
$ rpki-client -vvf repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/3135372e32302e3233362e302f32342d3234203d3e203538333639.roa
File: 3135372e32302e3233362e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier: teyVAO2MglD1iPRB9TRLPcEIH7kN7TTv1+fa8Z7kAeI=
Subject key identifier: F4:64:3A:77:44:2B:4F:DC:65:29:52:90:3C:D8:CD:68:0A:D1:15:61
Certificate issuer: /CN=92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D
Certificate serial: 1B133FAEFB8A2A8FEDF1BC585BC733E7C5C4BFD8
Authority key identifier: 92:E0:AE:79:CB:F4:6A:2D:C2:4C:DD:3A:7F:D4:8A:84:2B:CF:EE:8D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/3135372e32302e3233362e302f32342d3234203d3e203538333639.roa
Signing time: Tue 03 Feb 2026 09:02:33 +0000
ROA not before: Tue 03 Feb 2026 08:57:33 +0000
ROA not after: Tue 02 Feb 2027 09:02:33 +0000
asID: 58369
IP address blocks: 157.20.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.crl
rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Feb 2026 15:04:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:13:3f:ae:fb:8a:2a:8f:ed:f1:bc:58:5b:c7:33:e7:c5:c4:bf:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D
Validity
Not Before: Feb 3 08:57:33 2026 GMT
Not After : Feb 2 09:02:33 2027 GMT
Subject: CN=F4643A77442B4FDC652952903CD8CD680AD11561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a6:32:8d:63:72:79:39:80:67:d2:73:8f:63:
e6:31:c1:cd:d3:5a:17:42:de:8b:fd:33:11:7b:1c:
f3:a7:fd:13:3d:e4:a4:4f:61:41:e2:8b:99:14:0e:
6c:87:a1:fb:2a:fd:f5:78:98:65:4d:70:c2:ae:16:
fc:72:17:3f:61:fc:1f:d6:c1:b6:26:c0:fe:15:ed:
74:08:ec:62:94:2e:2d:4d:cd:e7:00:6a:ea:78:5f:
24:86:a8:3b:63:4c:8d:d5:cf:18:99:21:36:92:de:
dd:a9:ef:e0:b1:47:96:64:bf:0a:b2:f3:1a:d4:c0:
e8:8d:2b:8d:f5:b6:64:38:11:f3:77:f0:cb:0e:cf:
bd:7a:65:95:3b:b4:e2:7b:ad:a4:e9:d2:c1:35:cb:
29:21:fb:4a:c9:62:f6:a3:bb:cb:71:21:94:4a:f6:
f9:4f:32:77:ef:2d:3c:43:3e:de:1a:e9:ff:6d:8a:
73:b7:85:e5:4f:53:e2:87:0e:c3:54:59:51:d6:55:
6e:5a:18:dc:62:c4:52:3e:c3:93:b1:29:d5:e2:4f:
1f:1e:e8:20:00:75:14:8f:47:7a:8e:f0:b1:e5:00:
d3:d4:fc:3b:0d:e4:3a:06:94:b3:a4:7a:d4:f8:3f:
4a:ff:85:f8:6f:26:eb:ad:4a:37:e7:20:37:2c:37:
a4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:64:3A:77:44:2B:4F:DC:65:29:52:90:3C:D8:CD:68:0A:D1:15:61
X509v3 Authority Key Identifier:
keyid:92:E0:AE:79:CB:F4:6A:2D:C2:4C:DD:3A:7F:D4:8A:84:2B:CF:EE:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92E0AE79CBF46A2DC24CDD3A7FD48A842BCFEE8D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acaccf26-8354-49c8-998a-0a44a64eb909/0/3135372e32302e3233362e302f32342d3234203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.20.236.0/24
Signature Algorithm: sha256WithRSAEncryption
78:fa:20:dc:c4:30:51:56:b3:27:ab:c8:04:6d:ab:12:e7:47:
13:ab:c7:d1:eb:4d:20:16:8d:e4:7b:ea:aa:3d:7a:2b:35:93:
6c:8f:54:5c:d4:4c:ec:c8:47:5e:57:ee:3c:2b:e3:91:83:f2:
af:ca:e4:cc:a3:67:a4:1a:ef:47:91:a4:fb:1c:c4:1b:40:ad:
7f:6a:49:56:5b:08:25:cd:c6:8d:2b:4f:94:4b:5e:ce:bb:82:
90:ac:fb:f8:aa:5e:e6:da:9f:3b:ef:4c:97:8c:81:17:dd:93:
52:3f:36:aa:1d:d5:b1:d9:b9:ec:43:95:11:85:33:2f:6d:db:
6e:d3:b4:bb:13:fb:2a:29:24:15:b6:3a:24:6e:e1:8d:ce:cc:
1a:cf:60:12:c2:4b:ce:01:46:d7:1a:bb:b0:d5:59:f5:7d:7b:
29:f2:e2:0f:45:07:3e:6e:be:78:75:0c:e5:c5:07:38:a9:5c:
d5:85:4f:48:b1:74:82:3d:65:b1:69:a9:f4:7d:44:3a:8d:0e:
42:42:52:e8:f8:af:f9:35:31:1d:4d:54:23:9a:91:d8:97:1b:
2c:09:d5:ff:46:c0:d7:c2:06:ed:1f:56:27:e0:c3:93:51:e5:
56:e1:a4:c1:63:81:b3:f6:0a:f9:30:55:1a:c6:22:56:59:4f:
c5:c1:ac:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 02:01:18 2026 by rpki-client