
$ rpki-client -vvf repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa
File: 3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa (raw, json)
Hash identifier: I9L5VnR4U2zfA5uTPbJQ6xGjHzFDLG7oeYI2jCBnVZE=
Subject key identifier: 21:5A:CA:6F:25:75:96:98:2A:BF:E9:24:3A:64:A9:42:E9:65:91:0A
Certificate issuer: /CN=735D87BA86773AC70137CF53116358A1F3B19766
Certificate serial: 2B854D3971C50F6214B86B27349FBB87506592F9
Authority key identifier: 73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa
Signing time: Sun 05 Apr 2026 05:00:02 +0000
ROA not before: Sun 05 Apr 2026 04:55:02 +0000
ROA not after: Sun 04 Apr 2027 05:00:02 +0000
asID: 18004
IP address blocks: 115.178.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl
rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 18:25:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:85:4d:39:71:c5:0f:62:14:b8:6b:27:34:9f:bb:87:50:65:92:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735D87BA86773AC70137CF53116358A1F3B19766
Validity
Not Before: Apr 5 04:55:02 2026 GMT
Not After : Apr 4 05:00:02 2027 GMT
Subject: CN=215ACA6F257596982ABFE9243A64A942E965910A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b2:09:94:e0:74:9b:37:40:c0:27:9a:3f:c4:
3c:84:6b:48:8a:4d:61:3a:28:bd:8e:d4:95:35:b4:
be:01:fb:e3:93:24:61:30:31:0e:e8:3e:57:8e:1d:
73:18:36:f5:e6:be:be:4a:86:db:88:de:bc:50:2a:
fb:91:97:85:7f:25:5b:9d:7d:0c:2e:dd:47:e3:4c:
c7:8a:1a:be:2d:ab:09:9b:8c:56:1f:6d:ad:19:f3:
02:f9:69:f1:5c:80:99:1b:fb:31:62:89:16:58:47:
6c:57:91:e9:ca:ff:5b:c0:e7:d3:7c:96:71:d1:04:
e2:63:79:1f:53:5d:61:f0:bc:aa:ff:a9:ca:a2:44:
69:71:f0:24:8e:4d:86:6c:65:08:96:02:b7:ac:73:
29:1b:19:77:ec:33:92:99:92:e4:c3:5a:72:d5:f0:
c3:94:98:c3:5c:5f:28:e6:b7:aa:1c:6f:81:0b:1e:
bb:c3:d7:16:35:2e:41:d7:f1:7d:bd:7f:8f:f3:07:
03:3c:6e:e9:73:26:08:da:ac:4b:f7:46:3f:93:73:
36:e6:7f:59:56:ef:34:54:50:34:ee:1d:46:20:6f:
0e:07:4b:dc:45:94:1b:96:d2:97:64:0a:e5:d8:95:
08:7b:13:52:30:a6:76:0c:14:25:d7:cf:fb:a7:c6:
90:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5A:CA:6F:25:75:96:98:2A:BF:E9:24:3A:64:A9:42:E9:65:91:0A
X509v3 Authority Key Identifier:
keyid:73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.178.160.0/19
Signature Algorithm: sha256WithRSAEncryption
36:84:38:55:f1:00:29:b4:b1:1c:f0:b9:04:e2:f0:e0:d7:ef:
97:d1:9c:2e:76:ab:92:fd:7f:32:5a:ee:17:de:57:be:d1:8e:
2f:a7:18:cb:41:62:3e:d0:e6:36:f8:d0:fb:61:4b:c7:8d:8f:
