
$ rpki-client -vvf repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/3135372e31302e36362e302f32332d3234203d3e20313532333531.roa
File: 3135372e31302e36362e302f32332d3234203d3e20313532333531.roa (raw, json)
Hash identifier: Uw+aclh2qxCETkaiurOCAIwByyRhtpJmoX60PZbRrk0=
Subject key identifier: 7B:A0:50:98:C1:84:56:D4:9A:8B:E8:85:AD:D8:9C:D8:37:E7:3A:70
Certificate issuer: /CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1
Certificate serial: 7146D29F11AEA6472298C3E638EB2650F1586FD6
Authority key identifier: 98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/3135372e31302e36362e302f32332d3234203d3e20313532333531.roa
Signing time: Wed 01 Apr 2026 08:02:43 +0000
ROA not before: Wed 01 Apr 2026 07:57:43 +0000
ROA not after: Wed 31 Mar 2027 08:02:43 +0000
asID: 152351
IP address blocks: 157.10.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl
rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 13:42:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:46:d2:9f:11:ae:a6:47:22:98:c3:e6:38:eb:26:50:f1:58:6f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1
Validity
Not Before: Apr 1 07:57:43 2026 GMT
Not After : Mar 31 08:02:43 2027 GMT
Subject: CN=7BA05098C18456D49A8BE885ADD89CD837E73A70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dc:48:67:a5:5f:21:0b:e9:e8:82:ff:6e:e2:
f8:ea:f0:ad:a4:60:5b:a1:f1:ae:51:da:88:73:56:
cf:69:bc:fd:95:33:39:42:ff:7b:d5:1d:ca:3a:a7:
a1:89:ee:cd:64:d9:c7:20:61:61:be:fc:02:1d:a1:
95:a7:07:ee:37:10:1c:22:a2:a4:e2:d0:9a:2b:4e:
36:3d:7f:54:37:4d:5c:9f:7d:c6:c9:82:c9:91:c0:
9d:94:5e:32:14:9a:95:35:8f:82:84:fe:aa:92:0a:
6c:96:b5:98:ce:3b:6c:a3:2b:5a:93:29:a7:e9:60:
00:a0:20:d4:d6:66:8a:88:c6:46:1d:a7:6c:1c:2d:
f1:16:af:d5:67:37:98:4e:17:9d:8e:82:6d:cb:7e:
d7:80:7a:03:e9:72:b5:96:95:5d:d1:99:a8:ba:71:
78:6d:21:51:f0:55:16:69:68:ab:f7:f6:4b:3c:7d:
01:fd:2d:67:75:48:76:2a:56:49:a0:d4:7e:f3:ff:
a2:eb:e4:29:89:ee:53:bf:99:8e:97:71:e6:76:21:
8d:95:99:b8:cf:c2:ad:c8:c7:9d:6e:3d:5e:e4:ca:
1e:5d:9d:19:86:11:aa:8e:47:50:c3:36:55:8f:0d:
d0:6c:a7:b3:ea:74:8c:fe:9f:a7:03:90:fa:01:69:
e5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A0:50:98:C1:84:56:D4:9A:8B:E8:85:AD:D8:9C:D8:37:E7:3A:70
X509v3 Authority Key Identifier:
keyid:98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/3135372e31302e36362e302f32332d3234203d3e20313532333531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.10.66.0/23
Signature Algorithm: sha256WithRSAEncryption
54:7b:69:77:d0:41:3b:28:a7:dd:50:bd:d1:89:40:99:34:ea:
01:d0:bc:d2:f0:e9:00:d6:de:23:37:9b:86:8d:2b:6a:db:89:
97:16:53:a4:7b:54:a0:53:b8:0c:be:4f:00:57:64:55:66:f5:
40:74:d0:18:ee:38:6f:7c:89:13:76:69:de:df:b8:77:d6:cd:
74:a0:23:b1:ba:9c:03:41:72:c7:3d:11:d4:14:86:86:e2:19:
77:c6:e7:ae:62:1e:1d:0f:a9:55:27:8f:09:6c:9d:91:fe:7f:
4a:0b:db:f0:d9:19:99:e0:57:74:3b:a3:12:7f:b4:2b:10:d6:
44:0f:78:cb:47:65:1d:60:9e:b3:4a:b7:e8:aa:e2:8b:4a:2c:
bd:5e:1c:21:7a:c4:1a:d5:de:df:8a:c4:ff:61:21:4b:5d:30:
96:77:6c:48:4a:6b:6a:7a:25:ba:20:8d:48:77:88:d5:78:f2:
94:b5:66:a9:dd:f1:4b:d9:91:f1:49:0f:09:58:67:6d:4b:ac:
93:67:f0:6f:ec:dd:69:16:61:ea:a6:e6:88:60:7f:12:0f:42:
d0:5d:3c:29:de:a0:b9:37:0b:3e:7e:4c:2c:32:b0:20:9a:4f:
a9:65:39:08:c0:45:dc:3b:21:62:e3:a8:7c:d5:c7:97:31:d3:
8b:06:1a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:32:06 2026 by rpki-client