
$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/3136302e3139312e3233352e302f32342d3234203d3e20313534343130.roa
File: 3136302e3139312e3233352e302f32342d3234203d3e20313534343130.roa (raw, json)
Hash identifier: zyDq4p7gaqzLKVL/LUrVeKcASK+xSzMyAANuaFKi9Qw=
Subject key identifier: 95:2A:45:38:D9:E6:5C:95:B3:12:8D:0F:0A:1C:0E:E0:DC:3D:5C:24
Certificate issuer: /CN=8B30167CDA20FE7EDCFC647AC86B14BB27E430C8
Certificate serial: 6D99E931B0A65B14EFAB28590513AE0C3B58F4B2
Authority key identifier: 8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/3136302e3139312e3233352e302f32342d3234203d3e20313534343130.roa
Signing time: Wed 18 Feb 2026 15:57:30 +0000
ROA not before: Wed 18 Feb 2026 15:52:30 +0000
ROA not after: Wed 17 Feb 2027 15:57:30 +0000
asID: 154410
IP address blocks: 160.191.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl
rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:45:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:99:e9:31:b0:a6:5b:14:ef:ab:28:59:05:13:ae:0c:3b:58:f4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B30167CDA20FE7EDCFC647AC86B14BB27E430C8
Validity
Not Before: Feb 18 15:52:30 2026 GMT
Not After : Feb 17 15:57:30 2027 GMT
Subject: CN=952A4538D9E65C95B3128D0F0A1C0EE0DC3D5C24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c7:66:1d:da:77:57:3e:a5:75:8c:29:9b:2a:
40:f7:7b:a0:b8:da:09:c6:6c:6d:3f:ca:a6:08:85:
c5:04:d5:23:17:9b:be:16:00:a7:fc:ae:7f:41:54:
c2:71:02:0f:bf:67:d8:9e:56:39:e4:d0:d0:3f:e8:
93:00:9e:4f:1a:fe:98:f1:93:e9:6a:c4:c0:c8:f8:
e8:c5:2d:a6:30:38:c8:fb:c8:61:5a:8e:84:f6:6e:
95:33:09:8b:16:8c:2d:e0:6a:69:a7:f1:43:20:0c:
a5:a1:60:db:30:71:77:50:14:d2:b7:9e:24:b9:ef:
90:5f:af:0d:cf:7a:49:6b:66:8f:88:ed:50:60:68:
44:7a:e2:5b:98:4f:09:a9:31:2f:ec:07:2a:ce:eb:
12:fb:86:2f:0e:38:2b:bf:3d:8b:1f:be:2c:e1:47:
ba:8f:db:af:e7:9a:69:48:d7:28:7f:a7:b8:9f:c2:
f0:6f:c6:c6:08:96:63:8c:fe:ec:e2:2b:21:fa:f1:
3b:ab:3e:c3:10:df:f0:c9:36:da:8f:9d:2e:dd:ac:
69:e3:3c:2b:92:cd:36:6b:15:a2:be:4d:19:cd:7c:
6d:c5:92:1e:67:43:74:9e:e2:b6:84:42:9c:79:5e:
49:d1:84:c8:7d:84:44:7d:21:df:d2:48:db:98:e9:
ea:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2A:45:38:D9:E6:5C:95:B3:12:8D:0F:0A:1C:0E:E0:DC:3D:5C:24
X509v3 Authority Key Identifier:
keyid:8B:30:16:7C:DA:20:FE:7E:DC:FC:64:7A:C8:6B:14:BB:27:E4:30:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8B30167CDA20FE7EDCFC647AC86B14BB27E430C8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/3136302e3139312e3233352e302f32342d3234203d3e20313534343130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.191.235.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:dd:41:00:7f:47:28:e1:29:aa:da:cb:26:22:a5:7e:13:12:
b3:d2:9c:1b:59:97:4a:cb:c9:3f:bf:33:b0:93:5f:e5:99:01:
24:0c:aa:f9:bd:7a:43:d4:fc:1e:d9:97:bb:17:1c:9a:eb:f8:
c0:3e:45:7e:63:1d:08:a8:ad:7b:17:e9:cb:f9:03:df:ae:b7:
f4:59:ee:1b:f0:be:31:30:a7:b2:6b:34:f4:82:aa:cd:43:90:
b8:de:b6:59:1d:48:42:2e:fc:9f:df:b8:1b:37:2c:42:c6:e5:
ca:41:da:39:1e:d1:54:53:62:b0:a2:74:59:c2:0b:9a:82:85:
85:da:c9:a8:d9:1f:12:80:ce:e7:54:f2:97:d5:72:a5:80:bb:
f6:7f:da:9f:64:c1:07:62:31:c3:5c:f6:66:5f:ef:e4:df:db:
d3:07:c2:b9:13:83:37:b9:95:ac:6f:10:ac:d6:4b:23:44:72:
3e:04:a9:20:10:37:b2:42:67:67:71:0e:58:3a:cb:25:40:70:
4d:c4:06:f1:13:75:89:6c:89:27:02:ae:ba:5c:9b:4d:1d:00:
db:6d:94:2b:15:68:08:d4:32:8b:f5:8f:3a:e2:43:8b:d4:1c:
17:dc:7c:d2:dd:cb:d7:da:d6:c3:e3:cf:b1:22:37:d0:f6:a8:
f0:60:5b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:07:28 2026 by rpki-client