
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/af6f8cba-cd23-409a-8b49-7730cf2dd754/0/3139382e31352e32352e302f32342d3234203d3e20313432323634.roa
File: 3139382e31352e32352e302f32342d3234203d3e20313432323634.roa (raw, json)
Hash identifier: zqg63PzFpvnHisK0vME07RPDLgK5KqQVtr6YJH2qfqs=
Subject key identifier: 7C:6C:B7:CC:1E:6F:B6:F9:1A:23:E8:8E:33:45:26:84:D1:13:07:50
Certificate issuer: /CN=36C462EB10EFBCE11E6F03911233B5BCFB97C399
Certificate serial: 10EF80D6F12FC47A87EDD924C15FB5EA39C9CC15
Authority key identifier: 36:C4:62:EB:10:EF:BC:E1:1E:6F:03:91:12:33:B5:BC:FB:97:C3:99
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/36C462EB10EFBCE11E6F03911233B5BCFB97C399.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/af6f8cba-cd23-409a-8b49-7730cf2dd754/0/3139382e31352e32352e302f32342d3234203d3e20313432323634.roa
Signing time: Tue 29 Sep 2026 20:44:36 +0000
ROA not before: Tue 29 Sep 2026 20:39:36 +0000
ROA not after: Tue 28 Sep 2027 20:44:36 +0000
asID: 142264
IP address blocks: 198.15.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/af6f8cba-cd23-409a-8b49-7730cf2dd754/0/36C462EB10EFBCE11E6F03911233B5BCFB97C399.crl
rsync://rpki-rsync.idnic.net/repo/af6f8cba-cd23-409a-8b49-7730cf2dd754/0/36C462EB10EFBCE11E6F03911233B5BCFB97C399.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/36C462EB10EFBCE11E6F03911233B5BCFB97C399.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 17:10:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:ef:80:d6:f1:2f:c4:7a:87:ed:d9:24:c1:5f:b5:ea:39:c9:cc:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36C462EB10EFBCE11E6F03911233B5BCFB97C399
Validity
Not Before: Sep 29 20:39:36 2026 GMT
Not After : Sep 28 20:44:36 2027 GMT
Subject: CN=7C6CB7CC1E6FB6F91A23E88E33452684D1130750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:43:e7:79:57:b0:d7:dd:6d:a7:28:8b:eb:ed:
14:c4:8d:06:4e:46:2a:57:82:06:06:a7:36:fb:62:
17:40:09:4f:d7:38:71:9e:c2:30:a5:df:55:55:60:
b8:aa:ff:31:3a:8a:b9:71:75:a9:ec:32:6b:c8:bd:
59:54:c3:b4:ea:66:df:9a:b8:11:a0:98:2e:a8:08:
b5:c8:9a:20:94:68:be:52:fe:c0:5e:db:e1:7e:e9:
79:4a:55:db:a4:a3:4d:ff:f2:45:f6:fb:69:02:d9:
7e:32:7f:62:65:cf:72:6e:3c:8f:c2:34:41:81:40:
40:00:de:ff:e6:8a:88:3d:c7:8f:fb:bb:b0:95:e9:
13:b8:97:8c:9d:ac:fb:f5:e2:dd:c4:1e:51:8d:8d:
73:c5:6c:18:d6:d5:77:67:d9:90:46:a4:1c:51:0e:
85:ef:6d:ea:1a:af:4d:cd:30:ed:2f:9f:43:07:97:
d0:dd:47:61:18:8f:d4:93:c0:6c:2d:84:ff:e2:f3:
66:3c:ef:d7:f5:b8:d5:71:e8:72:22:62:84:60:25:
78:10:ab:43:e7:8e:4e:59:d5:7c:85:b5:fa:74:a8:
52:8a:eb:2e:1d:e0:55:b6:43:19:db:ed:26:d5:6b:
81:a9:7a:64:e6:e3:04:30:bb:cb:b1:00:a4:1e:70:
8a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6C:B7:CC:1E:6F:B6:F9:1A:23:E8:8E:33:45:26:84:D1:13:07:50
X509v3 Authority Key Identifier:
