
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/3/3135312e3135382e3138372e302f32342d3234203d3e20313432353434.roa
File: 3135312e3135382e3138372e302f32342d3234203d3e20313432353434.roa (raw, json)
Hash identifier: hM3eAzptPprh5ZTzzCeV9frMtEbvN9yPdu2L330+XpY=
Subject key identifier: 66:94:46:5B:81:19:01:CD:6E:8E:92:F8:5D:D8:D6:D5:0D:4B:F0:12
Certificate issuer: /CN=A91862140000/serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53
Certificate serial: 53FC2360770C18509B4392CF0B70340B91DF2733
Authority key identifier: F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/3135312e3135382e3138372e302f32342d3234203d3e20313432353434.roa
Signing time: Sat 02 May 2026 09:23:36 +0000
ROA not before: Sat 02 May 2026 09:18:36 +0000
ROA not after: Sat 01 May 2027 09:23:36 +0000
asID: 142544
IP address blocks: 151.158.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 14:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:fc:23:60:77:0c:18:50:9b:43:92:cf:0b:70:34:0b:91:df:27:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53
Validity
Not Before: May 2 09:18:36 2026 GMT
Not After : May 1 09:23:36 2027 GMT
Subject: CN=6694465B811901CD6E8E92F85DD8D6D50D4BF012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:72:ac:22:11:33:4b:a8:c0:64:98:a5:42:a4:
5a:dc:5c:b8:34:f0:a2:8a:d1:d6:d9:e6:b5:5d:50:
8e:df:33:88:82:97:40:6b:cc:d0:3d:b3:fe:ec:5c:
7e:85:98:b2:64:8b:bf:1e:b2:7c:8b:36:20:28:c0:
74:93:8f:3f:a6:b2:36:56:d3:e6:ab:93:40:ef:41:
a8:72:1e:61:14:5a:6a:67:03:16:03:a7:0e:47:e0:
e5:ba:aa:3d:ae:a0:9e:85:b4:46:bc:7c:dd:c5:55:
da:d4:ce:99:9a:14:a2:46:9e:2e:88:d7:e0:93:c7:
83:e6:68:64:c5:58:25:00:00:90:a6:82:57:a0:3b:
dd:34:6a:7f:ad:7e:81:75:c4:1f:eb:be:3f:a5:a4:
93:5d:f4:b7:8c:17:2b:c7:0e:f3:9c:db:6f:f4:36:
31:8e:3a:87:79:c8:cd:0b:66:fb:0b:9d:a6:87:04:
7d:9b:7e:e8:be:c0:58:15:4e:5f:e3:2d:0d:e6:c0:
05:9e:22:98:bf:8b:a3:ad:a3:a1:71:b3:92:50:c6:
88:bf:c3:54:0d:43:a6:9b:51:f5:dc:e2:1a:79:fd:
b5:7c:a5:68:e1:22:2a:c0:bd:84:86:ba:0e:3b:8a:
5e:55:45:bb:53:13:e3:4f:a5:a1:7e:42:83:89:26:
a1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:94:46:5B:81:19:01:CD:6E:8E:92:F8:5D:D8:D6:D5:0D:4B:F0:12
X509v3 Authority Key Identifier:
keyid:F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/3135312e3135382e3138372e302f32342d3234203d3e20313432353434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.158.187.0/24
Signature Algorithm: sha256WithRSAEncryption
65:91:9c:1e:18:59:1b:e6:a9:55:ef:69:3f:ef:1c:a6:e1:73:
c1:c0:58:44:4b:30:f7:cf:78:87:de:27:46:65:b5:27:f3:6d:
