
$ rpki-client -vvf repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/35382e36352e3234302e302f32312d3234203d3e203234353335.roa
File: 35382e36352e3234302e302f32312d3234203d3e203234353335.roa (raw, json)
Hash identifier: pdV+aN3I6dloLI2qkmzalOgfwKnlHe9DExCU7AJ1bj4=
Subject key identifier: 8B:B7:77:FB:62:E8:F0:2F:9C:80:BB:7E:D6:67:8C:AF:D8:FC:DD:FB
Certificate issuer: /CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097
Certificate serial: 30794CBD8FE94AE509C48244B5FC7811A47B0422
Authority key identifier: 47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/35382e36352e3234302e302f32312d3234203d3e203234353335.roa
Signing time: Tue 03 Feb 2026 09:00:02 +0000
ROA not before: Tue 03 Feb 2026 08:55:02 +0000
ROA not after: Tue 02 Feb 2027 09:00:02 +0000
asID: 24535
IP address blocks: 58.65.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl
rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:79:4c:bd:8f:e9:4a:e5:09:c4:82:44:b5:fc:78:11:a4:7b:04:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097
Validity
Not Before: Feb 3 08:55:02 2026 GMT
Not After : Feb 2 09:00:02 2027 GMT
Subject: CN=8BB777FB62E8F02F9C80BB7ED6678CAFD8FCDDFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bc:a8:a2:6b:d1:80:aa:85:7e:98:81:d7:67:
7e:c9:98:c8:89:14:37:dd:46:81:91:be:2a:5a:4d:
f0:a9:a6:f3:04:5c:ab:ef:ca:d7:8b:19:90:55:ee:
3e:04:d8:b4:0b:74:d7:a2:7e:f4:17:8a:4f:45:35:
01:26:34:72:62:31:e4:ed:ef:f8:ec:8c:4f:5e:ca:
6f:3d:50:f7:e1:91:41:ae:79:d2:83:ce:c7:f9:fe:
11:8e:fb:1c:9e:40:03:90:b6:1b:62:23:da:c6:3a:
03:0e:7c:b7:25:f7:c1:f8:4f:75:9e:67:16:14:de:
de:e0:e7:89:fc:0b:78:b3:43:6b:ee:a1:5e:45:89:
ed:e8:38:b3:e4:a4:ee:1e:2e:d9:85:bc:bd:be:47:
f5:11:9c:0a:fc:0f:3b:3c:86:e9:ed:db:4a:78:81:
8d:0d:6f:81:e6:30:02:1b:99:03:d2:bc:03:dd:df:
3e:b0:96:ff:4b:f6:2e:cc:59:e8:11:7d:5b:fa:ba:
9f:70:59:63:11:e7:84:13:de:c6:0c:58:06:e7:cf:
56:27:62:e4:81:64:8b:01:85:17:d7:77:1b:34:2d:
a2:fa:22:be:82:43:5e:dc:ba:d0:37:39:b1:71:c5:
db:ff:57:a4:41:88:22:6e:64:e6:ff:b7:a1:b7:9f:
f2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B7:77:FB:62:E8:F0:2F:9C:80:BB:7E:D6:67:8C:AF:D8:FC:DD:FB
X509v3 Authority Key Identifier:
keyid:47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/35382e36352e3234302e302f32312d3234203d3e203234353335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
58.65.240.0/21
Signature Algorithm: sha256WithRSAEncryption
48:ea:3e:83:bc:df:36:c6:19:4a:aa:f3:13:49:22:c3:ed:af:
