
$ rpki-client -vvf repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/3230322e37342e37342e302f32332d3234203d3e20313333383030.roa
File: 3230322e37342e37342e302f32332d3234203d3e20313333383030.roa (raw, json)
Hash identifier: QnpXNgQS0ANzts5qE/GQxLZvArtSxvVua1P/pq1g7S0=
Subject key identifier: 7D:DE:D2:C4:40:F8:BC:62:69:1D:30:8A:57:D4:03:04:AD:7C:E8:AB
Certificate issuer: /CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939
Certificate serial: 11D6DCE40AFF5EB4AE96D1802F84A88FEDBD7D15
Authority key identifier: 96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/3230322e37342e37342e302f32332d3234203d3e20313333383030.roa
Signing time: Wed 18 Feb 2026 10:00:02 +0000
ROA not before: Wed 18 Feb 2026 09:55:02 +0000
ROA not after: Wed 17 Feb 2027 10:00:02 +0000
asID: 133800
IP address blocks: 202.74.74.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl
rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:d6:dc:e4:0a:ff:5e:b4:ae:96:d1:80:2f:84:a8:8f:ed:bd:7d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939
Validity
Not Before: Feb 18 09:55:02 2026 GMT
Not After : Feb 17 10:00:02 2027 GMT
Subject: CN=7DDED2C440F8BC62691D308A57D40304AD7CE8AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:74:fe:4b:ff:ef:e5:56:bc:2f:b2:24:b0:52:
47:50:a2:67:54:6d:5c:4e:fb:d5:8b:cc:6a:17:37:
42:92:bb:6a:93:45:62:23:16:3f:6f:c1:f6:dd:c2:
9f:28:c2:d4:0b:16:d5:e6:67:59:65:64:b6:dc:d3:
bf:03:d7:bb:2a:7f:a0:b6:0f:93:fb:bd:31:cb:73:
84:f9:6b:8e:44:07:3e:42:5b:4b:3c:2f:4a:71:8e:
7a:bb:49:6a:7c:ba:07:22:a5:81:44:be:d0:c6:4b:
8f:ec:83:fc:2d:e0:b8:a6:d0:bd:fc:37:9f:de:0a:
52:08:db:d1:58:56:ca:18:8e:4b:30:bf:7e:d9:f6:
11:6a:43:d4:9c:c1:c1:16:ac:cc:b9:12:38:53:5f:
93:d9:e3:8d:67:ea:f5:a1:0d:0e:c9:fd:03:5b:25:
a4:c4:d4:bd:63:b0:ad:88:d4:9b:c0:e2:6f:27:05:
48:e4:57:ef:62:fd:a6:d7:c6:b7:10:73:c7:30:7e:
ec:4c:3d:df:2c:a2:47:2f:1e:40:88:f7:06:bb:ca:
59:78:bc:b4:1e:cb:24:5c:69:b1:57:73:b7:eb:2c:
eb:bc:84:c8:30:72:0e:41:85:38:1d:9a:57:53:06:
78:df:31:a0:00:cc:1b:9d:18:85:ba:54:82:74:3e:
05:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DE:D2:C4:40:F8:BC:62:69:1D:30:8A:57:D4:03:04:AD:7C:E8:AB
X509v3 Authority Key Identifier:
keyid:96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/3230322e37342e37342e302f32332d3234203d3e20313333383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.74.74.0/23
Signature Algorithm: sha256WithRSAEncryption
90:48:04:e8:e5:de:a3:22:63:34:35:c8:40:a8:c6:a6:2e:d2:
ac:48:6a:f7:0a:49:fe:08:dd:7f:69:76:45:d1:8f:25:bb:7f:
9d:31:30:00:81:84:a8:b3:2c:24:b5:a9:56:69:ad:68:69:0c:
d0:cf:2b:56:5b:fe:b1:91:3b:cb:36:a1:ec:1c:ea:a5:c8:27:
36:79:06:a7:b4:04:4f:b7:39:de:59:fe:16:4d:9b:f0:bd:9d:
e9:a0:c0:9b:32:a2:de:03:e1:0c:ba:15:91:bf:29:16:23:03:
86:32:2f:45:b3:01:e0:0b:82:db:1a:65:9e:e2:09:07:1b:99:
f8:64:e6:65:eb:13:d8:5b:6b:ef:e6:21:07:8d:80:d0:aa:52:
7d:5f:61:db:37:93:c2:af:27:6e:a8:19:63:7e:cf:2d:07:c9:
eb:01:33:01:dd:30:9f:4e:ec:e1:f8:cf:19:41:0f:79:4d:a9:
a7:46:92:8a:39:96:37:cd:82:03:0c:b0:75:d5:1f:5a:c9:32:
d3:eb:a8:58:aa:01:54:37:54:f8:4a:42:b7:5a:ee:71:ca:75:
52:41:0b:7b:6c:99:41:da:5e:40:77:ce:4e:2e:8d:08:15:3b:
e1:f5:b5:b8:28:69:d3:fd:44:29:22:b9:0b:b9:f3:fb:79:33:
8a:ae:b7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:32:11 2026 by rpki-client