keyid:36:C4:62:EB:10:EF:BC:E1:1E:6F:03:91:12:33:B5:BC:FB:97:C3:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/af6f8cba-cd23-409a-8b49-7730cf2dd754/0/36C462EB10EFBCE11E6F03911233B5BCFB97C399.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/36C462EB10EFBCE11E6F03911233B5BCFB97C399.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af6f8cba-cd23-409a-8b49-7730cf2dd754/0/3139382e31352e32352e302f32342d3234203d3e20313432323634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.15.25.0/24
Signature Algorithm: sha256WithRSAEncryption
01:df:98:49:91:24:78:08:3f:02:ff:9c:e3:94:57:fe:1a:fe:
2b:74:c2:c9:ce:3e:ea:fa:c4:2d:4a:ca:d6:49:7a:af:9f:4d:
1d:01:7f:c8:34:fd:bb:c1:5e:1b:aa:5f:86:ff:f0:08:da:2e:
9e:26:b2:6d:5d:f1:5b:94:ee:6a:75:4f:c7:09:e5:13:6e:25:
13:13:b4:48:61:59:f7:fa:8f:57:96:11:cb:65:60:28:cd:d6:
a4:12:8b:86:08:35:44:0b:c5:b0:c8:1a:4d:57:9b:45:8e:3d:
20:c9:29:12:71:d8:90:c8:f7:02:d5:53:89:bd:d2:36:32:e3:
64:c7:59:7c:5e:1b:38:ba:c4:fc:24:fe:a3:6f:d1:c9:07:a1:
79:0c:d5:47:8f:08:76:bf:a9:b2:34:81:1e:7d:c9:c4:44:4a:
f1:15:65:0b:9c:e5:53:b7:f9:31:c8:f1:fb:d2:53:80:50:21:
58:2b:d4:b8:3c:9f:e7:31:5b:10:0b:83:f5:bb:eb:ce:c9:b9:
f1:96:8f:a8:d8:19:13:47:4e:02:7c:70:5c:b9:73:9b:d0:e7:
98:98:57:0e:9f:c2:a2:7a:04:39:a1:e5:f0:6b:c4:80:b2:85:
91:c5:40:f3:97:eb:32:d0:e4:9a:ec:bd:d7:aa:b9:ce:66:bb:
0d:87:3e:6a
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUEO+A1vEvxHqH7dkkwV+16jnJzBUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzZDNDYyRUIxMEVGQkNFMTFFNkYwMzkxMTIzM0I1QkNG
Qjk3QzM5OTAeFw0yNjA5MjkyMDM5MzZaFw0yNzA5MjgyMDQ0MzZaMDMxMTAvBgNV
BAMTKDdDNkNCN0NDMUU2RkI2RjkxQTIzRTg4RTMzNDUyNjg0RDExMzA3NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Q+d5V7DX3W2nKIvr7RTEjQZO
RipXggYGpzb7YhdACU/XOHGewjCl31VVYLiq/zE6irlxdansMmvIvVlUw7TqZt+a
uBGgmC6oCLXImiCUaL5S/sBe2+F+6XlKVduko03/8kX2+2kC2X4yf2Jlz3JuPI/C
NEGBQEAA3v/miog9x4/7u7CV6RO4l4ydrPv14t3EHlGNjXPFbBjW1Xdn2ZBGpBxR
DoXvbeoar03NMO0vn0MHl9DdR2EYj9STwGwthP/i82Y879f1uNVx6HIiYoRgJXgQ
q0Pnjk5Z1XyFtfp0qFKK6y4d4FW2Qxnb7SbVa4GpemTm4wQwu8uxAKQecIppAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUfGy3zB5vtvkaI+iOM0UmhNETB1AwHwYDVR0j
BBgwFoAUNsRi6xDvvOEebwOREjO1vPuXw5kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWY2ZjhjYmEtY2QyMy00MDlhLThiNDktNzczMGNmMmRkNzU0LzAvMzZDNDYyRUIx
MEVGQkNFMTFFNkYwMzkxMTIzM0I1QkNGQjk3QzM5OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC8zNkM0NjJFQjEwRUZCQ0UxMUU2RjAzOTExMjMzQjVCQ0ZCOTdD
Mzk5LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FmNmY4Y2JhLWNkMjMtNDA5YS04
YjQ5LTc3MzBjZjJkZDc1NC8wLzMxMzkzODJlMzEzNTJlMzIzNTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzQzMjMyMzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMYPGTANBgkqhkiG
9w0BAQsFAAOCAQEAAd+YSZEkeAg/Av+c45RX/hr+K3TCyc4+6vrELUrK1kl6r59N
HQF/yDT9u8FeG6pfhv/wCNouniaybV3xW5TuanVPxwnlE24lExO0SGFZ9/qPV5YR
y2VgKM3WpBKLhgg1RAvFsMgaTVebRY49IMkpEnHYkMj3AtVTib3SNjLjZMdZfF4b
OLrE/CT+o2/RyQeheQzVR48Idr+psjSBHn3JxERK8RVlC5zlU7f5Mcjx+9JTgFAh
WCvUuDyf5zFbEAuD9bvrzsm58ZaPqNgZE0dOAnxwXLlzm9DnmJhXDp/ConoEOaHl
8GvEgLKFkcVA85frMtDkmuy916q5zma7DYc+ag==
-----END CERTIFICATE-----
Generated at Tue Oct 27 08:26:47 2026 by rpki-client