
$ rpki-client -vvf repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa
File: 3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa (raw, json)
Hash identifier: odYW4tuHIAmBKw7Yir5Faqa6Vv8eHC6lsyyVWAOjs3U=
Subject key identifier: 66:F4:BC:F4:A6:5D:71:5A:44:66:2D:F3:3F:DD:40:B3:6F:BE:D3:6E
Certificate issuer: /CN=06A03596D6FA10E3F50810F586E3F63AEE96F98E
Certificate serial: 167A26BA70AB5B95B7F7C6B8EC48A02609AC5629
Authority key identifier: 06:A0:35:96:D6:FA:10:E3:F5:08:10:F5:86:E3:F6:3A:EE:96:F9:8E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa
Signing time: Fri 06 Feb 2026 05:03:44 +0000
ROA not before: Fri 06 Feb 2026 04:58:44 +0000
ROA not after: Fri 05 Feb 2027 05:03:44 +0000
asID: 152389
IP address blocks: 157.15.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl
rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 13:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:7a:26:ba:70:ab:5b:95:b7:f7:c6:b8:ec:48:a0:26:09:ac:56:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06A03596D6FA10E3F50810F586E3F63AEE96F98E
Validity
Not Before: Feb 6 04:58:44 2026 GMT
Not After : Feb 5 05:03:44 2027 GMT
Subject: CN=66F4BCF4A65D715A44662DF33FDD40B36FBED36E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6c:b3:80:ef:20:d2:29:13:d5:e7:a4:ab:13:
f6:52:e0:aa:d1:50:2c:72:e4:d1:fc:a7:3f:40:03:
2b:81:7f:be:f5:c8:91:42:89:f7:b9:b2:bb:ba:68:
ac:84:45:7d:e2:a6:0b:81:5a:2d:95:f4:6b:7f:6f:
50:21:d8:fd:bb:52:23:3f:14:e2:e2:da:f9:f3:79:
52:1e:12:3b:02:ee:e4:8b:68:c6:73:a3:69:2e:f1:
80:1c:9e:5e:b6:b6:ed:64:1e:37:31:77:70:56:b3:
67:0c:de:12:63:2b:6e:2d:17:e0:5b:ca:00:69:77:
e5:66:f6:90:1e:6f:1b:59:67:90:40:bc:d0:ca:72:
ae:87:74:98:34:30:b8:e5:07:82:44:81:1e:e0:a8:
13:6e:85:eb:1e:bb:4e:4b:22:c9:ae:68:eb:5c:fa:
dd:0c:00:09:dc:1e:ac:6f:ec:cb:10:16:6b:a0:fa:
ac:6d:48:25:fb:06:f7:1b:a7:44:c8:2c:97:13:5a:
4b:e4:cc:2e:aa:15:2a:ce:15:a4:fd:c2:a4:28:92:
08:0b:7a:26:a2:bb:e4:cf:a8:a1:af:93:5f:d2:16:
a0:5f:1d:7c:61:75:a5:99:8a:f1:81:fc:25:ea:fa:
41:dc:fc:53:f6:cf:e4:a6:5e:5e:f1:73:02:09:68:
f3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F4:BC:F4:A6:5D:71:5A:44:66:2D:F3:3F:DD:40:B3:6F:BE:D3:6E
X509v3 Authority Key Identifier:
keyid:06:A0:35:96:D6:FA:10:E3:F5:08:10:F5:86:E3:F6:3A:EE:96:F9:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.15.216.0/23
Signature Algorithm: sha256WithRSAEncryption
69:e5:91:ff:2e:9e:b0:0d:26:19:d3:ac:2f:a5:e3:b3:05:78:
7c:96:83:a7:e1:99:07:e5:24:9c:04:87:67:9f:94:5e:2c:c6:
08:36:98:a9:8d:1d:74:5d:3b:1f:4d:6b:70:99:54:65:e6:be:
e7:f0:b9:66:db:f2:77:f6:b6:e7:cb:d5:5d:85:21:5a:7e:5c:
bd:d7:6e:9e:5d:88:68:18:4e:92:54:73:c1:27:b4:56:ae:09:
f0:a2:2b:b7:e0:bf:e2:e8:ef:cb:d3:0e:b0:ba:60:2d:74:75:
53:0a:21:a0:15:49:f8:d8:38:f3:a3:37:22:ba:e2:a3:82:ac:
f0:af:e6:de:1e:bc:3f:ae:9f:44:4d:c2:7d:2f:71:37:79:c9:
1b:5b:a8:f9:1e:1e:7b:f7:fc:3f:34:c5:48:96:0a:c0:48:89:
61:15:2a:17:35:31:46:70:22:38:97:8d:5e:e5:57:78:a7:05:
ff:fb:b3:cc:7d:86:8b:78:8c:68:67:dc:88:f2:3f:51:88:a6:
bd:f2:10:05:9d:09:23:46:d9:7d:51:50:5d:40:07:2e:6d:8e:
4d:68:5e:e3:32:78:d0:d4:bb:bd:cf:58:74:e6:bf:5f:58:11:
aa:c5:e2:e2:80:c0:15:ed:ee:97:9f:fd:ae:77:34:7d:4c:1b:
b4:2e:e1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:53:09 2026 by rpki-client