55:f4:bc:50:91:14:be:f3:6c:53:51:90:92:03:17:a2:14:90:
1a:c6:73:24:5f:45:4e:4e:61:e4:ab:b8:e9:34:ad:32:df:1d:
18:cf:1b:21:4e:ca:bc:f8:c3:81:19:62:13:04:55:87:75:9f:
f1:19:8f:c6:b6:71:96:1c:91:39:d0:80:4c:cf:89:dc:79:8a:
32:81:1e:e7:e8:9d:83:b5:21:32:6c:3e:28:d0:6d:be:66:89:
ee:67:21:0a:22:85:04:36:b5:af:bb:d2:b4:2e:91:2e:d1:97:
a3:9d:fb:06:7a:8a:22:8d:1b:a3:73:f3:26:fa:52:e5:be:e4:
42:21:05:ed:60:8a:50:5c:a4:2f:45:17:30:77:e7:af:d4:c6:
74:10:e5:a0:d5:f0:f2:c0:f7:e3:29:20:3c:64:fa:72:97:c3:
76:b1:11:a8:25:c5:24:60:5d:cd:35:d7:96:17:b9:91:62:d9:
6a:47:26:63:a8:dc:9e:fa:99:e4:af:af:d1:0d:e8:8a:8e:3e:
37:c5:31:3b:ea:bd:49:4f:4b:94:85:23:e0:4d:f4:23:cc:37:
63:14:ef:39:56:aa:90:23:a2:cd:c2:1a:d1:85:50:11:7f:38:
90:8a:1a:ad
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUMHlMvY/pSuUJxIJEtfx4EaR7BCIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBGQTE1
MjYxOTA5NzAeFw0yNjAyMDMwODU1MDJaFw0yNzAyMDIwOTAwMDJaMDMxMTAvBgNV
BAMTKDhCQjc3N0ZCNjJFOEYwMkY5QzgwQkI3RUQ2Njc4Q0FGRDhGQ0RERkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgvKiia9GAqoV+mIHXZ37JmMiJ
FDfdRoGRvipaTfCppvMEXKvvyteLGZBV7j4E2LQLdNeifvQXik9FNQEmNHJiMeTt
7/jsjE9eym89UPfhkUGuedKDzsf5/hGO+xyeQAOQthtiI9rGOgMOfLcl98H4T3We
ZxYU3t7g54n8C3izQ2vuoV5Fie3oOLPkpO4eLtmFvL2+R/URnAr8Dzs8hunt20p4
gY0Nb4HmMAIbmQPSvAPd3z6wlv9L9i7MWegRfVv6up9wWWMR54QT3sYMWAbnz1Yn
YuSBZIsBhRfXdxs0LaL6Ir6CQ17cutA3ObFxxdv/V6RBiCJuZOb/t6G3n/IpAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUi7d3+2Lo8C+cgLt+1meMr9j83fswHwYDVR0j
BBgwFoAUR7P7852N/lvFz9K+058PoVJhkJcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZGQ0N2Y1Ni1lYzUzLTQyZWItOWI4Yi1mYTA4Zjg3NGQzMTkvMC80N0IzRkJGMzlE
OERGRTVCQzVDRkQyQkVEMzlGMEZBMTUyNjE5MDk3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBGQTE1MjYx
OTA5Ny5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkZDQ3ZjU2LWVjNTMtNDJlYi05
YjhiLWZhMDhmODc0ZDMxOS8wLzM1MzgyZTM2MzUyZTMyMzQzMDJlMzAyZjMyMzEy
ZDMyMzQyMDNkM2UyMDMyMzQzNTMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM6QfAwDQYJKoZIhvcN
AQELBQADggEBAEjqPoO83zbGGUqq8xNJIsPtr1X0vFCRFL7zbFNRkJIDF6IUkBrG
cyRfRU5OYeSruOk0rTLfHRjPGyFOyrz4w4EZYhMEVYd1n/EZj8a2cZYckTnQgEzP
idx5ijKBHufonYO1ITJsPijQbb5mie5nIQoihQQ2ta+70rQukS7Rl6Od+wZ6iiKN
G6Nz8yb6UuW+5EIhBe1gilBcpC9FFzB356/UxnQQ5aDV8PLA9+MpIDxk+nKXw3ax
EaglxSRgXc0115YXuZFi2WpHJmOo3J76meSvr9EN6IqOPjfFMTvqvUlPS5SFI+BN
9CPMN2MU7zlWqpAjos3CGtGFUBF/OJCKGq0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:23:14 2026 by rpki-client