
$ rpki-client -vvf repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/3135372e36362e3139322e302f32342d3234203d3e20313532373730.roa
File: 3135372e36362e3139322e302f32342d3234203d3e20313532373730.roa (raw, json)
Hash identifier: xeraR1/wll53tMLyVMceOA6ym3r6pHZ/xzb1tYl21wM=
Subject key identifier: 07:23:06:49:E4:2A:42:F1:FC:F4:24:47:81:D2:7A:54:BF:27:3F:CB
Certificate issuer: /CN=62F71C75A752B45AE4B51A4E7010124979820A90
Certificate serial: 24337B9E2BA324309F3C90C158CCCADDA9C78C04
Authority key identifier: 62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/3135372e36362e3139322e302f32342d3234203d3e20313532373730.roa
Signing time: Mon 13 Apr 2026 08:03:34 +0000
ROA not before: Mon 13 Apr 2026 07:58:34 +0000
ROA not after: Mon 12 Apr 2027 08:03:34 +0000
asID: 152770
IP address blocks: 157.66.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.crl
rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 19:41:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:33:7b:9e:2b:a3:24:30:9f:3c:90:c1:58:cc:ca:dd:a9:c7:8c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62F71C75A752B45AE4B51A4E7010124979820A90
Validity
Not Before: Apr 13 07:58:34 2026 GMT
Not After : Apr 12 08:03:34 2027 GMT
Subject: CN=07230649E42A42F1FCF4244781D27A54BF273FCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:72:f1:de:a4:ab:fb:63:7f:5e:80:57:8a:7f:
62:77:ac:d7:11:21:b7:4f:65:e0:e1:e1:4a:bf:59:
7f:51:6c:cc:f6:bc:73:ac:a1:5c:a1:ff:db:f6:2d:
2a:57:27:ff:aa:8f:a4:da:f3:3c:75:9f:5c:23:00:
0b:91:91:34:5d:24:99:89:56:2c:5c:25:85:5a:32:
1b:03:b9:15:5f:fa:ef:f1:71:0f:14:37:de:37:c9:
d4:ab:40:3e:2d:a2:25:8b:f8:1a:49:2a:82:3f:d7:
7d:e1:8c:3b:bc:03:98:7d:1b:96:67:fb:c7:dd:5b:
c3:82:3a:48:e3:f7:62:e2:a1:ce:1d:89:8d:6f:7d:
8a:6c:38:5a:30:7a:f5:88:d4:87:89:a4:c3:e6:b9:
05:10:87:ea:a8:b5:26:51:09:3e:7b:1e:28:c7:7c:
23:df:a3:30:a4:40:b1:54:1e:91:c5:f3:2c:51:4a:
30:e9:1b:f9:d7:53:ee:f3:19:02:31:21:58:ca:f1:
59:70:74:f8:48:75:3e:56:0d:be:86:da:dd:89:b0:
92:e4:7d:f4:54:33:e7:b9:39:aa:17:23:ab:1f:13:
57:d8:16:b6:e1:6c:21:c3:6b:94:46:0a:a1:da:c6:
01:9b:a6:95:50:7f:c7:a0:2b:ab:62:9e:c0:23:e9:
8b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:23:06:49:E4:2A:42:F1:FC:F4:24:47:81:D2:7A:54:BF:27:3F:CB
X509v3 Authority Key Identifier:
keyid:62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/3135372e36362e3139322e302f32342d3234203d3e20313532373730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.192.0/24
Signature Algorithm: sha256WithRSAEncryption
92:40:7c:ff:d8:75:5a:85:c9:be:c7:d8:53:62:cb:35:24:22:
db:b3:cb:d7:7c:1c:92:ed:75:1a:ec:ec:fe:e2:b0:9a:39:17:
5f:e8:82:d0:ea:81:5e:17:b9:fc:ab:ed:cb:94:3a:e6:8a:05:
ff:b4:8b:18:b2:08:51:5b:26:13:76:e0:67:5f:60:b4:58:15:
a7:cc:5c:1b:8b:88:1a:c1:0c:79:45:4b:ce:2b:1a:da:a4:4e:
7f:4d:5e:45:f7:f0:a9:fb:68:5b:8c:f7:2e:aa:9f:e6:71:b2:
b9:be:2b:41:76:a1:e1:7e:a4:4c:79:61:a1:9c:21:7c:1e:24:
75:40:64:f2:ad:97:8d:cf:c1:d2:33:00:4b:2f:69:47:58:ff:
ba:d0:ef:09:74:c3:37:ba:66:a0:ac:c7:df:7c:65:3e:b2:34:
72:88:fd:18:c9:ea:9e:cb:f6:b1:73:6f:18:e8:7b:c4:4b:14:
83:bf:ce:97:f6:43:05:37:05:79:05:08:03:cf:70:45:2a:5b:
e1:6d:a6:39:16:75:84:75:17:81:f3:03:30:63:ce:da:cc:be:
6a:74:28:be:73:1c:42:5c:d3:d9:33:cd:16:ad:87:e0:43:4c:
a8:94:16:84:d6:82:44:15:18:3d:26:7e:b2:1c:2c:d9:89:75:
e1:09:9a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:07:01 2026 by rpki-client