
$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/34332e3235322e3138342e302f32342d3234203d3e203538383136.roa
File: 34332e3235322e3138342e302f32342d3234203d3e203538383136.roa (raw, json)
Hash identifier: 6MaTCwYtKpnx6eg3KSD1AYOyXHo3i56ljG0wVGw46pk=
Subject key identifier: A0:18:8B:C7:61:5C:22:AB:F0:E1:A4:1E:97:EE:88:E3:81:14:8D:84
Certificate issuer: /CN=2042008AEC80152F373D2A04DFD3893EE2F92166
Certificate serial: 1417837DA476C4B10845309F68B6730672C58D00
Authority key identifier: 20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/34332e3235322e3138342e302f32342d3234203d3e203538383136.roa
Signing time: Thu 12 Feb 2026 11:02:02 +0000
ROA not before: Thu 12 Feb 2026 10:57:02 +0000
ROA not after: Thu 11 Feb 2027 11:02:02 +0000
asID: 58816
IP address blocks: 43.252.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl
rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 00:52:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:17:83:7d:a4:76:c4:b1:08:45:30:9f:68:b6:73:06:72:c5:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2042008AEC80152F373D2A04DFD3893EE2F92166
Validity
Not Before: Feb 12 10:57:02 2026 GMT
Not After : Feb 11 11:02:02 2027 GMT
Subject: CN=A0188BC7615C22ABF0E1A41E97EE88E381148D84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c1:58:a3:c0:50:62:95:29:e7:fc:92:39:a7:
cf:a6:6e:0e:18:54:68:6b:0f:17:ce:c5:f0:57:39:
1d:59:31:d0:e7:39:b2:7a:a7:96:d8:40:c3:0f:2c:
c6:4d:e2:59:a7:aa:54:00:12:95:e4:42:57:f4:36:
f2:df:b8:55:5d:0c:3a:86:e0:96:13:6b:5a:e7:65:
d2:71:d2:e3:28:c0:8c:a4:52:b2:e3:9e:e6:01:a7:
35:73:f6:4c:ef:6f:05:ef:86:22:3b:dd:31:39:d5:
57:a2:ca:9d:74:27:6c:dc:c0:4a:2c:79:cd:17:8e:
f2:9e:fd:5c:4d:1b:9d:b6:e9:34:75:66:be:21:2c:
e2:4e:db:37:e8:c4:eb:e6:f0:7e:07:56:cb:74:29:
f8:3d:4e:29:85:0c:28:d3:89:21:92:8d:8f:26:40:
c4:80:36:f9:65:13:82:c8:47:75:ea:6c:cf:69:bd:
52:e1:66:ae:e4:c6:6b:c3:dd:ca:9a:53:0e:10:e3:
ef:2c:58:9d:fb:52:98:20:79:2f:b7:ca:15:a9:e2:
c3:eb:a1:cf:0b:b5:d5:64:9b:db:e3:51:11:e3:fd:
24:b4:66:81:7f:03:43:b5:4c:e9:43:23:35:f3:bf:
97:2c:f8:bd:a9:c0:6b:c5:4b:5a:b5:8c:08:f5:a3:
37:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:18:8B:C7:61:5C:22:AB:F0:E1:A4:1E:97:EE:88:E3:81:14:8D:84
X509v3 Authority Key Identifier:
keyid:20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/34332e3235322e3138342e302f32342d3234203d3e203538383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.252.184.0/24
Signature Algorithm: sha256WithRSAEncryption
10:a7:05:ec:79:85:49:fe:2f:27:e5:38:04:43:d0:04:8e:79:
4c:4b:fe:3f:e5:40:ed:43:53:fc:f7:1f:91:f3:11:55:5c:b8:
ab:ed:2c:d6:b2:68:e9:28:72:53:b2:15:a3:e7:e8:39:6a:09:
6b:9c:7d:39:fa:c2:4f:a2:94:5c:cb:0e:0b:d9:f5:7e:d8:4f:
23:10:a7:7d:e1:6c:b6:6a:45:12:2a:0a:39:a2:83:53:6d:69:
ef:04:54:08:37:7e:9a:86:c3:db:d6:f9:e1:26:0c:2e:22:16:
26:d5:c4:55:34:fd:26:9a:8b:10:5b:13:aa:0f:2c:b1:64:17:
87:33:d3:9d:61:e3:75:55:ba:55:fb:8a:fe:2b:99:6f:04:ff:
21:67:78:09:9f:7b:0f:30:8f:e8:36:6a:fa:eb:d7:7b:ff:55:
d7:79:0a:f3:9c:e9:73:63:de:0a:87:c0:89:68:b7:4a:f8:2d:
11:e3:9c:fb:5e:2d:b0:c7:28:0b:38:ec:53:06:09:3c:93:31:
92:67:a2:7f:13:69:57:58:7e:0e:69:9b:82:7b:72:03:74:50:
91:f0:03:d7:57:bc:e8:d9:2f:da:73:f6:7c:01:b7:39:b7:27:
af:a5:04:53:41:9d:7b:2a:12:e0:59:ae:52:42:59:12:70:6c:
24:eb:54:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:56:30 2026 by rpki-client