
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e31302e302f32332d3234203d3e20313331303735.roa
File: 3135312e3135382e31302e302f32332d3234203d3e20313331303735.roa (raw, json)
Hash identifier: cqvatD7Cg6pNEzgIw2WwWbtZBJHhttbVP+mmzWaLbBQ=
Subject key identifier: BA:27:09:88:8B:EB:17:9B:11:16:25:AA:2E:50:BD:17:43:26:0A:4C
Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA
Certificate serial: 148CC5858DA11954CAF9E5FCFDAED6E9D13EBDD2
Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e31302e302f32332d3234203d3e20313331303735.roa
Signing time: Tue 24 Feb 2026 03:33:52 +0000
ROA not before: Tue 24 Feb 2026 03:28:52 +0000
ROA not after: Tue 23 Feb 2027 03:33:52 +0000
asID: 131075
IP address blocks: 151.158.10.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 18:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:8c:c5:85:8d:a1:19:54:ca:f9:e5:fc:fd:ae:d6:e9:d1:3e:bd:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA
Validity
Not Before: Feb 24 03:28:52 2026 GMT
Not After : Feb 23 03:33:52 2027 GMT
Subject: CN=BA2709888BEB179B111625AA2E50BD1743260A4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:30:59:53:4b:71:76:1f:6b:ef:73:1f:cb:e0:
df:5a:9a:c0:6a:93:aa:96:ec:64:b3:d7:e0:8c:63:
a3:36:2b:69:e8:b2:4e:bd:a0:12:a7:02:3b:35:c3:
be:a4:db:bd:28:01:cb:db:94:a4:53:c5:40:d9:71:
1a:78:01:ef:c4:b0:82:47:48:0e:e7:03:7b:ea:85:
db:7f:bf:cb:ad:16:8e:23:3e:2c:d1:6f:6d:a2:a0:
e6:58:45:40:bc:90:c7:a6:53:27:9c:61:db:60:b4:
22:71:19:b2:9c:3e:dc:2a:6c:a5:16:6f:89:3e:59:
8b:13:69:ca:df:c6:b8:ee:93:d4:49:8e:e5:48:00:
32:53:d1:35:0a:e9:74:af:8b:8c:67:26:49:68:2f:
72:10:d7:d5:58:79:56:16:ec:1d:09:7e:46:e2:09:
7d:5e:14:ed:90:d6:6f:50:d7:e6:a8:a2:86:52:f6:
fb:eb:16:39:78:38:8a:28:76:1a:c4:8c:20:bc:be:
0c:0f:a3:65:8b:6e:c4:00:49:92:d3:8e:2f:33:2a:
76:b0:a0:91:86:d9:bd:6a:ea:7f:c6:a7:35:94:49:
c7:07:28:ac:a1:e4:3f:ca:26:a9:8e:a5:c0:57:d7:
10:9b:e0:dc:3f:b1:c6:e8:47:35:c6:d1:56:d4:ed:
46:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:27:09:88:8B:EB:17:9B:11:16:25:AA:2E:50:BD:17:43:26:0A:4C
X509v3 Authority Key Identifier:
keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e31302e302f32332d3234203d3e20313331303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.158.10.0/23
Signature Algorithm: sha256WithRSAEncryption
46:2c:fc:33:aa:87:2e:1e:7f:25:0b:59:e9:3a:b1:e5:49:61:
b3:3e:c8:24:f9:a8:91:82:95:52:6c:24:67:c7:95:ab:04:93:
33:43:18:96:7a:90:c2:48:21:ea:a6:15:00:17:b6:ac:bb:7d:
