
$ rpki-client -vvf repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/3137352e3131312e39382e302f32332d3233203d3e20313534343130.roa
File: 3137352e3131312e39382e302f32332d3233203d3e20313534343130.roa (raw, json)
Hash identifier: zwjrrSSocCPkwpeZnvOXQTY6ZFKjf2v0QrVmVjzP5Ng=
Subject key identifier: 23:7D:22:B6:F6:29:46:E1:57:43:E1:C2:07:A0:3C:04:E1:BE:CD:72
Certificate issuer: /CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D
Certificate serial: 0B55E603A7F78905B767AEFC7837D73DAB384A41
Authority key identifier: 86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/3137352e3131312e39382e302f32332d3233203d3e20313534343130.roa
Signing time: Wed 11 Feb 2026 22:04:30 +0000
ROA not before: Wed 11 Feb 2026 21:59:30 +0000
ROA not after: Wed 10 Feb 2027 22:04:30 +0000
asID: 154410
IP address blocks: 175.111.98.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl
rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:55:e6:03:a7:f7:89:05:b7:67:ae:fc:78:37:d7:3d:ab:38:4a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D
Validity
Not Before: Feb 11 21:59:30 2026 GMT
Not After : Feb 10 22:04:30 2027 GMT
Subject: CN=237D22B6F62946E15743E1C207A03C04E1BECD72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:57:66:88:15:dc:12:2d:6e:0d:b8:f7:8b:f1:
4d:51:88:4b:a1:3e:e2:0d:39:5b:af:ed:ad:05:08:
e4:75:8c:61:fc:37:b2:73:aa:0f:b5:b8:37:c8:08:
b9:06:10:fb:06:69:07:df:cd:52:9c:a2:c3:d0:95:
d2:be:94:c9:39:6c:ca:1c:4d:ed:ce:8e:41:29:a2:
62:a0:79:47:7b:d1:d5:cd:00:aa:c3:a6:74:ea:a3:
f0:36:b9:b7:4e:ac:95:f3:8d:65:9a:eb:92:e3:65:
75:57:5b:4e:cf:93:73:91:5c:2b:da:5c:da:f8:ea:
ce:73:f5:33:9a:2d:de:06:b9:3f:89:85:3a:b4:81:
92:2e:bd:be:69:3d:05:ce:7c:f7:95:17:eb:21:47:
90:d4:6d:fc:eb:72:2b:9c:3a:38:0c:e6:41:e3:08:
d0:09:af:64:56:29:34:93:b0:9d:58:8f:b6:dd:6a:
be:cc:a7:3c:ec:48:a8:f6:2d:d3:e3:71:39:df:19:
33:59:ab:90:71:ef:3c:a3:95:77:a7:24:59:d8:9d:
32:69:cd:6f:b9:e8:42:aa:e7:a6:6f:eb:82:cd:86:
28:66:25:17:05:60:28:56:eb:33:d9:1e:48:16:da:
79:2e:d9:dc:de:af:7e:07:66:68:2c:91:9c:ef:f5:
93:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7D:22:B6:F6:29:46:E1:57:43:E1:C2:07:A0:3C:04:E1:BE:CD:72
X509v3 Authority Key Identifier:
keyid:86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/3137352e3131312e39382e302f32332d3233203d3e20313534343130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.111.98.0/23
Signature Algorithm: sha256WithRSAEncryption
18:3b:c2:4f:9c:b1:71:71:b7:aa:e2:de:68:60:0f:f6:70:e7:
96:db:d6:7b:71:46:23:2f:59:c1:fe:b1:e4:c2:b8:fe:e0:65:
9a:51:8d:45:96:8b:89:52:ec:cb:cd:b8:40:a3:be:1e:ad:4d:
0d:c3:c8:cd:82:8c:7a:b2:d9:15:0f:be:a7:a9:fe:8b:68:ba:
4e:52:63:85:e4:f8:f0:b2:00:8b:b0:ed:44:4e:ae:3c:35:4b:
f9:9c:9c:08:cd:da:59:f5:99:a4:cd:25:dc:5e:a8:eb:0e:fc:
94:bb:03:e1:80:43:46:9f:83:01:b0:32:36:c6:f0:6d:97:15:
7e:60:32:90:d9:f7:84:6f:5d:2d:c6:98:82:30:c9:b3:69:06:
e2:5e:43:0b:a9:39:61:7f:50:a1:53:a0:c8:09:f5:a6:7e:ef:
26:51:bb:12:2c:d7:d8:1b:50:77:f3:fb:81:e2:cb:d1:1b:86:
59:b1:77:6f:34:19:14:86:a3:65:5b:f2:47:cc:bd:3a:02:54:
09:41:ec:65:6a:55:79:cb:fa:80:8a:69:c9:b5:c7:09:84:d6:
b9:85:02:fe:8a:dc:c3:cc:c4:fa:dc:05:24:cd:08:97:5d:4b:
53:04:fa:34:eb:d0:36:9e:8d:36:4f:e3:56:e7:9c:4c:60:a2:
a9:e6:f8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:47:42 2026 by rpki-client