
$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35362e302f32342d3234203d3e203338353039.roa
File: 3230322e35312e35362e302f32342d3234203d3e203338353039.roa (raw, json)
Hash identifier: MzI0JKvb+gG5ZW7LD7zcT6Ff/HYQKP31Hdz7lrIhDQk=
Subject key identifier: F7:90:14:CB:CA:DE:60:EA:43:D1:E4:73:C7:1C:87:18:28:1F:66:77
Certificate issuer: /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Certificate serial: 5EC00C33A2B29C85A4425827655E3FB0B818AD5A
Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35362e302f32342d3234203d3e203338353039.roa
Signing time: Tue 24 Feb 2026 07:02:40 +0000
ROA not before: Tue 24 Feb 2026 06:57:40 +0000
ROA not after: Tue 23 Feb 2027 07:02:40 +0000
asID: 38509
IP address blocks: 202.51.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl
rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 21:17:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:c0:0c:33:a2:b2:9c:85:a4:42:58:27:65:5e:3f:b0:b8:18:ad:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Validity
Not Before: Feb 24 06:57:40 2026 GMT
Not After : Feb 23 07:02:40 2027 GMT
Subject: CN=F79014CBCADE60EA43D1E473C71C8718281F6677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a3:2b:d1:9a:95:aa:45:c3:7e:57:0e:e4:2f:
48:5c:e6:13:23:a6:dc:db:aa:9b:cc:a8:73:71:cb:
2f:ea:02:2b:b8:19:9f:01:d0:6a:ff:50:db:9c:51:
db:0e:0f:78:21:74:6f:3d:1d:a5:61:64:d4:0f:85:
68:10:08:6e:54:31:b0:11:91:4c:31:72:40:a3:7c:
31:4e:49:10:97:a4:7b:34:f6:97:71:9b:f0:e9:80:
56:10:aa:62:e7:49:7c:1a:f9:2c:4a:e9:96:49:5e:
59:0a:3d:6e:75:f9:8c:55:a1:d0:92:5e:a3:3d:df:
f5:ae:9c:80:2b:4c:86:85:b0:05:e7:ca:09:9b:b1:
38:85:54:24:41:01:d1:93:3e:21:d7:c3:39:18:e0:
39:5a:98:56:96:b0:76:1d:57:0e:e6:ae:58:ba:eb:
93:d0:59:ef:40:91:5e:17:54:50:af:76:fb:43:be:
a6:34:52:f9:62:69:b9:81:38:74:34:7e:e3:77:18:
1e:a5:86:2f:8d:f7:6c:97:de:e4:49:ca:71:25:48:
dc:4b:d4:b5:6b:97:74:b9:eb:ac:9d:d4:47:bb:c8:
ac:0d:18:f1:f0:e1:bb:c0:9f:ef:ed:44:1a:10:88:
ed:3e:8b:19:d3:af:db:f7:2b:7f:17:9d:a3:1a:39:
6f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:90:14:CB:CA:DE:60:EA:43:D1:E4:73:C7:1C:87:18:28:1F:66:77
X509v3 Authority Key Identifier:
keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35362e302f32342d3234203d3e203338353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.51.56.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:d0:e1:36:08:94:9e:71:a2:6b:d4:90:c7:d1:3f:51:bf:14:
40:35:ee:70:2e:41:35:01:8a:5a:35:11:e1:41:77:e1:40:ae:
13:6d:2b:6b:bf:4f:d0:a0:13:c5:b5:9e:b7:55:64:03:da:f4:
77:b8:b3:73:97:05:3b:43:b7:ff:db:10:f3:86:cf:09:05:0c:
d0:76:d3:f3:1e:1c:66:27:df:c4:5e:f2:40:81:85:b6:1e:17:
a2:93:fb:cc:e8:1e:8a:c7:ca:d0:b2:a0:ea:fb:74:fc:0c:9a:
2a:c0:2a:af:e4:e5:ee:4b:7f:ae:c6:0d:4d:47:c8:01:43:9f:
2c:0c:df:ce:21:dc:81:4b:b7:8e:71:4b:78:ee:45:d5:01:25:
5b:50:99:9b:dc:83:58:ca:6b:2d:6e:ac:12:9f:6c:88:a7:3b:
8b:e7:51:45:97:da:1f:90:d9:ff:1c:3c:20:0c:b3:bf:f0:a9:
a9:7b:21:b0:c3:eb:d9:11:0a:be:1e:d0:9a:bd:33:37:2a:32:
5d:8e:7e:2e:79:68:37:a7:4a:62:10:31:ef:e4:f4:cd:42:e3:
8a:a6:7a:b6:b5:09:e1:46:55:33:57:34:52:9f:7a:d8:50:2c:
7e:a5:67:21:6b:de:fe:42:5c:98:09:fc:5a:fb:e3:09:a2:a4:
d5:3e:06:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:36:50 2026 by rpki-client