
$ rpki-client -vvf repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/3135372e31302e36362e302f32342d3234203d3e20313532333531.roa
File: 3135372e31302e36362e302f32342d3234203d3e20313532333531.roa (raw, json)
Hash identifier: q9toowJOz16uhrBCtofU3traOAjII8kFB2udCQItBiM=
Subject key identifier: 41:21:67:9B:81:02:DC:A6:1C:C2:AB:97:57:3C:0D:2A:D3:5B:A8:B9
Certificate issuer: /CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1
Certificate serial: 10E454E829A00F72A1168B028520249DE5F8FD69
Authority key identifier: 98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/3135372e31302e36362e302f32342d3234203d3e20313532333531.roa
Signing time: Wed 01 Apr 2026 08:02:44 +0000
ROA not before: Wed 01 Apr 2026 07:57:44 +0000
ROA not after: Wed 31 Mar 2027 08:02:44 +0000
asID: 152351
IP address blocks: 157.10.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl
rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 13:42:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:e4:54:e8:29:a0:0f:72:a1:16:8b:02:85:20:24:9d:e5:f8:fd:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1
Validity
Not Before: Apr 1 07:57:44 2026 GMT
Not After : Mar 31 08:02:44 2027 GMT
Subject: CN=4121679B8102DCA61CC2AB97573C0D2AD35BA8B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e2:d1:6c:2d:96:39:1f:22:15:64:51:72:90:
5d:1b:14:2f:93:b4:d0:da:17:07:ef:e5:13:64:9c:
10:5d:79:9c:b7:72:5f:0e:34:0d:74:b8:85:77:f6:
9e:51:2c:f0:aa:c5:52:5f:2f:1b:56:6f:62:3b:60:
39:70:1b:2c:e5:ad:64:3d:43:91:bc:3c:38:cd:94:
3c:84:78:72:e1:91:70:99:6f:87:9a:2c:ad:fa:83:
91:23:02:04:e5:69:56:15:a9:65:9d:19:f5:d3:c0:
01:9a:18:77:f1:56:b5:22:da:18:b9:bc:93:b4:0d:
ad:ff:a0:a3:ce:0b:03:ca:85:a6:fc:fa:8c:78:cc:
63:43:4c:52:84:de:f3:b4:4b:63:ae:64:68:bf:d9:
4c:6f:2c:de:17:2f:d4:b1:c0:56:93:7f:b7:84:7a:
a1:bf:cb:76:3e:46:7c:93:0f:f1:07:f3:d6:9e:4d:
4d:ed:fb:2e:d1:b2:8b:9f:50:2c:84:1a:08:fd:be:
ba:25:c9:43:e2:da:4a:ce:c4:89:45:f2:3a:0f:f7:
0a:8f:59:f6:cc:6c:42:a9:d2:ea:20:5c:85:4f:c3:
15:65:51:80:53:30:9e:58:8b:2d:41:00:74:f7:37:
dd:c9:37:f6:b1:9b:04:f1:ec:d0:ef:12:d2:f0:04:
08:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:21:67:9B:81:02:DC:A6:1C:C2:AB:97:57:3C:0D:2A:D3:5B:A8:B9
X509v3 Authority Key Identifier:
keyid:98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/3135372e31302e36362e302f32342d3234203d3e20313532333531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.10.66.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:a2:96:a7:08:fb:52:5a:57:c0:4d:22:f8:d3:27:28:f9:a3:
7e:34:a6:1e:e1:25:8d:32:b1:8e:a6:a7:83:86:7c:8c:dd:12:
5a:6f:4b:57:c9:51:7c:86:19:03:94:c6:67:1f:98:a7:45:66:
58:a6:dd:0d:f9:53:59:c6:40:57:2a:a0:13:f0:e4:34:7d:3d:
d8:19:89:d4:f2:ac:d6:51:81:47:1f:6d:6c:dc:b8:ab:5d:e4:
39:2f:ab:f0:5e:a3:07:59:f6:3d:bf:75:87:3c:f9:d1:2a:02:
03:77:4c:56:cb:04:2c:91:74:65:63:c4:4f:aa:df:68:d4:e6:
c1:b8:e7:04:2f:c3:12:4f:81:5e:4e:41:f7:b7:c2:dc:95:d7:
fc:ac:c6:e0:ad:b5:0c:5e:3b:ad:62:5b:bd:18:34:72:6f:e7:
60:69:86:bf:36:df:5e:4d:fe:b4:6e:bd:46:8e:b1:72:a1:dd:
9e:be:ac:a4:d7:49:67:90:d9:37:8b:20:62:39:9f:8b:e4:31:
e0:c6:54:06:4c:06:75:4d:cc:43:a4:ca:53:ec:da:07:26:e4:
84:4f:ac:69:df:e6:45:e0:c6:18:44:51:28:40:5a:93:de:33:
fa:c0:67:1a:f3:60:cc:8b:84:a1:1e:6a:b4:31:89:e9:f6:05:
c4:82:81:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:14:06 2026 by rpki-client