
$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3131362e36382e3136392e302f32342d3234203d3e203538333839.roa
File: 3131362e36382e3136392e302f32342d3234203d3e203538333839.roa (raw, json)
Hash identifier: fyoun5yAffEyNoZVw5/8vDBbq/Dni4mMDVlnAnCxIdI=
Subject key identifier: AD:BC:2D:E0:20:46:E6:6B:2E:47:59:BA:DC:94:3D:A3:8C:9F:FB:D9
Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6
Certificate serial: 3F52375196D09E7A8C3932992EC7F054B98BE69A
Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3131362e36382e3136392e302f32342d3234203d3e203538333839.roa
Signing time: Fri 17 Apr 2026 05:49:56 +0000
ROA not before: Fri 17 Apr 2026 05:44:56 +0000
ROA not after: Fri 16 Apr 2027 05:49:56 +0000
asID: 58389
IP address blocks: 116.68.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl
rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 06:17:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:52:37:51:96:d0:9e:7a:8c:39:32:99:2e:c7:f0:54:b9:8b:e6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6
Validity
Not Before: Apr 17 05:44:56 2026 GMT
Not After : Apr 16 05:49:56 2027 GMT
Subject: CN=ADBC2DE02046E66B2E4759BADC943DA38C9FFBD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:48:ae:8e:37:d1:dd:c2:49:56:77:cb:05:88:
55:46:69:90:2b:e0:c5:eb:5f:f8:2b:30:50:e5:b7:
e9:6b:07:3d:5d:26:4f:3b:b7:6d:40:35:09:a7:a5:
0e:cf:44:04:31:93:ec:2c:d6:9b:df:dc:37:1c:2e:
5b:6c:9c:62:d8:ea:a6:fd:b1:b2:73:fa:7a:35:9f:
03:b8:ae:73:a2:1e:4e:78:6d:49:3e:65:34:b9:3f:
ee:fb:30:df:6f:04:07:c4:5e:00:d2:a9:21:d5:c6:
c9:ec:fa:ef:82:3e:71:7d:51:92:8c:ce:94:0f:d8:
b0:95:f8:44:e2:d4:d7:e2:a0:9a:7b:4c:04:0e:54:
41:ab:6f:6b:b8:02:cc:4c:10:57:25:2d:b9:01:dd:
d2:0c:88:a2:d0:18:8b:45:f9:34:9c:b7:3e:f9:c3:
d4:3f:28:56:a9:96:00:11:07:ef:81:3a:3b:4d:6b:
80:f0:22:ab:97:f1:91:5a:4e:eb:ee:b3:ed:0b:8f:
2e:78:5d:6c:c5:ec:3a:d9:b0:3a:b8:64:e9:5d:eb:
9e:76:87:f9:21:fa:1b:d4:da:f2:cb:e0:aa:26:95:
92:dc:e2:22:96:32:d6:84:be:80:3c:10:2d:7e:35:
94:c5:71:a2:4d:0e:76:58:f1:74:82:17:1e:5e:ce:
43:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BC:2D:E0:20:46:E6:6B:2E:47:59:BA:DC:94:3D:A3:8C:9F:FB:D9
X509v3 Authority Key Identifier:
keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3131362e36382e3136392e302f32342d3234203d3e203538333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.68.169.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:c2:c9:7d:1c:40:59:1b:b0:5c:f7:87:3d:55:66:97:fb:19:
a3:84:f2:91:c7:00:37:b1:3c:f4:9d:89:aa:6b:32:e4:df:3b:
3b:50:b8:5f:69:6e:69:04:d5:36:2a:9c:51:45:fb:ec:43:0e:
9d:db:47:0e:60:3c:93:43:b7:93:c6:16:cb:c7:72:28:65:1a:
47:9e:7d:da:2f:a0:ba:fe:15:de:a8:ef:a7:7f:55:d3:8d:4c:
95:0c:fd:c1:0b:47:48:7f:e2:d2:74:09:69:30:95:6b:df:5c:
cd:64:fd:46:f3:ea:d6:1f:b9:f2:38:47:ca:be:c5:63:93:e1:
0b:b7:13:27:ba:5c:53:c3:e2:b3:fc:74:33:3f:23:69:1c:fe:
4d:2b:ed:94:d6:a1:ef:80:19:aa:3c:64:dc:22:db:b6:a6:e7:
c7:be:31:f6:40:80:52:32:ec:2e:a0:b4:f6:5f:48:cf:3a:f0:
4f:7e:99:9b:72:03:8c:73:e3:00:66:c7:8b:31:0a:7d:70:04:
8f:16:4d:05:a9:6e:34:ce:77:a4:da:0b:27:81:57:09:47:1b:
8a:e2:a4:bf:e3:66:e6:a0:2c:b0:28:50:32:e1:86:21:92:54:
39:50:11:80:2a:f0:13:de:6a:95:84:d0:7c:85:21:02:ef:1d:
43:ac:f7:56
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUP1I3UZbQnnqMOTKZLsfwVLmL5powDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF
NEQ1RkRFNjAeFw0yNjA0MTcwNTQ0NTZaFw0yNzA0MTYwNTQ5NTZaMDMxMTAvBgNV
BAMTKEFEQkMyREUwMjA0NkU2NkIyRTQ3NTlCQURDOTQzREEzOEM5RkZCRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKSK6ON9HdwklWd8sFiFVGaZAr
4MXrX/grMFDlt+lrBz1dJk87t21ANQmnpQ7PRAQxk+ws1pvf3DccLltsnGLY6qb9
sbJz+no1nwO4rnOiHk54bUk+ZTS5P+77MN9vBAfEXgDSqSHVxsns+u+CPnF9UZKM
zpQP2LCV+ETi1NfioJp7TAQOVEGrb2u4AsxMEFclLbkB3dIMiKLQGItF+TSctz75
w9Q/KFaplgARB++BOjtNa4DwIquX8ZFaTuvus+0Ljy54XWzF7DrZsDq4ZOld6552
h/kh+hvU2vLL4KomlZLc4iKWMtaEvoA8EC1+NZTFcaJNDnZY8XSCFx5ezkMxAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUrbwt4CBG5msuR1m63JQ9o4yf+9kwHwYDVR0j
BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx
NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1
RkRFNi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05
NGE2LTc5M2JkYmRhMzc3Ny8wLzMxMzEzNjJlMzYzODJlMzEzNjM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODMzMzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHREqTANBgkqhkiG
9w0BAQsFAAOCAQEAjsLJfRxAWRuwXPeHPVVml/sZo4TykccAN7E89J2Jqmsy5N87
O1C4X2luaQTVNiqcUUX77EMOndtHDmA8k0O3k8YWy8dyKGUaR5592i+guv4V3qjv
p39V041MlQz9wQtHSH/i0nQJaTCVa99czWT9RvPq1h+58jhHyr7FY5PhC7cTJ7pc
U8Pis/x0Mz8jaRz+TSvtlNah74AZqjxk3CLbtqbnx74x9kCAUjLsLqC09l9Izzrw
T36Zm3IDjHPjAGbHizEKfXAEjxZNBaluNM53pNoLJ4FXCUcbiuKkv+Nm5qAssChQ
MuGGIZJUOVARgCrwE95qlYTQfIUhAu8dQ6z3Vg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:25:10 2026 by rpki-client