
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137352e302f32342d3234203d3e2039333431.roa
File: 3131392e3235322e3137352e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier: ZX3rJ1fKhMeCkhc2YNCMwGzjH/m461CxUBlW+Q+rzCc=
Subject key identifier: D2:25:75:59:E6:08:0B:7F:49:27:11:73:20:FF:E3:11:07:B0:C6:DC
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 11756A6A809B7302576056FE39D035E120558F58
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137352e302f32342d3234203d3e2039333431.roa
Signing time: Sun 22 Feb 2026 07:00:02 +0000
ROA not before: Sun 22 Feb 2026 06:55:02 +0000
ROA not after: Sun 21 Feb 2027 07:00:02 +0000
asID: 9341
IP address blocks: 119.252.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 02:10:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:75:6a:6a:80:9b:73:02:57:60:56:fe:39:d0:35:e1:20:55:8f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Feb 22 06:55:02 2026 GMT
Not After : Feb 21 07:00:02 2027 GMT
Subject: CN=D2257559E6080B7F4927117320FFE31107B0C6DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a1:da:b5:4e:13:12:88:da:f3:c5:4f:15:3c:
4e:45:36:db:59:05:f3:d4:7a:dd:15:58:1b:45:4f:
f8:cf:8f:4b:56:da:90:c6:bd:13:d7:6a:37:96:21:
30:06:b0:dc:d3:5f:9f:8e:b7:64:f2:e7:f2:7f:c0:
7b:2e:c5:d9:38:58:9c:20:22:d8:5b:2d:5b:ae:04:
88:ad:d3:4b:13:a0:4d:80:a7:e7:71:62:cb:ba:77:
eb:ab:2b:3e:d9:e1:da:f9:92:10:6c:9e:82:b2:2a:
54:e1:78:c0:47:61:15:4d:45:f4:09:d4:e1:ea:1b:
69:fb:e2:76:28:3a:d7:01:00:20:df:6e:d1:37:f3:
ef:25:d0:6e:f8:5b:1c:14:d6:48:f5:76:b2:26:9e:
84:fe:59:19:f0:58:db:35:a1:37:da:54:a6:c8:96:
e8:4a:8d:42:8b:3b:fd:ac:b0:4e:7e:39:9f:02:a1:
e2:3b:ef:69:98:4e:1a:58:10:ed:bb:00:2d:c5:95:
31:d8:97:4e:b9:99:4f:90:bb:c9:80:8f:af:09:dc:
d3:ef:09:59:9e:53:53:bb:fe:cd:69:c2:f5:29:8a:
90:1b:6f:76:76:52:e8:96:ea:a1:7b:3b:45:07:00:
14:31:0d:82:51:e9:cf:ae:88:da:44:96:bf:a0:ea:
d6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:25:75:59:E6:08:0B:7F:49:27:11:73:20:FF:E3:11:07:B0:C6:DC
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3131392e3235322e3137352e302f32342d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.252.175.0/24
Signature Algorithm: sha256WithRSAEncryption
99:82:0c:34:e8:bf:fd:62:6b:ed:ae:56:7e:af:7a:53:1f:5f:
60:7b:7f:2f:10:5b:1c:a1:88:90:87:a8:d0:b1:7a:dc:e5:6b:
52:59:5c:6e:1a:dc:32:72:58:c1:f8:a9:09:71:e5:5b:4f:f5:
5c:ab:27:6b:9a:eb:2b:c1:69:ab:b8:19:3a:ce:9d:a5:20:4f:
90:1f:74:94:48:81:68:ea:90:0b:1f:f0:7e:0e:f5:5f:80:80:
54:ef:f3:56:0f:5c:5e:27:2d:8a:98:b8:18:d6:a6:05:93:ac:
91:c9:d8:ca:72:c2:84:49:37:47:1f:1b:52:b3:81:d2:93:94:
bb:05:fc:95:6a:d9:90:e0:7c:d2:1d:55:a6:d1:67:b5:56:86:
89:f0:6b:2b:12:af:ae:6a:f7:ea:e5:b7:9f:88:74:48:ba:3f:
f1:58:a4:17:d0:0a:64:42:af:23:57:79:0b:bc:27:28:66:f8:
5a:2e:ab:3c:e7:33:2b:27:ce:98:cd:71:48:b6:37:15:24:0c:
b6:37:89:b8:c6:bc:d5:08:44:84:96:27:3f:82:6a:78:33:be:
ea:f3:74:4d:9e:cf:d9:cf:c1:26:9d:0f:33:73:bf:70:df:b9:
ac:d6:c1:7b:cf:90:61:94:28:5d:59:09:86:d8:2b:8c:7e:1d:
27:3d:ee:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:48:33 2026 by rpki-client