
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230322e36322e382e302f32322d3234203d3e2039333431.roa
File: 3230322e36322e382e302f32322d3234203d3e2039333431.roa (raw, json)
Hash identifier: jMWa0/slXN3PRrmtYBVoU1viMEkasJw9vswSM8r08Kg=
Subject key identifier: 91:3E:12:6B:4D:B6:7F:69:94:DF:CC:81:A0:1F:7C:14:44:F3:E8:43
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 2FA222FB5E82991877B52A627FCE2B176A665921
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230322e36322e382e302f32322d3234203d3e2039333431.roa
Signing time: Tue 24 Feb 2026 03:00:02 +0000
ROA not before: Tue 24 Feb 2026 02:55:02 +0000
ROA not after: Tue 23 Feb 2027 03:00:02 +0000
asID: 9341
IP address blocks: 202.62.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 02:10:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:a2:22:fb:5e:82:99:18:77:b5:2a:62:7f:ce:2b:17:6a:66:59:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Feb 24 02:55:02 2026 GMT
Not After : Feb 23 03:00:02 2027 GMT
Subject: CN=913E126B4DB67F6994DFCC81A01F7C1444F3E843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6d:d3:94:5c:a5:03:46:40:fb:c3:b7:00:f0:
b6:59:be:65:24:32:1d:68:e3:1f:d0:10:c8:cd:91:
b9:4f:ba:bd:5a:8d:81:f2:a9:f0:f2:4a:0a:75:5e:
65:1a:ea:40:dc:8e:0a:f9:46:dc:b8:05:ff:3e:6e:
3e:70:61:32:b0:57:85:1d:58:3c:85:23:ba:18:81:
9a:48:9a:3a:42:1b:ac:38:32:54:c0:d9:c5:6d:e0:
19:f1:ad:7a:45:bd:fc:ed:62:5c:d7:12:bd:75:46:
2b:40:f4:24:09:ea:2e:ec:f5:2f:98:93:1a:d8:cc:
48:54:06:98:dd:2b:83:d6:6c:33:40:04:38:1e:e1:
1e:2f:44:fa:08:78:fc:25:23:06:53:c1:69:56:de:
97:7e:5d:60:a7:81:ea:98:49:01:f8:9a:40:e1:9d:
bb:94:45:11:06:e3:b5:11:f5:03:53:67:d5:d6:2a:
0b:9b:b5:c8:53:80:68:20:98:2e:d3:86:c7:20:8d:
0d:09:f3:21:61:85:39:35:bd:57:cb:04:1c:0e:3a:
b3:86:ee:ee:6c:a6:bb:9f:18:0d:62:0d:d9:2e:3b:
90:d4:e7:c2:ce:86:8a:48:8a:ba:44:79:63:f3:14:
5c:b9:f5:70:5a:0e:62:a8:62:b3:02:c8:59:36:40:
af:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3E:12:6B:4D:B6:7F:69:94:DF:CC:81:A0:1F:7C:14:44:F3:E8:43
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230322e36322e382e302f32322d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.62.8.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:4f:4a:20:f5:b9:66:79:2a:44:8c:f5:47:fa:f4:59:43:d1:
ad:0e:54:9d:67:10:d8:ab:43:70:af:9b:83:0e:9e:c4:2a:a3:
a8:36:ad:fc:8d:9b:1a:1d:dd:09:1d:f3:96:10:b6:5c:d6:c7:
18:94:f4:59:a0:b1:80:77:63:05:79:46:c5:28:d1:fe:e2:ef:
03:7e:51:3c:4d:a6:68:da:42:f6:b0:01:36:b1:1d:4d:15:35:
3f:7b:5b:3e:6f:ea:4e:c3:89:37:2d:7b:0d:bf:0f:37:f1:c7:
f6:cb:6e:65:63:eb:e5:2d:87:66:a6:9f:51:e8:c6:63:ac:86:
74:b2:d9:e1:04:ed:24:a3:37:88:db:c0:96:ea:e2:4f:a2:79:
f8:9c:40:79:45:d1:d2:f9:0e:9d:ca:be:91:f8:4e:89:3b:6d:
20:36:bf:d7:76:ef:c7:46:9d:b0:4f:df:e7:bc:0b:0b:4c:98:
a4:31:57:3c:33:33:59:f5:26:a4:36:7a:d7:ee:9a:d0:b9:c3:
9f:a0:ff:1d:9f:3a:5c:ba:44:63:24:36:73:c1:56:29:2e:26:
4d:a3:2d:0f:49:b9:91:4a:89:ea:ea:65:15:45:b5:62:1a:99:
95:d1:30:d6:56:17:08:ce:97:0a:85:ec:cf:d2:88:8c:e7:b4:
30:56:e7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:58:41 2026 by rpki-client