
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e342e302f32332d3234203d3e20313432313938.roa
File: 3135312e3135382e342e302f32332d3234203d3e20313432313938.roa (raw, json)
Hash identifier: AFjW+EEHhzoA6cLg/0TGjATfpii/CqiAmCZUF80TZ90=
Subject key identifier: E6:01:F9:26:1B:37:E3:1E:0D:23:A0:BF:2A:39:24:5B:0A:89:39:89
Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA
Certificate serial: 62B81E83D8B0F338A048A6F8BA720D388D75DCA8
Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e342e302f32332d3234203d3e20313432313938.roa
Signing time: Mon 09 Feb 2026 01:21:57 +0000
ROA not before: Mon 09 Feb 2026 01:16:57 +0000
ROA not after: Mon 08 Feb 2027 01:21:57 +0000
asID: 142198
IP address blocks: 151.158.4.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 18:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:b8:1e:83:d8:b0:f3:38:a0:48:a6:f8:ba:72:0d:38:8d:75:dc:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA
Validity
Not Before: Feb 9 01:16:57 2026 GMT
Not After : Feb 8 01:21:57 2027 GMT
Subject: CN=E601F9261B37E31E0D23A0BF2A39245B0A893989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9b:4c:4d:1b:38:7d:58:b4:37:06:7e:b4:8f:
62:02:68:37:d4:2c:f7:91:ed:16:d9:5b:6f:f9:f4:
36:46:d7:5e:e4:f7:7a:0f:b3:35:6d:3a:ee:22:dd:
9d:c3:dc:47:a1:ce:bc:e2:24:df:ee:3a:26:e7:6a:
1a:3e:cd:a1:1f:20:9d:04:b0:a2:2a:d1:ef:aa:fc:
05:c9:e8:86:7b:e8:46:ed:22:7b:53:ae:ea:59:fd:
6f:82:0d:65:de:d3:d5:3f:1f:c1:06:1d:2c:9c:64:
63:a9:a9:86:cb:d6:07:e6:07:f1:e0:60:bf:5e:2c:
e2:3c:a6:e6:66:c0:95:24:83:93:4d:9a:ef:3c:88:
e0:af:77:7e:2b:e9:38:ff:93:35:b6:1d:e4:59:2f:
84:25:e5:6d:a1:05:3c:0a:fc:90:bd:e8:14:3c:00:
b8:8b:fd:55:88:c5:0b:be:db:b3:23:c3:4c:8c:d8:
dc:3e:cc:1d:8a:ef:63:a9:35:6f:31:12:d4:a8:ba:
c4:57:69:71:72:94:ee:56:0c:2f:5d:35:b2:e8:64:
e1:ef:0e:ee:af:7a:8f:14:4c:b6:07:18:ac:44:f0:
e9:79:49:91:98:8a:5e:40:1d:0f:c9:2e:0a:7c:0e:
b6:3c:bc:79:12:05:01:31:12:9e:c3:d2:77:f9:4f:
05:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:01:F9:26:1B:37:E3:1E:0D:23:A0:BF:2A:39:24:5B:0A:89:39:89
X509v3 Authority Key Identifier:
keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e342e302f32332d3234203d3e20313432313938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.158.4.0/23
Signature Algorithm: sha256WithRSAEncryption
db:9d:2e:ac:41:da:c7:12:1b:a9:bd:ab:83:d6:69:43:a1:af:
39:13:d9:75:c0:a8:d3:ff:6d:7b:de:e5:6d:a2:73:7d:b2:93:
30:20:bf:aa:38:9b:e6:02:07:fc:9a:bb:1d:0a:23:70:d2:0d:
c9:fe:7f:07:e0:02:83:14:7d:99:f4:e6:11:35:4e:c1:76:04:
c4:60:94:c3:5c:9a:85:0d:06:e4:f7:29:1d:50:5c:90:e9:62:
8a:74:1d:b7:54:d7:56:a6:80:14:25:b6:3c:81:df:10:2a:1f:
cb:54:a9:a2:82:37:68:d7:a5:86:3f:24:26:25:3f:c6:c3:9f:
aa:36:56:0d:b6:70:61:c4:1b:2b:23:3e:fb:d1:eb:b6:27:54:
29:63:60:cf:d5:09:ec:3c:7f:00:5b:dc:05:6f:3f:1e:f7:e7:
98:59:98:b5:b3:ed:18:bc:24:04:87:e1:7e:bb:5e:2f:1c:b0:
ec:84:b8:ca:8f:9a:22:d3:85:05:43:a4:b4:64:34:1f:3d:46:
07:fb:bc:f2:2a:4c:f2:f6:6c:b4:fc:2c:01:c6:83:9f:d6:07:
5d:e0:3a:50:fc:82:14:cc:9e:b6:35:56:a7:d0:53:9c:5f:e3:
0e:3f:82:cb:96:14:89:77:61:b5:57:b3:1f:55:d8:b0:3f:5f:
c8:21:2b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:53:41 2026 by rpki-client