
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e3230342e302f32332d3234203d3e20313534353232.roa
File: 3135312e3135382e3230342e302f32332d3234203d3e20313534353232.roa (raw, json)
Hash identifier: DjXkhi3atbqk0A2teZVs4TmRpsS8LWjuJgAMaAjN4zY=
Subject key identifier: D0:61:95:9F:AD:BE:0B:8B:D9:96:19:9F:42:4F:14:8E:81:33:E2:93
Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA
Certificate serial: 6BE19B98D8CB50FBE4C20A360440CB0105FE5E99
Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e3230342e302f32332d3234203d3e20313534353232.roa
Signing time: Thu 26 Feb 2026 04:20:42 +0000
ROA not before: Thu 26 Feb 2026 04:15:42 +0000
ROA not after: Thu 25 Feb 2027 04:20:42 +0000
asID: 154522
IP address blocks: 151.158.204.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 18:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:e1:9b:98:d8:cb:50:fb:e4:c2:0a:36:04:40:cb:01:05:fe:5e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA
Validity
Not Before: Feb 26 04:15:42 2026 GMT
Not After : Feb 25 04:20:42 2027 GMT
Subject: CN=D061959FADBE0B8BD996199F424F148E8133E293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2e:ce:12:e5:32:f0:ab:e5:65:a4:79:99:27:
63:65:89:c9:e3:8a:51:3e:70:98:cf:20:53:dd:42:
67:fb:01:ce:0d:0f:62:72:4a:d9:74:c0:f9:4f:51:
3c:a1:d4:87:b1:f6:02:4b:92:30:7e:c9:fb:2d:20:
ec:71:dc:73:5a:18:b6:b5:4e:83:30:ac:3c:07:d6:
48:c8:19:24:9d:a1:e5:d0:bf:58:fc:9c:40:bd:cd:
38:a6:0d:38:df:19:bd:6b:49:d9:a3:75:2b:62:21:
4b:a1:24:a8:7c:d5:c5:a8:31:0e:ab:fc:78:65:41:
88:42:a1:0e:35:56:fe:91:1d:34:dd:1b:cc:d2:c8:
14:3d:e0:79:cc:ab:7e:e5:c7:b0:7c:e3:eb:e4:28:
df:68:f6:bb:69:8a:f3:b5:40:86:bb:04:b2:aa:ad:
37:0c:c5:fd:cd:94:7c:cc:81:13:61:9a:6b:12:46:
f6:51:e0:4c:72:5f:0a:ba:77:d1:7e:e9:f2:f6:26:
0e:10:e3:a1:e5:58:0f:49:7b:7b:a0:da:e1:e2:d2:
d8:e8:49:64:a3:4a:67:bf:fc:e4:5f:cb:be:a6:e0:
d5:0c:55:08:e0:70:07:4f:7c:e2:c2:58:d4:26:a3:
c3:f0:42:f0:b2:e9:e2:3a:64:ef:90:4f:5e:1f:df:
ff:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:61:95:9F:AD:BE:0B:8B:D9:96:19:9F:42:4F:14:8E:81:33:E2:93
X509v3 Authority Key Identifier:
keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e3230342e302f32332d3234203d3e20313534353232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.158.204.0/23
Signature Algorithm: sha256WithRSAEncryption
c8:18:cd:26:aa:63:f0:34:a5:8e:cc:4d:d0:60:84:3e:d6:31:
05:5a:28:a1:9a:89:84:13:57:51:1a:d3:52:55:d3:db:3a:f6:
5c:97:85:c2:c4:32:a0:79:61:13:bb:39:39:4b:83:96:68:3c:
