
$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36332e302f32342d3234203d3e20323031333431.roa
File: 3230322e35312e36332e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: TwtuOdFbOmuGSiYWtbwZ1uQh0l9S7wmozR9F9oj2vO4=
Subject key identifier: 89:D4:D6:34:A1:CC:C1:8B:01:7D:63:F8:02:9D:D1:2A:19:3C:27:3E
Certificate issuer: /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Certificate serial: 0CC692BB1166E38610EB288BA75C81F8256611D4
Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36332e302f32342d3234203d3e20323031333431.roa
Signing time: Wed 25 Feb 2026 07:03:47 +0000
ROA not before: Wed 25 Feb 2026 06:58:47 +0000
ROA not after: Wed 24 Feb 2027 07:03:47 +0000
asID: 201341
IP address blocks: 202.51.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl
rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 21:17:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:c6:92:bb:11:66:e3:86:10:eb:28:8b:a7:5c:81:f8:25:66:11:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Validity
Not Before: Feb 25 06:58:47 2026 GMT
Not After : Feb 24 07:03:47 2027 GMT
Subject: CN=89D4D634A1CCC18B017D63F8029DD12A193C273E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:12:6f:1c:09:33:0b:d8:ec:3f:a2:56:fb:6f:
1a:0f:28:ff:9c:1f:99:91:75:15:d7:50:18:09:2c:
8a:28:9a:29:8a:8b:38:60:89:d8:bf:9a:f9:7a:69:
da:74:58:16:04:3b:ae:69:50:92:5e:da:c7:d6:6c:
85:bf:a5:ba:16:f7:fe:64:53:5b:25:7e:da:15:19:
ab:4f:24:4a:59:ad:b4:3a:cb:c2:c2:2d:c9:d3:cf:
ef:81:85:21:09:38:9e:2a:ab:f7:01:24:2f:bb:64:
38:ab:5e:ce:fe:df:e4:df:31:b7:a6:34:19:c1:e5:
46:1c:d6:35:83:69:96:6d:83:ef:0f:97:7d:a8:e5:
a7:7e:27:5b:2f:aa:26:9e:b7:02:78:c6:a8:7d:fd:
d7:a8:2c:41:78:f2:37:8c:31:ab:af:83:a5:5a:4e:
b5:d5:26:e5:ad:35:20:5f:2f:f6:34:f2:44:67:b4:
10:a0:89:47:4c:d5:06:1e:e7:0c:8b:c1:60:5c:9d:
42:2e:9e:f0:6a:dc:46:78:4a:32:a4:f8:e8:4e:4e:
94:50:5c:6e:ca:ce:c3:9e:ba:75:85:d9:a0:84:2e:
e6:e0:9a:e3:ce:57:98:e2:19:48:c5:66:ac:f6:68:
f7:bd:b1:90:bc:db:d9:52:2c:ea:a3:45:13:90:a3:
ae:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D4:D6:34:A1:CC:C1:8B:01:7D:63:F8:02:9D:D1:2A:19:3C:27:3E
X509v3 Authority Key Identifier:
keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e36332e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.51.63.0/24
Signature Algorithm: sha256WithRSAEncryption
11:c8:dd:96:13:a3:e3:03:8e:44:03:f7:49:75:98:4c:86:60:
ef:e2:40:8e:38:9c:bc:61:5a:51:a9:7b:cb:8c:37:80:6d:0d:
ef:73:06:f0:33:d4:b5:90:d9:d1:4f:93:89:1c:7b:d9:a0:1d:
d9:6f:35:b2:5d:5b:b8:06:0f:b3:df:2e:09:97:8c:69:27:8c:
65:bd:31:aa:09:89:bf:a7:21:09:8a:29:41:48:e2:e4:b5:88:
39:92:ae:fd:29:2c:cf:01:93:6f:11:85:56:b9:00:d0:a2:a7:
37:66:fd:7c:67:f0:7e:3f:2e:69:fa:1f:38:12:7f:ee:99:06:
69:51:42:23:69:8e:65:f4:03:53:e0:a2:ce:98:26:4b:62:a0:
06:f3:50:d7:21:00:de:a3:28:87:95:07:ed:3b:00:da:12:0b:
83:d2:a5:a6:4f:73:32:f6:90:aa:04:e2:31:0e:36:e9:26:8e:
2a:bf:c0:b1:1c:74:25:83:45:03:74:e1:7c:86:ec:75:01:da:
8c:7e:ee:0c:50:74:d3:08:2d:de:75:c2:34:39:a0:2e:45:82:
aa:f1:c7:32:fc:07:84:79:10:58:38:ac:8a:1a:11:d0:b8:0a:
f6:d9:cd:8f:68:f1:5d:ba:42:c7:e6:59:4b:4c:6c:84:fc:2b:
a9:44:f9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:15:55 2026 by rpki-client