
$ rpki-client -vvf repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35342e302f32342d3234203d3e20313430343735.roa
File: 3230322e31302e35342e302f32342d3234203d3e20313430343735.roa (raw, json)
Hash identifier: t5Iw0lmBrLhAZi4QG0QHngM6PjqO/mCm5dbia1vL2ZM=
Subject key identifier: AC:60:45:EC:2E:B1:61:68:4D:D6:1C:C7:84:A8:33:C8:61:10:E2:E2
Certificate issuer: /CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3
Certificate serial: 70CFF68A106A6A12B5D9C11F1B83BFD421BD09A5
Authority key identifier: B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35342e302f32342d3234203d3e20313430343735.roa
Signing time: Wed 11 Feb 2026 03:00:01 +0000
ROA not before: Wed 11 Feb 2026 02:55:01 +0000
ROA not after: Wed 10 Feb 2027 03:00:01 +0000
asID: 140475
IP address blocks: 202.10.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl
rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 17:28:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:cf:f6:8a:10:6a:6a:12:b5:d9:c1:1f:1b:83:bf:d4:21:bd:09:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3
Validity
Not Before: Feb 11 02:55:01 2026 GMT
Not After : Feb 10 03:00:01 2027 GMT
Subject: CN=AC6045EC2EB161684DD61CC784A833C86110E2E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d7:55:82:30:8d:a4:34:0f:1d:bd:0a:f4:47:
33:be:98:ac:03:c5:24:08:bf:05:44:80:98:af:f2:
eb:43:e9:17:e4:dd:39:aa:79:f7:1a:14:af:c1:11:
c8:eb:c4:e9:86:3b:0f:24:50:b0:60:45:0c:21:05:
08:f5:90:d8:03:37:0b:40:8b:e0:48:c5:15:ef:aa:
12:e3:15:97:53:c7:e9:89:cc:c5:41:9b:71:81:2c:
81:71:76:ef:4e:ae:51:17:e1:2c:01:4f:50:e3:95:
82:fb:de:ee:01:8d:6f:54:ea:1b:dd:62:86:16:b9:
b3:77:47:68:85:0e:dd:31:8a:d5:bf:5d:b9:a6:35:
9c:67:d2:ba:3a:e5:91:75:26:f1:6b:9b:2a:b9:fb:
b7:b0:1e:b1:58:08:ea:8c:8a:00:f8:77:bb:f8:a7:
53:dd:54:5b:6b:9f:91:51:05:db:40:8e:29:e0:0b:
c9:35:a4:ae:17:b2:be:eb:71:f4:db:85:b9:d9:68:
97:b5:e3:30:05:9f:1e:49:d2:e9:aa:5e:07:d2:9b:
54:74:e1:69:94:f4:83:e7:df:da:47:3f:10:67:5c:
2e:4f:f4:f0:2f:1c:17:7e:ab:5c:f7:13:7a:35:ef:
ee:51:9d:09:88:47:bc:4c:86:e9:29:ff:3d:5a:c3:
7a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:60:45:EC:2E:B1:61:68:4D:D6:1C:C7:84:A8:33:C8:61:10:E2:E2
X509v3 Authority Key Identifier:
keyid:B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35342e302f32342d3234203d3e20313430343735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.10.54.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:a4:0b:8e:a0:fc:e8:a7:68:a4:0a:d4:eb:c2:21:e3:11:7f:
e4:49:dd:cf:2d:ac:d5:d1:67:ad:d0:29:c2:fe:97:6c:6e:09:
21:fb:c4:41:07:86:b8:d7:c9:65:d1:f9:dd:65:0a:ab:01:0f:
e6:6f:0d:1c:f4:e5:57:58:77:56:43:a4:72:b6:db:d9:9e:6a:
7e:40:c7:a7:1d:ed:c3:fc:33:3f:8e:fe:b5:82:3c:00:33:17:
71:2a:cc:07:36:77:48:29:c6:74:3e:0a:76:9a:4c:86:87:9e:
1f:c5:5a:4d:b6:aa:3e:2e:fa:f1:c9:d5:d6:57:04:6c:df:65:
58:b9:4e:94:70:2b:69:e6:ef:2b:d4:2d:eb:79:25:16:f1:e5:
a4:f7:5e:17:b4:73:f1:22:e1:83:ac:fe:ac:95:ca:4e:bd:2f:
d2:43:86:6c:6b:2a:bd:f3:83:7b:90:ec:3d:c3:49:4f:24:30:
ff:97:ff:59:20:f2:19:57:d9:a1:9b:25:b7:58:50:cd:71:69:
23:57:d5:e1:61:54:35:06:8c:5a:77:66:29:37:d6:1a:83:ff:
77:b3:0e:6d:e9:76:57:d9:a8:5a:65:c0:8e:31:09:24:d8:9f:
96:91:6d:ae:86:09:86:76:c4:1e:07:25:65:9f:b2:d3:1e:34:
ce:a0:85:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:44:06 2026 by rpki-client