
$ rpki-client -vvf repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa
File: 34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa (raw, json)
Hash identifier: Xv8kcXDJ6WYMmWOyH4eBz+tykqWc30YT1h8G2TY977E=
Subject key identifier: 93:09:33:19:DC:8A:88:71:8B:D2:82:86:28:84:CC:BC:5E:FB:5C:C6
Certificate issuer: /CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA
Certificate serial: 1C03BAACDBA1982C48330FF9193B97130258C818
Authority key identifier: 12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa
Signing time: Wed 04 Feb 2026 05:00:02 +0000
ROA not before: Wed 04 Feb 2026 04:55:02 +0000
ROA not after: Wed 03 Feb 2027 05:00:02 +0000
asID: 452023
IP address blocks: 45.123.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl
rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 12:13:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:03:ba:ac:db:a1:98:2c:48:33:0f:f9:19:3b:97:13:02:58:c8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12A8210E6A91A93DDB92F594D7E47728131BC2DA
Validity
Not Before: Feb 4 04:55:02 2026 GMT
Not After : Feb 3 05:00:02 2027 GMT
Subject: CN=93093319DC8A88718BD282862884CCBC5EFB5CC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:90:0a:03:2c:92:8c:cf:8b:37:a4:a3:3f:72:
6e:ee:c3:b0:d9:c1:dd:b2:73:91:10:48:79:b8:9b:
1b:98:0e:c2:b3:4a:e3:08:70:5a:49:0a:37:6d:d1:
ce:8c:28:a3:28:02:0a:b8:ff:13:a6:ce:20:d9:25:
6b:c5:0e:3b:7c:95:54:4b:6f:f0:8f:e9:94:d2:c1:
49:5f:f2:68:5f:6e:e7:f5:d6:ab:17:2b:13:a7:de:
90:d5:f9:03:1e:89:72:05:d7:04:cb:48:10:48:db:
14:f2:3b:38:c8:5d:64:6b:49:2e:32:b7:3d:32:10:
60:b4:58:9a:3f:aa:fa:81:8f:25:3c:e7:b9:97:7a:
3a:f0:92:d1:c3:c4:f8:8b:1a:d6:9f:8e:54:2f:7d:
61:80:f9:73:bb:c8:18:7b:95:6a:31:f7:ed:87:e3:
18:d7:98:31:43:4d:60:0f:d7:5e:93:7a:9c:3c:3e:
21:af:ad:96:43:b9:ac:be:19:32:ea:8b:4a:e6:4f:
a6:a7:1c:8a:9f:8d:b3:46:84:b5:6a:51:e6:13:06:
cb:11:d3:2f:69:fb:7a:03:f5:04:aa:52:9f:5d:db:
f9:12:e6:5d:83:a6:64:37:42:20:07:b2:96:ea:1e:
b6:5b:79:83:1f:b5:9b:88:83:10:e1:56:7b:96:ce:
08:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:09:33:19:DC:8A:88:71:8B:D2:82:86:28:84:CC:BC:5E:FB:5C:C6
X509v3 Authority Key Identifier:
keyid:12:A8:21:0E:6A:91:A9:3D:DB:92:F5:94:D7:E4:77:28:13:1B:C2:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/12A8210E6A91A93DDB92F594D7E47728131BC2DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/12A8210E6A91A93DDB92F594D7E47728131BC2DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11828067-e7c1-4964-8428-599033d74296/0/34352e3132332e3134332e302f32342d3234203d3e20343532303233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.123.143.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:9f:8d:45:54:e0:7f:b5:c9:e6:6d:53:f6:07:e6:b2:37:f7:
d7:40:a7:93:be:3d:72:20:f5:3d:3b:a3:a9:e7:d9:e4:b8:f6:
25:44:5f:c1:a8:a2:d9:50:36:5c:89:a3:5a:19:2b:0c:a4:56:
15:fe:e8:55:1d:6f:9e:40:0d:ad:87:2d:08:5d:c1:1d:2e:3f:
f8:de:c6:9c:5e:d6:18:28:66:4f:67:72:d5:2e:94:f9:80:5d:
8b:7c:15:b2:18:c4:49:4e:0d:75:41:77:7a:4a:f6:3d:4a:e5:
2c:70:a6:46:db:e3:56:d9:49:a0:e1:7a:03:a7:3f:d2:28:44:
00:7b:6a:2a:4f:af:8e:18:03:f4:c6:c5:3e:bf:3f:b2:4a:ec:
2d:cc:00:4a:c5:4b:3d:dd:8f:08:07:aa:7c:96:55:4d:7b:7e:
e3:62:18:71:95:ca:c2:57:c0:71:12:9b:7b:86:e1:6c:84:84:
15:98:a8:4d:29:0d:44:b2:82:df:91:32:81:eb:b3:a5:30:cf:
e4:31:06:82:99:3d:69:4d:39:5b:46:5b:1e:8a:f6:55:7f:24:
40:9f:91:80:c5:8c:fc:7b:8b:5c:b8:2e:3d:1a:4c:cc:d7:39:
12:49:41:9f:30:09:5d:e2:4b:9b:86:26:90:7e:3f:36:d9:ea:
e3:e8:eb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:57:23 2026 by rpki-client