
$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234342e302f32322d3234203d3e203338373738.roa
File: 3230322e39332e3234342e302f32322d3234203d3e203338373738.roa (raw, json)
Hash identifier: wK8oxn2N67S1lQBDAIk3IqEYA0FuTaT4t8uoS7Qxu2Y=
Subject key identifier: 21:BA:31:DB:5E:74:81:05:20:9E:CB:33:1D:62:FD:5A:78:17:73:0B
Certificate issuer: /CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Certificate serial: 37DB48787AD053DF7CE741B3B0846165A3154742
Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234342e302f32322d3234203d3e203338373738.roa
Signing time: Fri 06 Mar 2026 03:01:15 +0000
ROA not before: Fri 06 Mar 2026 02:56:15 +0000
ROA not after: Fri 05 Mar 2027 03:01:15 +0000
asID: 38778
IP address blocks: 202.93.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Mar 2026 17:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:db:48:78:7a:d0:53:df:7c:e7:41:b3:b0:84:61:65:a3:15:47:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Validity
Not Before: Mar 6 02:56:15 2026 GMT
Not After : Mar 5 03:01:15 2027 GMT
Subject: CN=21BA31DB5E748105209ECB331D62FD5A7817730B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:18:8c:d8:62:d5:d2:49:de:3f:08:cf:a9:ce:
8f:5f:30:1a:6a:d8:11:20:9a:cd:54:69:d9:dc:75:
fc:0d:1a:a0:f7:e5:d6:d2:a2:33:bc:c4:c8:40:32:
11:5b:e9:ac:cd:57:c5:3a:e4:eb:70:84:b5:6c:2a:
3b:5a:73:40:a3:33:82:62:a2:e1:fa:f4:bc:05:6b:
1c:fe:9a:d4:4a:73:18:9a:47:6d:f0:bc:5f:22:e5:
f0:02:b8:54:bb:aa:2e:a5:e8:50:8f:c3:cc:2e:fb:
17:e7:87:7b:e5:de:fe:61:43:a7:c3:36:af:bd:c1:
e6:d0:c6:05:42:42:a4:f5:63:9e:97:9c:3b:70:86:
75:68:86:2d:00:4f:be:67:80:43:7a:a2:4c:54:ec:
e5:73:77:5c:d8:a5:a9:49:ed:34:75:e9:ee:df:d9:
cc:e9:7c:1b:10:d8:22:9a:24:a3:d9:f5:60:d8:54:
f1:9d:ae:7b:20:14:d8:61:3c:4b:40:8c:ac:f6:eb:
42:ad:31:16:d2:ab:20:31:9a:8a:ce:81:45:24:f6:
02:40:bd:b1:68:e4:d9:5c:9f:7b:c0:ff:41:72:3c:
26:33:3d:3f:90:85:37:f5:07:49:60:30:23:c2:6d:
a6:d0:ec:e6:37:0c:e5:66:49:e6:ef:e1:31:dc:7d:
17:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BA:31:DB:5E:74:81:05:20:9E:CB:33:1D:62:FD:5A:78:17:73:0B
X509v3 Authority Key Identifier:
keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234342e302f32322d3234203d3e203338373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.93.244.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:e8:46:7d:b2:48:6d:1a:6d:65:1f:1b:20:54:ba:57:37:5d:
36:0d:09:e2:8d:ba:fd:ac:1f:5e:6b:af:36:b0:e7:99:a4:e7:
