
$ rpki-client -vvf repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/3135372e36362e3139332e302f32342d3234203d3e20313532373730.roa
File: 3135372e36362e3139332e302f32342d3234203d3e20313532373730.roa (raw, json)
Hash identifier: /o/cyoWQ33H0XdVpB564UefArVEwZoJies3mfU0cuOY=
Subject key identifier: B3:65:31:D2:9A:AC:65:74:E1:44:9E:D8:56:AD:70:BD:39:30:34:40
Certificate issuer: /CN=62F71C75A752B45AE4B51A4E7010124979820A90
Certificate serial: 7B19A30B3DD9C1B3CEA8A07BFEC11387009FCE00
Authority key identifier: 62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/3135372e36362e3139332e302f32342d3234203d3e20313532373730.roa
Signing time: Mon 13 Apr 2026 08:03:34 +0000
ROA not before: Mon 13 Apr 2026 07:58:34 +0000
ROA not after: Mon 12 Apr 2027 08:03:34 +0000
asID: 152770
IP address blocks: 157.66.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.crl
rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 19:41:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:19:a3:0b:3d:d9:c1:b3:ce:a8:a0:7b:fe:c1:13:87:00:9f:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62F71C75A752B45AE4B51A4E7010124979820A90
Validity
Not Before: Apr 13 07:58:34 2026 GMT
Not After : Apr 12 08:03:34 2027 GMT
Subject: CN=B36531D29AAC6574E1449ED856AD70BD39303440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2d:bf:39:5e:1e:8b:a4:cc:27:8f:ec:d4:dd:
03:93:85:78:c8:8b:32:f5:94:10:b1:36:1b:1b:1b:
28:a7:d8:77:39:4e:fb:2f:ad:2d:96:ed:9f:4f:57:
b9:10:e7:ff:dc:f2:33:da:9e:c1:2b:75:db:5e:9a:
34:77:a6:07:ad:44:67:33:3d:60:4d:46:8b:6b:4f:
60:f8:73:95:4e:3b:01:ed:ca:5a:82:42:b8:9b:6b:
1b:ff:99:1d:27:b2:99:2f:a8:1d:c1:8b:44:af:37:
8b:8f:d7:f9:84:6e:c5:b3:29:cb:78:e9:04:99:28:
95:76:1c:6a:88:10:1a:03:14:29:19:30:b8:d5:e5:
27:e3:4f:98:e1:90:54:96:c2:18:cf:34:68:1a:dd:
63:14:61:ad:1f:cb:b5:dc:4d:db:ae:30:bc:94:33:
59:aa:0f:a4:97:81:8d:e6:2a:c5:74:a8:d1:ef:1f:
73:39:29:3f:11:2c:a7:5c:4b:83:c2:2b:3a:95:ea:
fd:97:82:1a:6f:72:e4:d9:4a:49:4a:73:c5:ca:21:
3e:62:f7:86:8f:d7:35:13:2f:08:f3:2a:0b:cf:f8:
bf:3e:b5:4b:95:74:b9:ac:d6:da:9b:7d:a2:e9:4d:
37:d5:f9:a6:6c:b3:37:dd:94:31:82:ea:e2:f0:a1:
40:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:65:31:D2:9A:AC:65:74:E1:44:9E:D8:56:AD:70:BD:39:30:34:40
X509v3 Authority Key Identifier:
keyid:62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/3135372e36362e3139332e302f32342d3234203d3e20313532373730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.193.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:ef:46:19:f0:8d:57:de:c2:3d:2d:dd:ff:38:98:5a:ab:47:
69:22:72:63:b2:f7:4f:fb:75:04:ae:d1:02:1d:d5:73:31:f6:
b5:da:ce:ad:02:3f:97:03:a1:8f:d0:05:90:84:cf:35:79:02:
e4:c6:6e:84:1c:b5:1e:e9:4c:a3:3a:45:57:5e:f1:c3:51:01:
37:32:87:69:11:54:43:23:30:8a:10:88:af:31:7c:6f:8d:8d:
b0:a1:07:1c:1f:9f:07:45:5b:73:78:51:3a:96:7b:76:ed:b5:
b7:06:4e:9d:b0:81:f2:15:33:fe:d9:aa:b3:42:9d:59:62:f6:
8c:16:d7:16:be:12:47:85:8a:3c:e8:d7:bf:65:b2:6b:1d:e4:
13:6f:99:64:d8:ed:de:09:82:19:be:d5:fe:55:22:25:35:70:
29:39:e4:3e:85:2b:35:52:98:fc:b7:f5:ce:a1:ad:33:79:c6:
50:82:84:f3:49:63:9c:a5:09:4a:a5:e8:39:1b:9f:03:24:ff:
b3:04:77:ca:03:67:25:93:98:dc:4d:3e:ea:60:ab:ff:52:86:
94:e4:65:6d:65:cd:e5:d9:f1:1b:48:2d:e3:80:75:a5:29:da:
02:c5:4e:1b:6d:80:71:0d:3e:6b:a7:f2:62:35:6f:31:c9:12:
e5:fb:4b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:51:56 2026 by rpki-client