
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/3/3135312e3135382e3235302e302f32342d3234203d3e20313432353636.roa
File: 3135312e3135382e3235302e302f32342d3234203d3e20313432353636.roa (raw, json)
Hash identifier: 2brR86KIIpUz1VkjLFOTporSbNlk9gOtAic+ZRIRT0Y=
Subject key identifier: 79:A1:6D:3A:9B:81:00:D8:06:08:F0:82:78:B1:B6:D2:49:D8:E3:5D
Certificate issuer: /CN=A91862140000/serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53
Certificate serial: 080738B0B794B071B82485738B3F52139098C8CE
Authority key identifier: F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/3135312e3135382e3235302e302f32342d3234203d3e20313432353636.roa
Signing time: Sat 02 May 2026 09:23:35 +0000
ROA not before: Sat 02 May 2026 09:18:35 +0000
ROA not after: Sat 01 May 2027 09:23:35 +0000
asID: 142566
IP address blocks: 151.158.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 14:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:07:38:b0:b7:94:b0:71:b8:24:85:73:8b:3f:52:13:90:98:c8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53
Validity
Not Before: May 2 09:18:35 2026 GMT
Not After : May 1 09:23:35 2027 GMT
Subject: CN=79A16D3A9B8100D80608F08278B1B6D249D8E35D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:8d:19:7a:e7:95:c0:05:5c:7c:81:31:c1:
97:dd:58:5a:f0:99:b2:5c:5e:07:b3:76:55:71:ee:
b4:b9:8d:09:70:c5:36:0d:8a:0e:79:66:00:75:40:
ed:cf:bd:86:87:44:fc:d5:8c:41:db:b4:42:d7:a7:
4f:a8:3c:15:8a:2b:b3:ac:a1:8d:ff:9c:8e:ff:a8:
46:81:e2:06:c7:e5:0f:d9:49:3d:3f:46:e3:ab:7a:
37:59:28:87:1b:27:1d:a1:01:ec:e4:fa:91:59:80:
fc:24:d3:1a:3d:6d:b6:32:5e:6d:3e:26:42:7a:3c:
a2:c5:38:39:b4:a9:26:6e:3d:88:21:dd:14:4f:19:
76:df:ea:50:14:bb:cf:60:7a:a3:ac:ab:b9:9a:a5:
46:f7:bd:9a:24:1b:e1:d1:70:ce:ce:34:a9:cb:e0:
f4:70:50:16:33:6d:c9:a2:4c:ce:04:18:5b:78:4b:
72:27:d9:9c:12:0e:e2:0f:34:d9:43:0c:e3:c4:a2:
a4:1a:5d:11:6c:e3:14:da:f9:17:f0:4e:dd:23:8e:
f0:ba:55:9b:cd:21:ba:12:14:39:46:3d:c5:54:8c:
0e:c2:fd:b2:f0:17:1e:64:0a:cd:9d:a0:dd:c1:c1:
25:a5:fe:38:bf:b0:30:86:e8:c6:45:34:c1:bf:02:
e4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A1:6D:3A:9B:81:00:D8:06:08:F0:82:78:B1:B6:D2:49:D8:E3:5D
X509v3 Authority Key Identifier:
keyid:F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/3135312e3135382e3235302e302f32342d3234203d3e20313432353636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.158.250.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:65:ad:e6:6e:e0:10:b7:89:6c:46:fb:35:30:2f:60:7f:f0:
eb:48:a0:bb:23:00:39:82:bc:58:75:c6:33:47:3c:87:84:a4:
36:9e:12:79:c9:22:95:97:7b:03:86:6a:77:8e:ef:83:a5:3f:
a3:af:2c:10:85:45:4e:c0:72:00:7f:9b:03:71:a8:64:ef:33:
54:f9:54:c3:bd:b4:05:ee:37:50:9f:06:95:21:ec:c2:39:a7:
50:08:dd:f6:e3:a1:88:9c:74:79:7a:1c:38:fe:17:b3:35:f3:
a2:f2:c2:9b:99:a4:04:39:89:9f:9c:4e:a6:6f:d8:f7:5f:28:
49:4e:84:4b:66:31:94:cd:73:05:37:5b:74:f8:21:61:b6:3a:
80:f4:9c:87:cd:6c:7a:f3:64:fa:35:ee:ec:0f:e9:cd:62:da:
05:02:88:0b:4b:6b:81:7f:42:c7:28:ec:a6:1f:9a:4a:21:f2:
c6:42:97:da:05:75:6e:36:22:1a:62:d2:b6:cc:57:b9:33:2a:
cb:d4:da:19:f0:1a:6a:55:5e:52:06:93:ab:9f:46:8d:d3:21:
45:b3:25:3e:d9:2f:d3:0f:03:bc:9d:f3:db:3c:4f:76:62:fd:
66:b2:d0:bd:ca:4b:86:39:8d:5d:cf:ae:1e:13:0c:3f:48:6c:
33:64:59:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 14:56:42 2026 by rpki-client