
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e33362e302f32332d3234203d3e20313432323330.roa
File: 3135312e3135382e33362e302f32332d3234203d3e20313432323330.roa (raw, json)
Hash identifier: JlCq+CeQI0IRGssW+fbcqNZoEnvUp/ZiGtyW7tWM+TY=
Subject key identifier: 6E:6B:D0:68:BF:75:49:A3:E2:C3:27:6C:D2:25:5E:64:D3:14:07:01
Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA
Certificate serial: 3323D3FF891662D51A658B1BFBCE7CA8FEE2DB8C
Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e33362e302f32332d3234203d3e20313432323330.roa
Signing time: Tue 03 Mar 2026 04:13:40 +0000
ROA not before: Tue 03 Mar 2026 04:08:40 +0000
ROA not after: Tue 02 Mar 2027 04:13:40 +0000
asID: 142230
IP address blocks: 151.158.36.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 07:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:23:d3:ff:89:16:62:d5:1a:65:8b:1b:fb:ce:7c:a8:fe:e2:db:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA
Validity
Not Before: Mar 3 04:08:40 2026 GMT
Not After : Mar 2 04:13:40 2027 GMT
Subject: CN=6E6BD068BF7549A3E2C3276CD2255E64D3140701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ae:d4:eb:4e:73:c9:f6:d0:64:00:a3:34:28:
0b:60:1e:17:5a:42:79:84:c8:2e:8f:82:4a:d3:de:
89:40:d5:80:d9:6e:3b:4f:d6:d6:49:95:fd:e4:c6:
c5:6f:b4:57:b3:35:f6:f1:cf:4c:eb:1a:4c:7e:e3:
3b:58:60:f0:50:2a:63:aa:65:c9:f6:be:16:4a:f4:
46:c9:6e:8d:df:1e:44:fb:7a:29:d5:45:15:ed:af:
6c:40:31:21:5c:2f:13:09:30:ca:ec:7c:bb:78:a1:
0b:81:0e:cf:75:4a:47:f4:15:f2:92:48:39:34:97:
21:75:f5:6c:74:97:cb:49:1d:7b:62:c6:45:97:67:
a3:20:47:11:01:8e:6c:88:47:81:32:86:eb:b5:cc:
89:97:b4:b3:e1:e0:60:5e:e2:b2:14:af:a5:4a:0f:
a3:bc:27:4f:b5:35:5c:39:46:84:63:db:8d:3d:d3:
4e:78:a7:21:c0:31:fa:08:e6:94:23:ca:6f:06:df:
92:ca:1d:7b:a5:74:e6:57:0d:fa:67:0d:57:bf:7b:
b5:44:c8:7e:2d:61:49:40:c9:62:d7:68:77:21:95:
c1:01:96:82:4f:06:d4:d1:3d:5a:eb:36:8c:1c:e1:
d1:62:ba:d9:bb:e1:d7:9c:6f:ff:9a:2b:db:8a:0d:
fd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:6B:D0:68:BF:75:49:A3:E2:C3:27:6C:D2:25:5E:64:D3:14:07:01
X509v3 Authority Key Identifier:
keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e33362e302f32332d3234203d3e20313432323330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.158.36.0/23
Signature Algorithm: sha256WithRSAEncryption
95:d3:a8:18:36:1b:e7:b8:5e:a1:00:51:bc:d3:cb:af:1a:74:
5a:c4:bc:b1:2c:cd:ea:90:89:9f:8a:6a:67:3f:96:53:84:60:
3f:c8:b4:5c:d6:a0:9e:ea:1d:d3:38:c3:83:88:41:93:f6:09:
af:d1:48:3f:bd:68:ad:b7:ad:e7:a5:90:0a:d3:12:63:80:4e:
c7:cb:24:e8:99:f0:91:c5:a9:15:a7:cd:01:85:7e:bc:b0:f6:
8a:c7:06:5a:cb:88:dc:2a:46:0d:05:af:3d:7b:8d:66:73:57:
86:09:73:78:65:e2:4f:2c:af:ad:59:9c:13:3e:7b:8d:a9:ab:
1f:34:3a:f7:9f:24:b0:d2:eb:14:73:e8:6d:44:d6:95:81:1b:
35:70:ba:6b:59:23:3e:81:37:85:bc:e7:e4:b4:32:28:ab:27:
66:3d:53:b1:00:88:94:09:3c:4b:c7:91:97:32:e9:75:99:39:
1a:72:2d:3c:bb:ef:30:92:e8:27:c6:3b:e5:a2:2b:70:88:56:
d5:e9:ad:1b:ad:7c:52:0c:c1:16:38:9e:ac:a6:9e:f6:7f:da:
95:32:f1:06:fd:4b:8a:f7:78:fd:28:4b:36:6b:8f:be:58:86:
ed:2b:7b:ed:fd:49:e5:27:19:40:c9:ee:72:d9:0e:fa:01:8c:
32:be:c2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 16:08:20 2026 by rpki-client