
$ rpki-client -vvf repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/3137352e3138342e3233322e302f32322d3234203d3e2039333431.roa
File: 3137352e3138342e3233322e302f32322d3234203d3e2039333431.roa (raw, json)
Hash identifier: KcroOwXcn5kHg7edNgt2OsMglHE6caJJwLQIgGiSAQM=
Subject key identifier: 61:18:F7:42:F3:8A:46:83:97:50:BC:96:EA:A1:B4:BE:9A:38:BA:51
Certificate issuer: /CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E
Certificate serial: 53E9BA3EDE5FBCBB473F2D9C19F78DEB01E8DB8E
Authority key identifier: C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/3137352e3138342e3233322e302f32322d3234203d3e2039333431.roa
Signing time: Tue 14 Apr 2026 11:00:01 +0000
ROA not before: Tue 14 Apr 2026 10:55:01 +0000
ROA not after: Tue 13 Apr 2027 11:00:01 +0000
asID: 9341
IP address blocks: 175.184.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl
rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 23:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:e9:ba:3e:de:5f:bc:bb:47:3f:2d:9c:19:f7:8d:eb:01:e8:db:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E
Validity
Not Before: Apr 14 10:55:01 2026 GMT
Not After : Apr 13 11:00:01 2027 GMT
Subject: CN=6118F742F38A46839750BC96EAA1B4BE9A38BA51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:38:08:63:39:48:f3:07:33:3b:88:51:fc:dc:
4b:bf:8d:e3:27:dc:3c:86:9e:06:2c:53:4f:99:02:
4a:38:91:4a:9a:ec:f3:35:bb:b0:69:d4:e0:30:6c:
08:ea:e6:2a:21:b9:e8:ca:3c:0f:c0:e7:ec:0f:16:
3c:89:7f:4d:50:8b:53:40:6b:56:ad:b7:0c:4d:0b:
1d:c0:84:4e:79:2f:b8:c3:8f:ad:e4:e0:3b:6f:d1:
6f:46:1f:87:19:c0:0b:dc:ef:eb:29:7c:47:cd:fd:
74:b4:58:85:f6:66:33:7a:d6:3b:d4:b6:9f:1c:14:
3b:8f:83:c2:04:8a:c4:f0:b0:0d:b7:90:c3:71:f9:
80:65:39:bb:95:13:d5:d1:dd:c6:06:2e:d7:09:ce:
64:a4:34:db:e4:2f:77:08:e5:c7:71:3b:ba:4a:11:
f8:98:e7:63:81:3f:35:89:fe:f6:b8:e1:fc:68:40:
f0:59:f0:46:17:7d:7d:06:6d:73:72:a0:f9:89:8b:
61:ce:47:81:75:95:e5:3c:88:b5:80:0d:9c:43:ed:
79:12:e1:f3:c6:6e:a0:b1:32:4d:b1:a9:d2:0d:5b:
bd:3b:0d:79:85:45:4a:93:da:94:d1:ab:4e:8c:72:
51:76:fa:5d:9e:a3:66:15:74:22:43:75:b2:58:7d:
28:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:18:F7:42:F3:8A:46:83:97:50:BC:96:EA:A1:B4:BE:9A:38:BA:51
X509v3 Authority Key Identifier:
keyid:C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/3137352e3138342e3233322e302f32322d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.184.232.0/22
Signature Algorithm: sha256WithRSAEncryption
47:f2:30:68:00:1e:4e:78:39:a2:3d:db:a4:61:c8:69:13:e8:
8f:87:6c:33:a9:41:77:27:54:ac:42:c6:8b:68:a9:a3:e6:e7:
2a:80:da:5c:b4:6a:1d:b6:9c:da:c5:83:11:3b:64:24:15:3d:
c0:7d:36:d7:f6:d8:8e:74:5a:42:ff:cb:90:6b:42:6d:fe:12:
28:a7:6e:42:41:3c:32:b1:1a:e6:59:bd:5e:27:1e:1b:b9:2c:
ad:64:63:e8:9f:7c:7d:c9:b8:08:48:14:2a:bf:33:c8:7f:d3:
d0:12:72:0f:f4:47:d0:30:67:de:89:2b:d6:e0:d6:f3:8d:1c:
98:99:0f:b4:db:36:b9:51:0a:4c:15:58:fd:29:76:a2:ad:87:
05:ab:02:67:84:0c:74:01:d1:58:19:76:d2:38:e2:8b:36:26:
14:0f:3f:8e:59:d8:fc:3c:fa:03:53:e0:6b:ff:60:e8:33:5f:
b0:f8:0d:06:0b:a1:33:74:4c:7d:7f:19:3f:ab:a0:b4:10:b4:
6c:25:dd:dc:c7:04:e1:ad:a9:b7:63:be:b4:3e:81:a1:a5:04:
f5:ab:31:48:80:b0:c6:9d:54:e8:aa:36:c7:43:70:50:3d:29:
c4:e9:1b:14:72:dc:e8:53:f2:84:05:ed:58:4a:a0:87:30:89:
ba:5d:45:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:45:25 2026 by rpki-client