d5:28:b8:7c:d3:13:f8:41:61:8f:75:0c:87:0d:4c:e4:58:2a:
df:a7:36:3f:08:2f:7b:fc:a9:95:c5:d4:cd:e1:b4:2a:69:ed:
0f:25:ef:a5:27:3d:73:ec:41:86:95:f8:17:d0:ff:d5:44:1f:
3b:91:7e:7f:b8:47:76:19:c4:8a:b7:36:d4:8e:93:ed:6d:4c:
93:2a:3f:7a:26:27:d1:ca:4f:24:ee:77:37:79:4a:1e:d6:7b:
d0:c6:40:fc:b9:7f:26:cc:1c:56:47:a7:62:ef:28:85:c7:93:
f6:29:79:d5:ae:5b:5f:ea:cf:16:cb:90:17:eb:52:24:ed:bb:
93:5d:bb:0f:73:8e:b6:1f:a7:99:eb:7e:f7:05:9f:26:c0:3d:
42:29:53:84:d9:db:44:30:ad:12:d2:b2:e8:4f:a2:9c:e6:63:
2c:36:c9:92:4d:c2:44:6b:35:b6:c7:f6:23:84:de:b4:e0:11:
dc:49:0d:a0:1f:1e:fd:9a:18:b4:88:ac:8e:35:40:fb:25:40:
97:80:b0:5a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIUFIzFhY2hGVTK+eX8/a7W6dE+vdIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjM0NUYxMTVB
QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBMB4XDTI2MDIyNDAzMjg1MloX
DTI3MDIyMzAzMzM1MlowMzExMC8GA1UEAxMoQkEyNzA5ODg4QkVCMTc5QjExMTYy
NUFBMkU1MEJEMTc0MzI2MEE0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOUwWVNLcXYfa+9zH8vg31qawGqTqpbsZLPX4IxjozYraeiyTr2gEqcCOzXD
vqTbvSgBy9uUpFPFQNlxGngB78SwgkdIDucDe+qF23+/y60WjiM+LNFvbaKg5lhF
QLyQx6ZTJ5xh22C0InEZspw+3CpspRZviT5ZixNpyt/GuO6T1EmO5UgAMlPRNQrp
dK+LjGcmSWgvchDX1Vh5VhbsHQl+RuIJfV4U7ZDWb1DX5qiihlL2++sWOXg4iih2
GsSMILy+DA+jZYtuxABJktOOLzMqdrCgkYbZvWrqf8anNZRJxwcorKHkP8omqY6l
wFfXEJvg3D+xxuhHNcbRVtTtRpsCAwEAAaOCAgEwggH9MB0GA1UdDgQWBBS6JwmI
i+sXmxEWJaouUL0XQyYKTDAfBgNVHSMEGDAWgBQSNF8RWsS2KlH1J0xUyB6GRjvQ
ujAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVBQzRCNjJB
NTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIy
QTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi9FalJmRVZyRXRpcFI5U2RNVk1n
ZWhrWTcwTG8uY2VyMIGEBggrBgEFBQcBCwR4MHYwdAYIKwYBBQUHMAuGaHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzAvMzEzNTMxMmUz
MTM1MzgyZTMxMzAyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMTMzMzEzMDM3MzUu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAGXngowDQYJKoZIhvcNAQELBQADggEBAEYs/DOqhy4efyULWek6
seVJYbM+yCT5qJGClVJsJGfHlasEkzNDGJZ6kMJIIeqmFQAXtqy7fdUouHzTE/hB
YY91DIcNTORYKt+nNj8IL3v8qZXF1M3htCpp7Q8l76UnPXPsQYaV+BfQ/9VEHzuR
fn+4R3YZxIq3NtSOk+1tTJMqP3omJ9HKTyTudzd5Sh7We9DGQPy5fybMHFZHp2Lv
KIXHk/YpedWuW1/qzxbLkBfrUiTtu5Nduw9zjrYfp5nrfvcFnybAPUIpU4TZ20Qw
rRLSsuhPopzmYyw2yZJNwkRrNbbH9iOE3rTgEdxJDaAfHv2aGLSIrI41QPslQJeA
sFo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:49:39 2026 by rpki-client