
$ rpki-client -vvf repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/3135372e31352e37362e302f32342d3234203d3e20313532333734.roa
File: 3135372e31352e37362e302f32342d3234203d3e20313532333734.roa (raw, json)
Hash identifier: tYgibkzzAtGjQKdmBmuyqmxYY+aFNcFxJWH78M/BK54=
Subject key identifier: 7F:D7:33:BD:0B:97:4F:91:E6:F0:2F:04:D8:2A:27:2D:4D:63:04:41
Certificate issuer: /CN=9D23189F67CA669A4612567DD77CC645E3AFDF71
Certificate serial: 07D8CD84F768B9A9C6A9EACE6418686513336E8A
Authority key identifier: 9D:23:18:9F:67:CA:66:9A:46:12:56:7D:D7:7C:C6:45:E3:AF:DF:71
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/3135372e31352e37362e302f32342d3234203d3e20313532333734.roa
Signing time: Mon 09 Feb 2026 16:00:00 +0000
ROA not before: Mon 09 Feb 2026 15:55:00 +0000
ROA not after: Mon 08 Feb 2027 16:00:00 +0000
asID: 152374
IP address blocks: 157.15.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.crl
rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:45:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:d8:cd:84:f7:68:b9:a9:c6:a9:ea:ce:64:18:68:65:13:33:6e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D23189F67CA669A4612567DD77CC645E3AFDF71
Validity
Not Before: Feb 9 15:55:00 2026 GMT
Not After : Feb 8 16:00:00 2027 GMT
Subject: CN=7FD733BD0B974F91E6F02F04D82A272D4D630441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4a:ef:d5:31:a0:45:ee:1a:27:fd:67:d7:c8:
ed:c3:e8:ff:af:33:7b:f0:4c:e7:df:f3:72:01:d3:
ba:1e:3d:9b:7f:51:ea:d8:36:7c:df:d2:38:81:6f:
7e:12:95:de:1a:ea:0d:5e:b5:b3:3a:f8:2e:3f:85:
ad:21:44:4a:fc:b0:34:55:68:9d:18:9e:40:2b:df:
72:3a:f8:bc:36:4a:42:7b:af:52:6b:de:4c:7e:76:
1d:bd:81:9e:41:df:e9:d1:0f:b0:ee:de:3a:43:7e:
6c:ec:07:65:16:03:48:4b:a0:11:0b:b1:4a:01:1e:
df:50:ad:e2:b1:87:8f:fc:fb:77:77:3f:41:c9:ca:
9e:aa:4d:31:2e:65:cc:a7:49:e2:5e:51:93:f3:3d:
c1:7e:be:95:b3:ed:4a:97:d9:38:19:e2:15:6b:76:
e4:9b:1b:f2:8f:1c:e1:e3:45:63:bc:f2:60:95:6d:
8c:7c:a8:17:e9:ae:d5:4a:e6:d6:e8:f0:69:b9:80:
79:cb:b7:15:14:d1:d8:95:8f:85:0a:cb:3b:6f:ef:
d7:b6:e9:07:3d:0b:be:52:b0:35:a5:b0:f9:c6:2d:
22:60:e0:d6:28:dc:cd:e7:45:70:d6:6b:4d:9b:0b:
b1:ce:48:a5:64:69:e6:d0:60:21:f2:32:a5:7f:d6:
97:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D7:33:BD:0B:97:4F:91:E6:F0:2F:04:D8:2A:27:2D:4D:63:04:41
X509v3 Authority Key Identifier:
keyid:9D:23:18:9F:67:CA:66:9A:46:12:56:7D:D7:7C:C6:45:E3:AF:DF:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/9D23189F67CA669A4612567DD77CC645E3AFDF71.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D23189F67CA669A4612567DD77CC645E3AFDF71.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/935acb07-9d5f-497f-9932-33a434d3aa32/0/3135372e31352e37362e302f32342d3234203d3e20313532333734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.15.76.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:f4:e6:c8:29:2e:8d:1b:77:1f:5b:e3:00:f3:9a:57:48:9d:
45:d3:a7:f5:c7:4f:b8:f8:9a:8f:0d:bc:f1:10:e0:78:77:f7:
ca:89:42:3d:7d:45:db:07:f0:17:38:40:4b:e1:2b:0d:07:23:
40:cc:cf:1c:bb:49:62:90:14:73:f4:2e:27:85:b6:90:97:78:
43:4e:1c:24:66:c8:f0:9b:1c:0b:67:99:78:f3:82:96:23:12:
07:cb:3b:b3:56:c7:6b:10:95:0f:c0:1e:27:90:df:35:bf:88:
85:a8:36:00:86:ce:a8:2c:bf:06:63:9f:09:fa:67:45:ee:c3:
93:b4:d4:03:88:ae:d2:0c:1b:ce:68:e8:72:94:24:f4:a6:53:
de:78:a5:19:d5:af:c6:16:f3:bb:8c:a0:7e:7e:a1:d0:a0:b1:
6e:96:c2:f6:7f:31:c3:b7:e1:3f:83:4b:21:b2:b0:d2:a8:e1:
4f:c8:28:cf:07:f0:57:94:89:78:7a:6f:a7:7f:5e:92:47:b0:
08:b1:0b:c7:30:5a:d4:8b:67:12:8f:65:6e:23:26:b0:e5:43:
94:1e:7e:6e:8a:6e:b2:b7:b5:33:1f:51:27:bc:69:83:87:66:
94:1e:9d:bb:6b:12:40:d9:19:48:ec:77:23:11:15:4a:4b:4c:
12:d7:5b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:26:40 2026 by rpki-client