
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e38342e302f32332d3234203d3e20313534343737.roa
File: 3135312e3135382e38342e302f32332d3234203d3e20313534343737.roa (raw, json)
Hash identifier: IT9x0P/3RDDAHWuOeI/lOb1Fh67e62i5Nd9Bu80+ylI=
Subject key identifier: BD:AD:84:45:29:2F:BE:95:20:D1:8F:E1:7C:74:72:B5:89:33:B9:3B
Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA
Certificate serial: 3DD99CAB422A4E5838DB82D41F6F4407AE3BC82D
Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e38342e302f32332d3234203d3e20313534343737.roa
Signing time: Thu 05 Feb 2026 07:47:30 +0000
ROA not before: Thu 05 Feb 2026 07:42:30 +0000
ROA not after: Thu 04 Feb 2027 07:47:30 +0000
asID: 154477
IP address blocks: 151.158.84.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 18:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:d9:9c:ab:42:2a:4e:58:38:db:82:d4:1f:6f:44:07:ae:3b:c8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA
Validity
Not Before: Feb 5 07:42:30 2026 GMT
Not After : Feb 4 07:47:30 2027 GMT
Subject: CN=BDAD8445292FBE9520D18FE17C7472B58933B93B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a4:3f:92:65:31:f0:d6:3c:9f:8a:bf:7d:ee:
ca:d0:77:06:2c:87:4f:e3:80:02:44:27:c0:8a:c0:
2c:3a:09:62:bb:e0:5a:64:21:aa:9e:75:b9:9a:30:
30:90:1d:98:b8:b3:26:51:5e:b5:fc:71:0d:90:88:
be:09:2c:e0:67:c4:32:c6:43:22:cb:b1:6d:5c:e0:
ce:da:a3:a2:07:25:93:67:aa:58:25:f5:64:5b:31:
97:ef:fc:c7:36:fd:0f:d2:42:e2:bd:06:13:76:ac:
ae:72:15:19:d6:90:c4:e6:7d:f3:ff:54:f2:1b:c8:
42:1d:12:60:04:8e:9e:9b:7d:df:a9:bf:50:76:43:
9e:eb:e5:75:f2:c9:70:fd:2c:70:38:26:47:c4:7f:
e8:57:ef:27:f9:13:ac:9f:52:6a:61:cc:87:c2:8e:
43:31:1c:ec:68:cd:89:2a:7c:94:39:53:e7:31:c2:
78:40:62:59:ea:07:10:73:4e:a6:49:e5:f6:e5:98:
10:af:00:ee:e0:cb:0e:3c:fd:13:55:d0:39:71:c8:
bd:b9:4d:68:e0:54:c4:94:c2:d3:9b:67:3e:60:75:
a4:12:b3:38:6d:43:d4:fb:6b:f6:4f:80:b2:e5:da:
f3:5f:31:04:6b:9b:73:5e:f6:e7:4f:ee:ae:f3:a7:
d2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AD:84:45:29:2F:BE:95:20:D1:8F:E1:7C:74:72:B5:89:33:B9:3B
X509v3 Authority Key Identifier:
keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/3135312e3135382e38342e302f32332d3234203d3e20313534343737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.158.84.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:d4:9f:3e:ed:65:d1:e4:8e:97:5a:13:fd:fe:77:19:7c:a1:
ef:93:54:7c:69:52:fb:14:81:46:09:57:f3:cc:7d:54:c2:2c:
be:d4:29:e1:64:6e:1c:a2:f3:61:d8:5e:24:e5:90:28:32:e4:
6c:39:ae:51:c3:df:f3:66:3f:e5:d1:2f:98:b3:9b:2e:45:f7:
7b:77:67:20:29:1a:c2:4e:77:c4:52:29:75:4a:8c:84:d2:07:
bd:f0:66:bd:6c:af:3a:bc:74:ac:97:9e:2b:ee:82:aa:8a:9b:
d5:2f:f2:db:a1:96:3e:15:27:e8:5a:0f:d8:51:8f:0c:9e:8a:
18:d9:14:ae:33:1e:06:3b:8a:f0:dd:30:31:64:bf:d7:be:5b:
08:ea:9e:0b:80:ad:ba:6d:10:d7:de:e1:45:66:14:34:db:9d:
c2:a3:ec:b2:fe:57:23:9a:13:99:2f:84:f1:cc:de:a6:ab:72:
a8:e8:c1:95:a2:ad:7c:c2:87:3c:73:c8:80:48:a1:ed:e8:97:
6f:c6:ac:8d:eb:71:37:a5:94:74:f9:c9:eb:59:8a:7d:16:87:
77:70:03:c7:d7:c2:be:4d:f8:87:e1:bd:b5:2e:a5:20:70:e9:
40:84:63:e0:aa:80:6f:c1:7a:ff:80:72:e9:01:2f:74:e5:23:
8a:22:a5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:05:19 2026 by rpki-client