
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136322e302f32342d3234203d3e2039333431.roa
File: 3131392e3235322e3136322e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: VQGdQ0rBF81NTeb4YsAUM4nzGZewbKB0Q8oRJIjx6no=
Subject key identifier: D0:00:6A:A2:C1:9F:8B:11:87:30:40:6F:13:D3:37:F8:B6:7B:B8:11
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 177D1DEC21534AAC0B26A37676BEA7122CCF365A
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136322e302f32342d3234203d3e2039333431.roa
Signing time: Sun 22 Feb 2026 07:00:02 +0000
ROA not before: Sun 22 Feb 2026 06:55:02 +0000
ROA not after: Sun 21 Feb 2027 07:00:02 +0000
asID: 9341
IP address blocks: 119.252.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 02:10:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:7d:1d:ec:21:53:4a:ac:0b:26:a3:76:76:be:a7:12:2c:cf:36:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Feb 22 06:55:02 2026 GMT
Not After : Feb 21 07:00:02 2027 GMT
Subject: CN=D0006AA2C19F8B118730406F13D337F8B67BB811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b9:db:19:18:b4:88:d3:f1:83:0e:7e:75:18:
2f:b6:ce:f5:a4:61:f4:1b:1c:d7:db:b6:e8:c8:2f:
10:9c:6c:ea:64:0c:a5:32:e4:c6:ee:f8:34:a8:b9:
0a:f5:bf:66:01:c0:7f:18:4d:78:c8:5b:b4:f8:81:
31:6f:0e:91:1d:aa:87:11:3b:72:24:e1:85:63:34:
67:5b:f2:2c:b2:48:dc:ea:3e:5e:61:6c:50:16:1e:
00:e6:cd:74:f8:e9:53:bc:50:f3:4f:80:55:4f:e5:
35:e9:e3:44:f2:c2:0a:7f:29:79:0e:64:93:9b:39:
57:e1:d3:b0:ad:1d:c1:ae:6d:95:9e:24:0a:20:28:
aa:b9:ee:ab:96:6c:7f:cd:8d:26:1c:2b:0a:0b:c1:
36:91:d7:8c:3f:6c:e8:16:75:11:d0:c7:51:45:fd:
bf:ce:83:a7:d3:40:a9:7c:c2:9b:b0:f0:33:54:40:
88:46:30:f6:1c:84:c5:a8:c3:da:03:1d:a2:ab:19:
08:a8:fc:54:26:fb:8b:5b:bf:5b:d1:0c:59:6b:6c:
a8:7b:35:b9:bc:d7:09:e4:14:53:e1:59:27:9c:45:
91:7c:24:8c:76:59:19:b1:58:b8:1f:58:4a:01:27:
46:9f:6d:67:7a:24:9e:a8:97:55:72:6e:8b:ff:82:
21:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:00:6A:A2:C1:9F:8B:11:87:30:40:6F:13:D3:37:F8:B6:7B:B8:11
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3136322e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.252.162.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:9a:7b:ce:b2:84:73:d1:f1:eb:7d:d9:f9:d5:6f:b8:e6:46:
3e:60:56:e1:26:ab:a3:15:e8:ae:6d:f2:43:8a:12:5c:08:c8:
4f:8b:a6:1d:f8:9e:75:81:75:c1:c1:f9:a3:96:a6:0d:2d:76:
65:f4:20:ae:6b:a8:8f:e4:5f:82:ee:b0:95:9d:ab:d9:a2:de:
26:58:87:63:4f:bf:2c:ca:72:9e:bb:f2:86:36:54:68:f9:10:
14:a8:31:cd:3d:8f:52:ad:ee:fb:37:08:a0:48:c9:77:92:14:
80:87:b1:2c:6f:a5:3b:7d:95:e3:28:10:24:96:a5:6f:be:92:
df:88:e4:f4:bb:67:71:b8:57:09:c7:82:74:d0:a0:63:72:8a:
60:9c:ae:e0:76:34:ab:67:3a:fe:0b:42:ad:15:03:e1:0d:c5:
57:7e:24:4e:dd:48:86:28:0e:f3:9e:7d:43:8c:66:2b:3c:4a:
a9:e3:58:73:8e:73:bd:07:5f:5f:ee:15:e1:28:56:a4:f2:41:
fc:dd:7a:dc:ac:dc:1b:03:7a:d7:6a:e1:18:07:84:0c:08:09:
4b:9b:21:15:28:6c:bc:0c:37:02:d2:9f:5f:0b:5b:c8:3b:38:
0b:6e:68:39:f8:5e:b1:28:8e:fc:97:62:65:12:23:cf:97:cd:
cd:20:34:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:19:08 2026 by rpki-client