
$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234342e302f32332d3233203d3e203338373738.roa
File: 3230322e39332e3234342e302f32332d3233203d3e203338373738.roa (raw, json)
Hash identifier: 5smgeJbhaO6g1/D8vxJXxrAUN8TIT7sSh2lLWbL38WY=
Subject key identifier: EB:16:CE:C5:09:5B:90:A2:5C:2F:8E:27:52:77:62:12:BC:CA:C6:07
Certificate issuer: /CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Certificate serial: 592A468029B2D03428DEC3ACEE02E762EBFE0E5A
Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234342e302f32332d3233203d3e203338373738.roa
Signing time: Fri 06 Mar 2026 04:00:01 +0000
ROA not before: Fri 06 Mar 2026 03:55:01 +0000
ROA not after: Fri 05 Mar 2027 04:00:01 +0000
asID: 38778
IP address blocks: 202.93.244.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Mar 2026 17:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:2a:46:80:29:b2:d0:34:28:de:c3:ac:ee:02:e7:62:eb:fe:0e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Validity
Not Before: Mar 6 03:55:01 2026 GMT
Not After : Mar 5 04:00:01 2027 GMT
Subject: CN=EB16CEC5095B90A25C2F8E2752776212BCCAC607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1c:de:0f:a9:18:0a:0e:3f:f6:1e:7f:ef:10:
c0:db:8d:1f:1a:09:64:5e:2f:62:c5:e7:1a:cb:b5:
05:33:b4:b4:d2:14:ce:6c:d4:69:d0:51:fd:58:d0:
5c:fe:12:ba:6f:37:a1:5e:2b:96:90:2d:52:ef:bf:
02:e6:e4:ab:2c:41:f6:0e:46:3d:2a:8d:d0:9e:f9:
8e:a7:3b:19:4d:44:58:e9:11:04:75:eb:6c:fe:90:
1e:e6:4a:37:a2:a9:1c:b0:c5:f3:60:0e:00:89:8a:
9f:10:ee:1b:ae:a9:22:0c:68:f9:8c:45:8a:8c:69:
72:0c:a3:74:6a:69:23:0b:81:52:e2:d2:03:a0:10:
a1:69:3a:7a:48:0e:f2:32:fc:4e:28:c2:73:ef:22:
4b:76:eb:9a:cf:64:0f:cf:a3:82:84:9b:13:e4:cb:
52:c7:3c:10:f1:91:2a:1d:ef:c7:55:78:43:6b:9a:
39:06:bc:b0:a4:e4:e9:d2:7a:e9:80:f0:65:08:ba:
3a:30:b4:3f:37:48:a8:73:3d:4b:7b:4c:71:74:ca:
a1:4d:e4:ef:bf:b2:80:04:56:5f:f0:5a:b7:1e:af:
54:c8:80:b7:7c:5c:f5:1c:fd:5b:7b:57:ea:46:8a:
79:5c:35:82:87:19:13:66:b5:4f:d0:53:e6:e3:06:
d0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:16:CE:C5:09:5B:90:A2:5C:2F:8E:27:52:77:62:12:BC:CA:C6:07
X509v3 Authority Key Identifier:
keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234342e302f32332d3233203d3e203338373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.93.244.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:02:fb:ef:ba:bc:a4:98:82:8b:0b:f8:4e:eb:21:50:eb:87:
d3:0b:13:1f:7f:a6:da:8f:11:8e:8f:de:51:0e:70:b5:49:36:
