
$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36322e302f32332d3233203d3e20323031333431.roa
File: 3230322e35312e36322e302f32332d3233203d3e20323031333431.roa (raw, json)
Hash identifier: ftR/aIoDxynVS6qBsO4B8Q2lDsNYJt3pQB7ABoEc86s=
Subject key identifier: 6F:64:F6:A1:88:06:C6:AC:B2:40:99:A0:34:23:47:73:99:83:1C:59
Certificate issuer: /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Certificate serial: 2B1F7CDB1B7EBE0D97DEB9D304678F5D1F9275AB
Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36322e302f32332d3233203d3e20323031333431.roa
Signing time: Wed 25 Feb 2026 07:03:47 +0000
ROA not before: Wed 25 Feb 2026 06:58:47 +0000
ROA not after: Wed 24 Feb 2027 07:03:47 +0000
asID: 201341
IP address blocks: 202.51.62.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl
rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 21:17:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:1f:7c:db:1b:7e:be:0d:97:de:b9:d3:04:67:8f:5d:1f:92:75:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Validity
Not Before: Feb 25 06:58:47 2026 GMT
Not After : Feb 24 07:03:47 2027 GMT
Subject: CN=6F64F6A18806C6ACB24099A03423477399831C59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bb:15:6e:11:6b:16:c2:86:52:28:08:47:cb:
6c:c4:81:d3:1e:18:0b:e0:98:63:9d:6d:d7:52:54:
0c:c7:63:d9:8d:45:31:57:e5:38:04:94:64:7d:4e:
98:45:61:54:8e:f4:b9:57:3a:1f:e0:90:68:13:51:
a8:da:46:9f:55:20:4d:74:7d:20:25:b5:47:af:76:
c0:e7:68:0c:71:00:f4:ec:19:79:42:52:33:8b:e2:
19:bf:a3:06:30:4a:e1:28:bd:f8:a8:ad:cf:44:d4:
c0:a0:17:b3:b4:2c:d4:db:b7:04:54:1e:5e:3c:ea:
17:fc:af:0f:ce:d2:d0:1c:66:94:0c:86:30:0e:73:
72:b3:f0:ce:e8:ae:34:14:28:91:55:93:2d:11:8a:
1d:23:72:14:25:e4:44:2b:60:8c:de:fd:d2:30:66:
ee:b6:b3:20:e0:80:08:d4:f5:a3:d3:17:f0:aa:78:
04:2b:f1:55:b7:40:af:5d:01:e9:3c:81:7b:55:9d:
3a:25:10:e7:99:c9:82:37:03:2e:98:99:34:63:89:
f3:d9:e7:86:9e:41:54:19:e5:c4:04:60:9f:7b:87:
73:36:8a:8d:d3:d1:ad:90:23:fd:24:cc:ac:b9:a3:
e1:58:fa:d3:9a:a5:4c:c8:7c:4c:85:2b:a3:c9:0f:
30:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:64:F6:A1:88:06:C6:AC:B2:40:99:A0:34:23:47:73:99:83:1C:59
X509v3 Authority Key Identifier:
keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36322e302f32332d3233203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.51.62.0/23
Signature Algorithm: sha256WithRSAEncryption
96:ba:21:77:8f:71:c0:2e:ae:1f:7c:90:55:e1:43:42:09:45:
cd:34:b9:9b:88:f6:23:c4:8d:6a:b9:32:6d:dc:a8:8a:b1:fa:
4a:e1:dc:cc:bd:b1:32:63:ac:3e:df:63:f8:8c:1a:f5:dc:15:
a5:8b:54:68:00:89:d8:9d:f9:61:61:1c:a5:0a:c8:fd:ea:50:
48:f5:9a:a6:ce:8d:57:e1:5e:d1:4a:ca:1f:13:9b:47:3d:da:
97:a3:6a:6a:fc:c3:6b:9b:f5:de:38:88:3b:f2:62:11:be:07:
6d:b3:e4:82:6b:6f:2b:f7:e0:72:36:cf:30:77:c2:08:a6:04:
0d:fb:e9:9b:30:d0:9d:a1:e0:7c:f1:96:d0:67:b5:07:6f:14:
b9:1b:a2:74:ae:ad:1c:cf:63:cc:24:4a:2a:5b:ee:f0:1a:77:
f4:8e:63:59:90:50:44:4f:54:3e:6f:5a:11:8e:cc:67:1a:31:
3f:11:68:d8:d4:43:f9:dc:e3:bf:65:97:3c:f9:1c:18:bc:cf:
b3:eb:6e:eb:1f:47:85:f1:40:42:b2:aa:34:2b:b2:19:39:0e:
af:5d:7f:c6:3b:ac:1c:c1:16:2d:7b:75:76:be:87:15:d8:7e:
34:c5:78:39:21:5f:c5:50:4b:9c:46:41:8a:4d:c4:6a:cb:68:
89:85:6c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:50:27 2026 by rpki-client