55:a3:c8:01:
e9:45:c0:33:59:e1:a7:4f:37:8a:ff:82:7d:4b:c7:
b3:3a:c0:6c:9a:92:bf:62:30:cd:82:bd:7b:18:6a:
e7:6f:7b:4f:d6:59:53:ae:ad:69:2c:a9:e0:12:de:
c9:a8:f8:ef:89:6c:57:1d:9c:f4:37:94:6e:5b:d7:
dc:60:5f:60:87:70:25:dd:f8:a5:13:74:d7:f5:fc:
1e:52:8b:41:6c:43:a5:ad:c9:cd:44:94:3b:44:0c:
2a:57:66:e6:97:3d:86:10:fe:a1:9d:76:b4:a5:da:
b4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E9:30:19:A9:99:6D:D5:2E:04:9E:49:7E:80:FC:F0:E3:B2:C1:A4
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230322e36322e382e302f32322d3232203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.62.8.0/22
Signature Algorithm: sha256WithRSAEncryption
93:6c:dd:28:ff:61:47:d6:df:0e:a7:27:aa:d4:a1:1d:ae:0e:
73:2a:a7:00:be:6c:a5:36:a4:1d:d1:5a:24:c4:32:3f:ac:20:
11:55:62:12:37:3f:75:bd:b9:ed:b2:be:93:5a:9f:f2:ad:f8:
ec:84:6f:89:19:c9:e2:a1:86:14:43:d4:c5:60:0e:0f:5c:b0:
82:6e:3e:73:50:a9:f2:34:6f:ef:1e:c0:ea:49:fc:40:f3:b5:
df:09:76:94:2c:4c:0a:21:97:54:dc:aa:31:be:6b:72:ec:a7:
eb:fe:50:4c:d3:40:6c:30:c2:d3:13:ca:81:e3:d9:08:9e:ae:
d8:0a:1c:d3:58:98:4c:50:39:65:a0:39:5d:01:f9:5d:cf:41:
ee:a5:a5:a4:bc:60:51:df:e1:fb:01:20:6d:07:83:f6:21:67:
e9:7b:8c:c3:92:a4:ba:27:27:e1:b2:7c:2a:6a:f9:49:0f:df:
18:7b:e4:75:74:84:2e:c4:3f:a7:ec:57:84:49:f2:82:88:10:
9a:88:35:f4:b3:62:b3:3f:d1:22:e9:17:07:b9:85:c3:67:4b:
17:52:22:b9:d6:95:c2:cc:93:53:64:e2:73:2a:64:05:82:9e:
f8:64:51:f9:2d:ba:aa:51:76:62:71:6c:6a:0a:0b:e9:07:9f:
ad:1d:0e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:49:53 2026 by rpki-client