79:e6:14:20:40:49:6d:bb:61:5b:d3:ab:f3:d1:df:b5:03:a6:
a1:56:f9:71:15:06:e9:c5:e9:cb:00:53:a6:6f:e3:97:c2:00:
bc:dd:3c:b2:df:a6:54:07:9e:4f:1b:e6:7d:0a:c5:cc:fe:cc:
f2:af:e0:2f:df:d4:8e:7f:6e:6b:4c:ae:a9:c9:08:d1:df:d1:
f3:68:12:21:40:82:7d:d2:9f:79:48:32:53:97:d4:b4:af:4c:
2b:8f:44:e6:ed:10:89:b3:e6:ea:25:92:3d:63:b6:74:bd:03:
6d:93:cb:43:2a:8e:ba:40:72:19:da:c4:b9:e3:37:54:4b:29:
1b:20:d3:90:5d:26:28:53:7f:43:ee:df:82:c5:80:9f:f4:e6:
b3:e1:f6:5e:27:8e:7b:15:ac:b2:88:1e:ef:b8:f7:56:7b:7a:
3a:d3:2e:4d:49:79:1f:75:4e:44:75:9c:0c:9b:e6:27:f5:66:
7d:7d:ad:d2:67:40:ec:1c:2a:05:a6:25:5c:85:19:2f:be:f9:
01:9e:70:94
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUK4VNOXHFD2IUuGsnNJ+7h1BlkvkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM1RDg3QkE4Njc3M0FDNzAxMzdDRjUzMTE2MzU4QTFG
M0IxOTc2NjAeFw0yNjA0MDUwNDU1MDJaFw0yNzA0MDQwNTAwMDJaMDMxMTAvBgNV
BAMTKDIxNUFDQTZGMjU3NTk2OTgyQUJGRTkyNDNBNjRBOTQyRTk2NTkxMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8sgmU4HSbN0DAJ5o/xDyEa0iK
TWE6KL2O1JU1tL4B++OTJGEwMQ7oPleOHXMYNvXmvr5KhtuI3rxQKvuRl4V/JVud
fQwu3UfjTMeKGr4tqwmbjFYfba0Z8wL5afFcgJkb+zFiiRZYR2xXkenK/1vA59N8
lnHRBOJjeR9TXWHwvKr/qcqiRGlx8CSOTYZsZQiWArescykbGXfsM5KZkuTDWnLV
8MOUmMNcXyjmt6ocb4ELHrvD1xY1LkHX8X29f4/zBwM8bulzJgjarEv3Rj+Tczbm
f1lW7zRUUDTuHUYgbw4HS9xFlBuW0pdkCuXYlQh7E1IwpnYMFCXXz/unxpCDAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUIVrKbyV1lpgqv+kkOmSpQullkQowHwYDVR0j
BBgwFoAUc12HuoZ3OscBN89TEWNYofOxl2YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
ZjVkMzY0YS1kYTBiLTQ1NDAtOTM0OS01OTMwYmQ3MjVjZTMvMC83MzVEODdCQTg2
NzczQUM3MDEzN0NGNTMxMTYzNThBMUYzQjE5NzY2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzM1RDg3QkE4Njc3M0FDNzAxMzdDRjUzMTE2MzU4QTFGM0Ix
OTc2Ni5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRmNWQzNjRhLWRhMGItNDU0MC05
MzQ5LTU5MzBiZDcyNWNlMy8wLzMxMzEzNTJlMzEzNzM4MmUzMTM2MzAyZTMwMmYz
MTM5MmQzMjM0MjAzZDNlMjAzMTM4MzAzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFc7KgMA0GCSqG
SIb3DQEBCwUAA4IBAQA2hDhV8QAptLEc8LkE4vDg1++X0ZwudquS/X8yWu4X3le+
0Y4vpxjLQWI+0OY2+ND7YUvHjY955hQgQEltu2Fb06vz0d+1A6ahVvlxFQbpxenL
AFOmb+OXwgC83Tyy36ZUB55PG+Z9CsXM/szyr+Av39SOf25rTK6pyQjR39HzaBIh
QIJ90p95SDJTl9S0r0wrj0Tm7RCJs+bqJZI9Y7Z0vQNtk8tDKo66QHIZ2sS54zdU
SykbINOQXSYoU39D7t+CxYCf9Oaz4fZeJ457FayyiB7vuPdWe3o60y5NSXkfdU5E
dZwMm+Yn9WZ9fa3SZ0DsHCoFpiVchRkvvvkBnnCU
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:30:24 2026 by rpki-client