b7:72:44:b8:d4:1a:63:cb:ce:fb:af:3e:a1:53:c1:77:27:7c:
f3:03:a9:e9:35:ad:b1:95:a0:4e:2e:a2:a3:24:e0:9e:73:0c:
8c:ca:2a:9d:5b:d1:c3:b3:e7:02:df:be:f9:c1:cb:f2:6e:ca:
5f:be:2c:cf:2f:f9:88:1b:fd:2e:9d:16:90:7a:06:14:5b:15:
51:b5:e7:88:dd:f7:d3:56:cd:42:8b:39:0d:42:1c:93:37:c3:
0c:df:c6:9a:40:ec:19:f4:8c:63:90:ee:7b:36:bc:cb:36:27:
52:ea:95:98:86:0c:8b:36:bf:62:39:0b:bc:d5:fe:d4:45:59:
d0:4a:a9:5f:27:34:db:da:16:0b:5f:cd:f9:e2:f9:d1:3f:eb:
5a:31:af:07:3a:2d:5e:03:02:a6:e1:25:c5:7a:4e:bb:33:6f:
93:48:77:86:be:8c:bd:fd:1c:50:1e:0b:cf:d1:13:c9:61:68:
4e:af:aa:4b:95:aa:e9:ea:ea:c1:48:16:15:d8:e4:80:35:ec:
2d:8b:ee:be
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUa+GbmNjLUPvkwgo2BEDLAQX+XpkwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjM0NUYxMTVB
QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBMB4XDTI2MDIyNjA0MTU0MloX
DTI3MDIyNTA0MjA0MlowMzExMC8GA1UEAxMoRDA2MTk1OUZBREJFMEI4QkQ5OTYx
OTlGNDI0RjE0OEU4MTMzRTI5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANsuzhLlMvCr5WWkeZknY2WJyeOKUT5wmM8gU91CZ/sBzg0PYnJK2XTA+U9R
PKHUh7H2AkuSMH7J+y0g7HHcc1oYtrVOgzCsPAfWSMgZJJ2h5dC/WPycQL3NOKYN
ON8ZvWtJ2aN1K2IhS6EkqHzVxagxDqv8eGVBiEKhDjVW/pEdNN0bzNLIFD3gecyr
fuXHsHzj6+Qo32j2u2mK87VAhrsEsqqtNwzF/c2UfMyBE2GaaxJG9lHgTHJfCrp3
0X7p8vYmDhDjoeVYD0l7e6Da4eLS2OhJZKNKZ7/85F/Lvqbg1QxVCOBwB0984sJY
1Cajw/BC8LLp4jpk75BPXh/f/1cCAwEAAaOCAgMwggH/MB0GA1UdDgQWBBTQYZWf
rb4Li9mWGZ9CTxSOgTPikzAfBgNVHSMEGDAWgBQSNF8RWsS2KlH1J0xUyB6GRjvQ
ujAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVBQzRCNjJB
NTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIy
QTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi9FalJmRVZyRXRpcFI5U2RNVk1n
ZWhrWTcwTG8uY2VyMIGGBggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuGanJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzAvMzEzNTMxMmUz
MTM1MzgyZTMyMzAzNDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzUzNDM1MzIz
Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAZeezDANBgkqhkiG9w0BAQsFAAOCAQEAyBjNJqpj8DSljsxN
0GCEPtYxBVoooZqJhBNXURrTUlXT2zr2XJeFwsQyoHlhE7s5OUuDlmg8t3JEuNQa
Y8vO+68+oVPBdyd88wOp6TWtsZWgTi6ioyTgnnMMjMoqnVvRw7PnAt+++cHL8m7K
X74szy/5iBv9Lp0WkHoGFFsVUbXniN3301bNQos5DUIckzfDDN/GmkDsGfSMY5Du
eza8yzYnUuqVmIYMiza/YjkLvNX+1EVZ0EqpXyc029oWC1/N+eL50T/rWjGvBzot
XgMCpuElxXpOuzNvk0h3hr6Mvf0cUB4Lz9ETyWFoTq+qS5Wq6erqwUgWFdjkgDXs
LYvuvg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:49:45 2026 by rpki-client