38:a3:cd:49:55:bc:4b:2e:b2:ae:e5:a6:d2:ba:4c:dd:8e:32:
69:ba:3a:f8:be:62:97:db:81:79:55:19:51:b1:fe:70:77:0f:
3f:01:dd:c7:59:77:ef:6d:11:4d:4b:21:3d:30:82:5b:d1:20:
d1:5a:cb:09:b0:9b:68:74:0a:22:4e:e7:cd:fa:41:7d:04:33:
98:0c:c2:66:9b:e1:c7:af:7a:da:ed:84:2e:90:b7:2c:78:9e:
a3:59:8b:29:a2:92:a0:0b:d2:fc:bd:44:41:00:45:83:dc:d0:
a8:bf:7e:e8:e8:d2:52:43:02:72:c9:4a:2f:2e:89:83:63:40:
93:a8:d2:9b:0b:d2:14:4a:f3:13:1b:97:e4:7c:b2:fa:20:ef:
99:6f:81:42:73:e2:76:62:b4:d8:7f:e1:34:88:cb:db:c0:65:
e5:b2:73:f1:9c:42:1d:63:7d:f3:75:8c:53:23:a7:75:90:83:
97:e5:a9:f0:d7:4c:16:e3:63:a2:99:22:04:87:24:ec:0f:f6:
d7:7c:b7:08:c4:22:d3:60:8c:89:00:78:c5:a8:a1:9a:ad:be:
c0:b6:6a:d5
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUN9tIeHrQU99850GzsIRhZaMVR0IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZEN0Y3
NzgwOUQwMjAeFw0yNjAzMDYwMjU2MTVaFw0yNzAzMDUwMzAxMTVaMDMxMTAvBgNV
BAMTKDIxQkEzMURCNUU3NDgxMDUyMDlFQ0IzMzFENjJGRDVBNzgxNzczMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFGIzYYtXSSd4/CM+pzo9fMBpq
2BEgms1UadncdfwNGqD35dbSojO8xMhAMhFb6azNV8U65OtwhLVsKjtac0CjM4Ji
ouH69LwFaxz+mtRKcxiaR23wvF8i5fACuFS7qi6l6FCPw8wu+xfnh3vl3v5hQ6fD
Nq+9webQxgVCQqT1Y56XnDtwhnVohi0AT75ngEN6okxU7OVzd1zYpalJ7TR16e7f
2czpfBsQ2CKaJKPZ9WDYVPGdrnsgFNhhPEtAjKz260KtMRbSqyAxmorOgUUk9gJA
vbFo5Nlcn3vA/0FyPCYzPT+QhTf1B0lgMCPCbabQ7OY3DOVmSebv4THcfRc3AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUIbox2150gQUgnsszHWL9WngXcwswHwYDVR0j
BBgwFoAU843/CU4WhDhU6sFAPGn9f3eAnQIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YWQ2ZGNjOS0xNzAwLTQ4ZWItOTA5OS02Njc4ZjkxYmY0NGUvMC9GMzhERkYwOTRF
MTY4NDM4NTRFQUMxNDAzQzY5RkQ3Rjc3ODA5RDAyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZEN0Y3Nzgw
OUQwMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhZDZkY2M5LTE3MDAtNDhlYi05
MDk5LTY2NzhmOTFiZjQ0ZS8wLzMyMzAzMjJlMzkzMzJlMzIzNDM0MmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzMzODM3MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAspd9DANBgkqhkiG
9w0BAQsFAAOCAQEAT+hGfbJIbRptZR8bIFS6VzddNg0J4o26/awfXmuvNrDnmaTn
OKPNSVW8Sy6yruWm0rpM3Y4yabo6+L5il9uBeVUZUbH+cHcPPwHdx1l3720RTUsh
PTCCW9Eg0VrLCbCbaHQKIk7nzfpBfQQzmAzCZpvhx6962u2ELpC3LHieo1mLKaKS
oAvS/L1EQQBFg9zQqL9+6OjSUkMCcslKLy6Jg2NAk6jSmwvSFErzExuX5Hyy+iDv
mW+BQnPidmK02H/hNIjL28Bl5bJz8ZxCHWN983WMUyOndZCDl+Wp8NdMFuNjopki
BIck7A/213y3CMQi02CMiQB4xaihmq2+wLZq1Q==
-----END CERTIFICATE-----
Generated at Fri Mar 13 04:58:03 2026 by rpki-client