
$ rpki-client -vvf repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139352e302f32342d3234203d3e203538333831.roa
File: 3136332e35332e3139352e302f32342d3234203d3e203538333831.roa (raw, json)
Hash identifier: eUwo5rKZ1JO+BNgUPFO8WjwWbLczpxzUbvuAL5kF0Zk=
Subject key identifier: 38:85:4F:39:CE:6D:C6:27:9A:01:0B:B1:1B:B9:F3:5C:29:78:6B:D9
Certificate issuer: /CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Certificate serial: 26CCE060B33E6C4E3A79B11709FE00CBA79600FC
Authority key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139352e302f32342d3234203d3e203538333831.roa
Signing time: Wed 04 Mar 2026 17:00:03 +0000
ROA not before: Wed 04 Mar 2026 16:55:03 +0000
ROA not after: Wed 03 Mar 2027 17:00:03 +0000
asID: 58381
IP address blocks: 163.53.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl
rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 03:25:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:cc:e0:60:b3:3e:6c:4e:3a:79:b1:17:09:fe:00:cb:a7:96:00:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Validity
Not Before: Mar 4 16:55:03 2026 GMT
Not After : Mar 3 17:00:03 2027 GMT
Subject: CN=38854F39CE6DC6279A010BB11BB9F35C29786BD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ba:f4:26:0b:e0:e6:ba:9b:11:4f:72:e5:d8:
9f:04:fe:d2:dd:c4:00:66:fe:bb:0e:08:36:24:53:
f6:d8:aa:cb:5c:14:96:24:db:a7:3d:0c:e5:c2:34:
d2:17:a9:52:5d:eb:06:16:cf:48:91:37:0e:99:71:
fa:91:37:49:b2:c1:27:40:87:6b:75:0d:c9:b6:18:
36:40:1a:1e:6f:10:b7:89:24:12:1f:13:2f:22:55:
8a:e1:bc:df:91:3d:05:e9:8f:ab:4a:11:65:7a:48:
08:0b:4c:23:22:9f:d0:ed:e3:25:9d:cd:30:5e:bb:
e2:7c:66:cc:8b:8a:9f:4b:4b:3b:08:39:77:7d:2b:
2a:8d:89:3e:cc:86:b5:c1:86:6b:af:94:46:06:31:
22:71:1e:8b:4f:b0:69:f5:cf:03:e1:5f:76:e1:93:
8b:aa:4f:80:83:82:45:99:91:1e:67:2d:55:07:9e:
9c:c8:36:e8:a3:1a:d6:61:fc:31:5a:dc:85:8f:3e:
53:c3:79:eb:a8:9b:02:24:9a:0f:a8:5d:88:34:09:
38:65:b0:c0:25:10:fc:bb:17:b0:73:3d:c2:5e:4a:
f5:9d:6c:b4:e6:05:88:b5:33:e8:12:b9:6a:e9:5d:
77:3c:7d:c2:49:e0:7b:52:07:55:03:c6:51:cb:32:
8d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:85:4F:39:CE:6D:C6:27:9A:01:0B:B1:1B:B9:F3:5C:29:78:6B:D9
X509v3 Authority Key Identifier:
keyid:E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139352e302f32342d3234203d3e203538333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.53.195.0/24
Signature Algorithm: sha256WithRSAEncryption
03:5d:16:b6:67:bf:89:85:b2:9f:c9:88:3d:f7:06:ec:57:a7:
18:b7:49:34:27:25:e5:fc:34:3c:07:17:81:f2:5c:bc:e4:57:
2f:84:3e:74:e9:51:43:33:32:d5:c1:01:ac:e6:3e:24:04:1f:
fb:08:d5:25:3a:a2:fc:63:97:91:dc:88:8f:84:31:30:2b:98:
37:5c:78:67:94:88:61:5a:fc:e2:64:15:34:94:b1:2f:4d:13:
53:66:c5:8b:7a:24:02:28:00:15:79:ed:2c:a9:71:05:a0:fb:
4b:74:fa:1f:cf:7d:ff:84:3e:a6:5d:d0:a4:ce:19:53:b0:2a:
d0:16:8f:1a:5c:89:8e:71:11:b6:b4:aa:6f:32:85:55:8b:b0:
24:93:60:08:9d:71:6c:10:cb:eb:94:38:18:5b:e6:e4:a4:60:
47:c5:a6:bf:70:01:4a:06:39:02:c0:6a:80:5b:3c:0d:af:7b:
e1:5e:89:19:4d:11:38:5c:28:7c:e3:df:82:17:ab:cd:05:97:
b2:fb:84:f0:5c:c1:93:68:4c:f3:89:2c:c8:ad:e1:4f:70:d6:
ca:63:fa:40:55:b7:40:6d:35:9c:53:95:57:a2:9b:1d:33:2a:
2c:eb:2a:76:48:3c:a7:ca:c7:53:b9:0a:3e:15:c4:69:bf:dd:
02:eb:46:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 10:41:19 2026 by rpki-client