
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e3138362e302f32342d3234203d3e20313338393930.roa
File: 3135312e3135382e3138362e302f32342d3234203d3e20313338393930.roa (raw, json)
Hash identifier: FbCxZ9NqNkRJEcyQ+Z9e28f1jgxdu0y84ManyawEjFs=
Subject key identifier: 96:A1:BB:67:E9:12:86:46:57:2C:CE:09:1F:F4:81:9E:B5:D8:8C:80
Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA
Certificate serial: 766641C234341706626D5FD578C01B1C02425E7A
Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e3138362e302f32342d3234203d3e20313338393930.roa
Signing time: Wed 04 Mar 2026 02:37:50 +0000
ROA not before: Wed 04 Mar 2026 02:32:50 +0000
ROA not after: Wed 03 Mar 2027 02:37:50 +0000
asID: 138990
IP address blocks: 151.158.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 07:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:66:41:c2:34:34:17:06:62:6d:5f:d5:78:c0:1b:1c:02:42:5e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA
Validity
Not Before: Mar 4 02:32:50 2026 GMT
Not After : Mar 3 02:37:50 2027 GMT
Subject: CN=96A1BB67E9128646572CCE091FF4819EB5D88C80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:82:7e:07:63:0b:8f:7b:a1:07:d7:d3:75:68:
98:90:2d:f0:99:e3:56:a2:91:1b:0c:83:47:f5:cf:
10:bd:42:3c:61:f0:64:b3:14:b1:84:b3:59:8b:57:
49:aa:97:9f:f2:d7:1c:1a:57:fb:69:d9:38:77:b9:
60:11:81:c3:64:10:40:b7:90:32:11:9f:5e:31:a3:
d4:48:ad:0b:f4:1b:93:f0:0a:e6:6e:ae:71:9b:82:
8f:16:14:6e:8e:85:89:8f:66:3b:0a:40:51:ae:66:
37:c8:1f:76:bd:e6:c1:21:26:31:94:a2:34:fb:b8:
a1:b7:5d:c1:53:1e:3a:42:68:74:fd:45:54:06:c0:
49:3e:bf:39:14:66:e0:38:bf:5a:28:87:53:3c:f0:
2f:02:f9:f8:20:e6:f3:94:82:71:4f:6c:48:d2:c6:
84:e1:5b:47:e4:89:a0:01:95:cd:fb:de:09:97:1b:
84:74:7e:fb:00:5e:5b:d4:94:1c:93:bc:4c:48:90:
d6:69:0f:29:e1:ad:c0:df:bc:2c:e8:d5:a6:be:d8:
51:48:f4:5f:59:f8:09:c9:37:5a:af:6c:45:29:82:
ec:7a:2c:8d:fc:4b:b7:f8:d7:db:1f:3a:c0:17:57:
62:1a:99:4b:b8:39:6a:6a:95:a1:b8:8b:a2:fc:f1:
0e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A1:BB:67:E9:12:86:46:57:2C:CE:09:1F:F4:81:9E:B5:D8:8C:80
X509v3 Authority Key Identifier:
keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e3138362e302f32342d3234203d3e20313338393930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.158.186.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:3f:7f:30:39:c4:40:dc:f0:9f:d2:c7:f2:15:9d:10:86:de:
a5:44:26:f5:27:c1:85:ab:61:92:d8:c8:d9:cb:54:1e:e1:a6:
aa:bb:10:98:e5:ea:df:35:91:9c:41:92:ba:2a:cf:90:a2:ce:
dd:c4:e2:6d:a5:82:a2:44:5e:d2:89:f5:0d:08:4e:70:4c:42:
01:5a:96:06:54:34:8e:8f:9d:47:1b:6a:72:d3:1b:f8:06:e4:
ea:0a:73:c3:7a:d2:ed:e9:3c:04:36:d9:3c:5d:54:c9:88:6c:
1d:7b:c8:4a:63:14:dc:5e:2e:2c:c0:da:ed:fd:ab:b9:71:4e:
d1:38:84:40:04:11:55:22:00:d0:6a:e3:35:17:3f:c7:11:f7:
02:bb:56:21:ef:19:75:ce:ca:2b:b6:41:82:cb:78:a0:27:02:
f4:46:44:50:23:63:25:28:bf:8b:fb:bf:6a:1b:a8:23:1e:e5:
f1:ef:ea:00:6e:43:5f:8c:93:20:c0:bf:fc:ef:05:f4:6e:db:
0c:1b:30:29:cd:96:62:ef:a8:09:d5:29:ec:39:ab:7b:53:8d:
68:9b:90:8c:3f:3a:89:bd:d5:72:98:05:ad:17:9b:94:ec:70:
ff:d5:b1:ca:09:a1:f2:d7:29:c1:09:3a:ef:46:75:da:ab:5d:
c7:8e:1f:e4
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUdmZBwjQ0FwZibV/VeMAbHAJCXnowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjM0NUYxMTVB
QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBMB4XDTI2MDMwNDAyMzI1MFoX
DTI3MDMwMzAyMzc1MFowMzExMC8GA1UEAxMoOTZBMUJCNjdFOTEyODY0NjU3MkND
RTA5MUZGNDgxOUVCNUQ4OEM4MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMiCfgdjC497oQfX03VomJAt8JnjVqKRGwyDR/XPEL1CPGHwZLMUsYSzWYtX
SaqXn/LXHBpX+2nZOHe5YBGBw2QQQLeQMhGfXjGj1EitC/Qbk/AK5m6ucZuCjxYU
bo6FiY9mOwpAUa5mN8gfdr3mwSEmMZSiNPu4obddwVMeOkJodP1FVAbAST6/ORRm
4Di/WiiHUzzwLwL5+CDm85SCcU9sSNLGhOFbR+SJoAGVzfveCZcbhHR++wBeW9SU
HJO8TEiQ1mkPKeGtwN+8LOjVpr7YUUj0X1n4Cck3Wq9sRSmC7HosjfxLt/jX2x86
wBdXYhqZS7g5amqVobiLovzxDisCAwEAAaOCAgMwggH/MB0GA1UdDgQWBBSWobtn
6RKGRlcszgkf9IGetdiMgDAfBgNVHSMEGDAWgBQSNF8RWsS2KlH1J0xUyB6GRjvQ
ujAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVBQzRCNjJB
NTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIy
QTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi9FalJmRVZyRXRpcFI5U2RNVk1n
ZWhrWTcwTG8uY2VyMIGGBggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuGanJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzAvMzEzNTMxMmUz
MTM1MzgyZTMxMzgzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzODM5Mzkz
MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAJeeujANBgkqhkiG9w0BAQsFAAOCAQEALz9/MDnEQNzwn9LH
8hWdEIbepUQm9SfBhathktjI2ctUHuGmqrsQmOXq3zWRnEGSuirPkKLO3cTibaWC
okRe0on1DQhOcExCAVqWBlQ0jo+dRxtqctMb+Abk6gpzw3rS7ek8BDbZPF1UyYhs
HXvISmMU3F4uLMDa7f2ruXFO0TiEQAQRVSIA0GrjNRc/xxH3ArtWIe8Zdc7KK7ZB
gst4oCcC9EZEUCNjJSi/i/u/ahuoIx7l8e/qAG5DX4yTIMC//O8F9G7bDBswKc2W
Yu+oCdUp7Dmre1ONaJuQjD86ib3VcpgFrReblOxw/9Wxygmh8tcpwQk670Z12qtd
x44f5A==
-----END CERTIFICATE-----
Generated at Sat Mar 7 16:08:26 2026 by rpki-client