ac:eb:ba:23:f4:c1:1f:90:c2:eb:ae:85:72:8c:84:9a:43:2d:
69:5b:d0:a7:b9:8f:f6:ef:04:81:1c:a6:bb:10:a0:ff:3d:e1:
13:47:e3:a0:8e:0e:52:fe:c9:93:eb:21:f8:b5:10:9c:6b:b4:
1f:bc:7b:72:75:83:0e:b4:d4:c2:f5:84:a3:1d:b0:74:70:3e:
75:11:a7:41:1d:45:48:1d:f7:e8:8f:33:ed:df:61:94:67:51:
a2:48:38:c2:f7:a1:59:64:a1:5c:ae:70:83:aa:d2:f0:98:65:
2b:1f:a0:2f:42:26:cc:fb:b3:d7:cb:9b:18:33:5b:b7:13:d2:
95:c9:c3:f6:4f:f5:bd:42:b7:be:6e:1f:39:96:a5:5a:3a:14:
ca:1a:e6:4e:c9:9f:5e:39:a2:55:89:ca:43:45:1c:f2:97:3d:
ed:c3:de:ec:ea:bb:0d:56:03:1c:70:79:fa:b4:57:0e:35:97:
bd:54:ca:b9:cf:b0:3b:61:1c:8a:e4:f3:52:a9:de:31:82:01:
69:e4:fb:30:28:58:76:4d:05:78:3c:c6:e7:99:4a:c8:68:e3:
e1:89:00:76
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUU/wjYHcMGFCbQ5LPC3A0C5HfJzMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhGOTI3REYzODQ4
QUJBQkNBODhGRjNEOTVBMUU1QjE2NzU0QzYzQTUzMB4XDTI2MDUwMjA5MTgzNloX
DTI3MDUwMTA5MjMzNlowMzExMC8GA1UEAxMoNjY5NDQ2NUI4MTE5MDFDRDZFOEU5
MkY4NUREOEQ2RDUwRDRCRjAxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJlyrCIRM0uowGSYpUKkWtxcuDTwoorR1tnmtV1Qjt8ziIKXQGvM0D2z/uxc
foWYsmSLvx6yfIs2ICjAdJOPP6ayNlbT5quTQO9BqHIeYRRaamcDFgOnDkfg5bqq
Pa6gnoW0Rrx83cVV2tTOmZoUokaeLojX4JPHg+ZoZMVYJQAAkKaCV6A73TRqf61+
gXXEH+u+P6Wkk130t4wXK8cO85zbb/Q2MY46h3nIzQtm+wudpocEfZt+6L7AWBVO
X+MtDebABZ4imL+Lo62joXGzklDGiL/DVA1DpptR9dziGnn9tXylaOEiKsC9hIa6
DjuKXlVFu1MT40+loX5Cg4kmofkCAwEAAaOCAf8wggH7MB0GA1UdDgQWBBRmlEZb
gRkBzW6Okvhd2NbVDUvwEjAfBgNVHSMEGDAWgBT5J984SKuryoj/PZWh5bFnVMY6
UzAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp
LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzMvRjkyN0RGMzg0OEFCQUJDQTg4
RkYzRDk1QTFFNUIxNjc1NEM2M0E1My5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1
RjQxRDY2MTFFMkEzRjI3RjdDNzJGRDFGRjIvLVNmZk9FaXJxOHFJX3oyVm9lV3ha
MVRHT2xNLmNlcjCBhAYIKwYBBQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMy8zMTM1MzEyZTMxMzUz
ODJlMzEzODM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNDMyMzUzNDM0LnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAl567MA0GCSqGSIb3DQEBCwUAA4IBAQBlkZweGFkb5qlV72k/7xym
4XPBwFhESzD3z3iH3idGZbUn822s67oj9MEfkMLrroVyjISaQy1pW9CnuY/27wSB
HKa7EKD/PeETR+Ogjg5S/smT6yH4tRCca7QfvHtydYMOtNTC9YSjHbB0cD51EadB
HUVIHffojzPt32GUZ1GiSDjC96FZZKFcrnCDqtLwmGUrH6AvQibM+7PXy5sYM1u3
E9KVycP2T/W9Qre+bh85lqVaOhTKGuZOyZ9eOaJVicpDRRzylz3tw97s6rsNVgMc
cHn6tFcONZe9VMq5z7A7YRyK5PNSqd4xggFp5PswKFh2TQV4PMbnmUrIaOPhiQB2
-----END CERTIFICATE-----
Generated at Tue May 5 14:56:57 2026 by rpki-client