
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/3/3135312e3135382e38342e302f32332d3234203d3e203538383231.roa
File: 3135312e3135382e38342e302f32332d3234203d3e203538383231.roa (raw, json)
Hash identifier: up9oUnYNNgnrnD8nBltWVRw6hQoOw00TwpTvFDksSiQ=
Subject key identifier: 6E:A6:87:76:C2:51:2F:47:FB:5B:83:4F:81:31:CA:E5:ED:78:68:A9
Certificate issuer: /CN=A91862140000/serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53
Certificate serial: 371952442E7335F6522341CFB3BD17E7490332BD
Authority key identifier: F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/3135312e3135382e38342e302f32332d3234203d3e203538383231.roa
Signing time: Thu 28 May 2026 06:18:40 +0000
ROA not before: Thu 28 May 2026 06:13:40 +0000
ROA not after: Thu 27 May 2027 06:18:40 +0000
asID: 58821
IP address blocks: 151.158.84.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 03:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:19:52:44:2e:73:35:f6:52:23:41:cf:b3:bd:17:e7:49:03:32:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53
Validity
Not Before: May 28 06:13:40 2026 GMT
Not After : May 27 06:18:40 2027 GMT
Subject: CN=6EA68776C2512F47FB5B834F8131CAE5ED7868A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:67:77:98:29:a4:bc:24:24:97:d9:9d:8b:e1:
fe:1e:88:ba:db:50:39:8a:8a:fb:40:b7:b5:fb:18:
db:5e:c1:a8:5e:6d:db:0b:08:0d:72:65:af:fd:9c:
14:90:0d:ff:8a:3b:8e:34:4a:dc:52:80:55:86:4a:
c1:b5:2a:97:f3:4e:bc:2f:3c:23:01:4a:92:bb:7c:
c1:0f:7c:fd:96:76:66:23:71:16:75:82:dd:97:a3:
c6:44:c7:07:98:01:35:f3:41:4e:b3:3a:5d:f9:43:
60:31:f1:ba:b2:fa:f7:82:c3:09:93:e1:a6:cf:c3:
77:74:ba:23:8a:55:d5:f2:ed:c1:09:89:ca:25:43:
ea:b7:ac:da:a6:f2:c6:02:ff:db:ca:61:9a:8a:4e:
18:bb:d7:b9:6a:5c:77:5b:9f:de:cf:ba:9b:a3:80:
02:34:73:f4:79:51:e7:ea:7f:a4:9b:65:86:24:e8:
36:be:b0:09:09:20:77:60:10:81:1e:f5:9e:d1:d9:
21:bc:7c:aa:b9:9e:50:f5:9f:cb:6d:cb:1d:99:7e:
2c:e0:30:e4:f2:6d:bb:dd:a0:e3:a2:db:1f:70:d3:
ef:2f:a0:54:15:16:79:9d:49:4a:31:bc:64:2d:de:
ec:8a:a6:72:43:4a:fc:12:2c:09:e7:68:aa:a0:5f:
e3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A6:87:76:C2:51:2F:47:FB:5B:83:4F:81:31:CA:E5:ED:78:68:A9
X509v3 Authority Key Identifier:
keyid:F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/3135312e3135382e38342e302f32332d3234203d3e203538383231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.158.84.0/23
Signature Algorithm: sha256WithRSAEncryption
98:10:fb:4d:a6:e0:c0:c8:85:3b:c3:b2:0b:5e:f9:ec:e2:c6:
d5:2a:50:42:32:b1:77:0e:e8:08:e7:70:7a:be:0c:c7:f3:ce:
75:03:3b:a0:c8:d4:1b:cd:51:94:e5:90:4c:8d:e1:7b:a7:19:
97:86:c6:18:67:9b:50:fb:c0:b7:eb:b4:f0:ae:76:bd:1a:02:
44:24:83:7d:de:fb:6f:55:5a:8b:c3:41:de:bb:1c:48:02:79:
99:52:47:76:ad:f9:ca:2b:b0:c7:e3:4d:7c:be:84:35:ac:6f:
8f:21:98:af:a9:5d:7f:48:28:38:76:fe:9a:7d:42:90:e8:52:
61:e5:5a:35:a5:82:c4:ae:4e:6a:88:7e:99:fb:89:72:7b:26:
d5:ab:a2:f3:9a:8b:5d:02:55:be:a6:db:87:f4:85:29:11:f1:
b4:d2:a6:8e:5f:88:1d:bf:86:ed:1b:cd:ec:07:7f:50:35:91:
7c:e4:49:6e:f5:a7:5b:9a:1a:a3:95:b7:a4:e3:e9:8b:54:36:
45:0b:50:71:94:09:8e:dc:a7:ca:08:11:78:94:77:7a:70:a9:
2d:90:e4:ef:02:d4:d9:d1:71:e0:d6:26:0f:4e:f4:68:5d:27:
87:3c:dc:95:fc:41:6e:59:71:6b:69:47:ee:5f:cc:e3:64:14:
b1:bd:6a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:55:47 2026 by rpki-client