
$ rpki-client -vvf repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e35332e3232342e302f31392d3234203d3e2039333430.roa
File: 3230322e35332e3232342e302f31392d3234203d3e2039333430.roa (raw, json)
Hash identifier: Gb7BtMa3ZwQg1TqLmijU1iSRdOGqKu707FAgIn+V6/Q=
Subject key identifier: 6F:C6:36:33:0D:D4:A5:B6:4F:17:70:81:C2:15:C4:C5:29:4A:47:5B
Certificate issuer: /CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308
Certificate serial: 2AC426C6A9487E0EDDACF34AB180CB3B0674567D
Authority key identifier: B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e35332e3232342e302f31392d3234203d3e2039333430.roa
Signing time: Wed 18 Feb 2026 11:00:01 +0000
ROA not before: Wed 18 Feb 2026 10:55:01 +0000
ROA not after: Wed 17 Feb 2027 11:00:01 +0000
asID: 9340
IP address blocks: 202.53.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl
rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 15:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:c4:26:c6:a9:48:7e:0e:dd:ac:f3:4a:b1:80:cb:3b:06:74:56:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308
Validity
Not Before: Feb 18 10:55:01 2026 GMT
Not After : Feb 17 11:00:01 2027 GMT
Subject: CN=6FC636330DD4A5B64F177081C215C4C5294A475B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:97:1e:a5:f1:c1:36:f7:c6:6b:c6:4a:cf:03:
67:5b:0f:1a:81:5a:0b:ce:99:8a:d5:b4:61:5f:1a:
8c:f5:5b:d9:5b:49:47:2f:a1:8b:24:15:4a:8e:43:
d9:15:28:fe:1c:0e:53:26:74:78:73:0c:73:8b:88:
c1:ed:c4:d6:ae:f1:94:0c:1f:68:f6:f4:27:8e:57:
7b:99:66:68:46:4e:1c:19:48:06:35:b0:80:a3:eb:
71:eb:c0:cf:61:d3:fb:fa:7f:2f:3c:0e:94:eb:4b:
63:7a:de:56:0d:cf:b5:9b:49:8c:72:32:0b:fe:20:
2b:e0:05:39:be:49:30:c2:e4:e5:d8:9a:ae:3f:d0:
78:ce:c6:52:32:47:56:63:f8:80:9a:28:2e:f2:4d:
c0:bb:fd:2a:84:d0:9d:e8:d4:ee:2f:81:c9:5d:20:
e4:9e:dc:f3:9a:d6:3a:d8:c8:19:be:ad:53:6a:8a:
f1:7b:b5:80:45:a6:f0:f4:1d:41:b9:6d:75:e4:10:
97:6f:70:f6:33:3e:d4:2b:8e:13:a2:ea:de:81:5a:
6d:71:8b:93:b9:66:03:0d:29:8f:2f:fa:cf:3e:05:
6f:84:5a:57:34:d9:6c:d1:15:34:33:8e:9f:81:a3:
d1:02:2d:d9:50:de:8a:22:7e:46:b3:c7:99:07:ea:
c2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C6:36:33:0D:D4:A5:B6:4F:17:70:81:C2:15:C4:C5:29:4A:47:5B
X509v3 Authority Key Identifier:
keyid:B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e35332e3232342e302f31392d3234203d3e2039333430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.53.224.0/19
Signature Algorithm: sha256WithRSAEncryption
90:56:66:7a:bf:83:a2:2e:03:08:49:36:4d:ae:e9:77:ea:ab:
1c:33:34:1f:42:3c:bd:c3:ee:24:f9:00:b3:50:9c:37:b7:56:
14:33:5b:fa:2c:54:7d:77:b2:38:30:23:2f:a4:ab:25:83:3f:
b4:6a:25:d9:a1:83:32:23:6a:59:75:56:06:da:b4:bf:79:1d:
6b:a8:47:84:7c:c7:e4:33:ee:28:3a:80:c4:df:45:c3:8d:b6:
d4:f2:0a:f6:b4:f3:61:58:6c:a3:33:99:f3:14:50:6f:7c:03:
85:cd:52:97:7e:44:27:dc:7d:f7:83:49:3c:66:1c:50:31:1a:
19:b5:9d:a7:fb:4d:b9:a9:8a:1c:7a:70:b9:de:8e:40:24:0f:
d5:c8:39:33:f5:52:ab:be:0a:3d:a1:08:5d:18:4b:1f:a7:c6:
2f:9e:26:57:e6:a3:7f:88:52:40:1d:2b:35:a5:f7:08:33:fb:
b3:8b:97:ef:ff:f4:75:bd:4f:06:af:53:2d:d4:a8:ba:b1:b7:
6f:75:04:bb:9c:09:2d:0e:e3:b5:5c:b8:5c:e2:c1:64:e5:8f:
3e:c0:74:ee:11:a0:f0:b2:d9:34:17:ce:28:9a:0c:41:e4:8e:
21:14:af:92:d0:73:88:37:c2:73:25:bb:52:69:58:5b:bb:c9:
63:e7:1b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:08:30 2026 by rpki-client