be:03:6b:58:c7:18:19:42:62:29:36:33:c8:5a:3c:73:47:fb:
28:96:bf:fd:42:b0:2d:b4:35:9c:40:1c:d4:a4:b4:c5:5c:e0:
aa:ad:f9:36:bc:14:e3:c0:37:91:75:52:c3:8d:0c:58:29:e8:
4a:9b:8a:6d:eb:80:16:4b:de:c0:c9:a6:97:ac:a8:67:6a:bc:
e8:54:3d:9e:1c:de:0a:a7:0a:bd:4f:d9:1e:fb:91:e1:c6:da:
46:02:0a:2c:aa:e0:4b:e1:c3:8c:ad:9b:2f:7d:97:0c:80:af:
4a:ea:33:43:12:75:45:c2:73:05:87:d2:b6:43:83:df:5e:d2:
cc:6b:49:36:7a:b8:f4:d3:dc:be:84:ef:cd:85:b0:ff:1c:22:
ee:5e:ca:e6:1b:e8:03:0b:3b:5e:de:f1:30:6d:88:73:55:f6:
59:f1:52:56:dc:20:d1:0e:b2:e1:cc:29:97:b7:98:67:8d:88:
cf:99:1e:6d:67:e5:be:f9:a7:21:4a:a8:10:8a:92:7f:6f:5e:
6b:66:2b:ca:dc:29:73:c8:ac:e0:ff:06:e8:ab:b4:39:1f:ac:
1b:44:85:4c
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUWSpGgCmy0DQo3sOs7gLnYuv+DlowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZEN0Y3
NzgwOUQwMjAeFw0yNjAzMDYwMzU1MDFaFw0yNzAzMDUwNDAwMDFaMDMxMTAvBgNV
BAMTKEVCMTZDRUM1MDk1QjkwQTI1QzJGOEUyNzUyNzc2MjEyQkNDQUM2MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+HN4PqRgKDj/2Hn/vEMDbjR8a
CWReL2LF5xrLtQUztLTSFM5s1GnQUf1Y0Fz+ErpvN6FeK5aQLVLvvwLm5KssQfYO
Rj0qjdCe+Y6nOxlNRFjpEQR162z+kB7mSjeiqRywxfNgDgCJip8Q7huuqSIMaPmM
RYqMaXIMo3RqaSMLgVLi0gOgEKFpOnpIDvIy/E4ownPvIkt265rPZA/Po4KEmxPk
y1LHPBDxkSod78dVeENrmjkGvLCk5OnSeumA8GUIujowtD83SKhzPUt7THF0yqFN
5O+/soAEVl/wWrcer1TIgLd8XPUc/Vt7V+pGinlcNYKHGRNmtU/QU+bjBtB5AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU6xbOxQlbkKJcL44nUndiErzKxgcwHwYDVR0j
BBgwFoAU843/CU4WhDhU6sFAPGn9f3eAnQIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YWQ2ZGNjOS0xNzAwLTQ4ZWItOTA5OS02Njc4ZjkxYmY0NGUvMC9GMzhERkYwOTRF
MTY4NDM4NTRFQUMxNDAzQzY5RkQ3Rjc3ODA5RDAyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjM4REZGMDk0RTE2ODQzODU0RUFDMTQwM0M2OUZEN0Y3Nzgw
OUQwMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhZDZkY2M5LTE3MDAtNDhlYi05
MDk5LTY2NzhmOTFiZjQ0ZS8wLzMyMzAzMjJlMzkzMzJlMzIzNDM0MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzMzODM3MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcpd9DANBgkqhkiG
9w0BAQsFAAOCAQEAjwL777q8pJiCiwv4TushUOuH0wsTH3+m2o8Rjo/eUQ5wtUk2
vgNrWMcYGUJiKTYzyFo8c0f7KJa//UKwLbQ1nEAc1KS0xVzgqq35NrwU48A3kXVS
w40MWCnoSpuKbeuAFkvewMmml6yoZ2q86FQ9nhzeCqcKvU/ZHvuR4cbaRgIKLKrg
S+HDjK2bL32XDICvSuozQxJ1RcJzBYfStkOD317SzGtJNnq49NPcvoTvzYWw/xwi
7l7K5hvoAws7Xt7xMG2Ic1X2WfFSVtwg0Q6y4cwpl7eYZ42Iz5kebWflvvmnIUqo
EIqSf29ea2Yrytwpc8is4P8G6Ku0OR+sG0SFTA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 04:56:40 2026 by rpki-client