
$ rpki-client -vvf repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/3135372e36362e342e302f32342d3234203d3e20313336383633.roa
File: 3135372e36362e342e302f32342d3234203d3e20313336383633.roa (raw, json)
Hash identifier: dMrGdN3jz8zMFZFmBytqEtO63mjKB2uQPhY+tz5vgrM=
Subject key identifier: 25:10:04:A9:94:9D:3E:E7:13:53:99:63:33:9D:FB:48:1C:07:F3:8D
Certificate issuer: /CN=676E12EDA912B67493E88316A428CFDBCAB51941
Certificate serial: 0167E5EBA177ED19F369263490A3CEE2673912B2
Authority key identifier: 67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/3135372e36362e342e302f32342d3234203d3e20313336383633.roa
Signing time: Sat 04 Apr 2026 04:00:02 +0000
ROA not before: Sat 04 Apr 2026 03:55:02 +0000
ROA not after: Sat 03 Apr 2027 04:00:02 +0000
asID: 136863
IP address blocks: 157.66.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl
rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 02:22:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:67:e5:eb:a1:77:ed:19:f3:69:26:34:90:a3:ce:e2:67:39:12:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=676E12EDA912B67493E88316A428CFDBCAB51941
Validity
Not Before: Apr 4 03:55:02 2026 GMT
Not After : Apr 3 04:00:02 2027 GMT
Subject: CN=251004A9949D3EE713539963339DFB481C07F38D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1a:55:5b:7c:e6:f2:ad:de:b4:a0:5c:f6:a0:
a0:3d:48:4f:e1:df:3e:de:1e:6a:60:5e:ed:3e:af:
d5:0a:3e:07:fd:e9:e2:8f:f2:25:7a:41:6f:ac:d8:
57:8c:a1:0f:db:c3:c8:ba:b2:da:d5:16:f7:2e:fc:
b3:f5:6f:a1:d9:34:a6:c4:e9:37:6b:f8:2c:6b:f4:
cb:85:0b:76:b7:56:4d:36:04:95:2f:6b:2a:fe:78:
88:bb:2c:c6:d3:76:a0:b8:a5:d0:6a:27:50:ce:c9:
ca:d5:91:30:c6:89:ed:14:72:9b:c2:cb:ec:19:e8:
fd:84:f9:45:fc:60:8c:0d:a2:98:27:89:b4:72:92:
01:68:ba:06:dc:e7:01:43:17:7c:65:3f:a4:48:0b:
cf:23:bc:ea:8e:47:2b:21:8b:80:dd:2b:89:8c:dd:
11:3e:82:d2:60:2f:f2:5d:f2:1b:45:67:e8:fd:51:
d1:db:dd:83:8d:cd:16:fa:9a:0e:59:85:cb:5c:a5:
ac:29:30:13:7d:02:73:68:04:95:49:44:8f:72:1f:
03:b2:ce:28:c2:b9:e7:0d:86:50:59:f3:81:b5:72:
77:48:f7:60:30:e5:40:36:94:d5:60:ec:00:3c:e5:
37:92:7f:d8:d3:84:76:c8:85:11:c9:ae:93:fa:d3:
7f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:10:04:A9:94:9D:3E:E7:13:53:99:63:33:9D:FB:48:1C:07:F3:8D
X509v3 Authority Key Identifier:
keyid:67:6E:12:ED:A9:12:B6:74:93:E8:83:16:A4:28:CF:DB:CA:B5:19:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/676E12EDA912B67493E88316A428CFDBCAB51941.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/676E12EDA912B67493E88316A428CFDBCAB51941.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/3135372e36362e342e302f32342d3234203d3e20313336383633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.4.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:ad:dd:e5:b7:a0:e5:a6:9c:a0:6e:4f:96:4d:66:bc:dd:0c:
7a:b6:ba:f3:6c:9e:e3:88:e2:7a:e7:7a:8d:24:2f:03:85:91:
04:2f:39:74:71:73:cb:70:0d:17:24:0f:8f:45:58:1c:c3:70:
1e:f8:ee:a3:89:c6:69:9d:71:71:12:0a:d7:68:5b:be:cd:60:
6a:77:44:4d:26:9d:89:ab:61:73:3f:73:31:12:40:e6:45:23:
00:2e:89:b6:7f:44:5a:a8:a7:b7:d8:37:ab:5f:5d:e5:d8:14:
22:e4:76:b3:9a:54:e9:13:be:9a:36:21:18:76:38:82:fc:c9:
9a:d6:72:0c:e9:1a:39:fa:0c:1a:0e:cc:7d:b4:b3:22:6d:9d:
d9:15:3e:66:f2:df:0c:93:fc:44:90:c6:32:2c:ca:bb:4a:1b:
2d:ae:e6:10:22:a0:ee:ad:22:3b:92:b7:19:fc:89:e2:c0:22:
3f:5d:ea:0f:d0:c0:d1:8f:27:b0:05:6a:31:ac:89:9a:95:09:
73:8d:ef:76:1e:74:17:e3:7c:1a:94:7c:27:02:7c:ec:ac:c1:
dc:20:08:c1:ed:89:59:95:f3:12:1c:59:bf:f6:be:ad:e3:0f:
1f:1c:98:23:91:d9:b6:fe:4d:ca:32:64:62:c3:1c:75:fd:0c:
58:b6:6c:a5
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUAWfl66F37RnzaSY0kKPO4mc5ErIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJD
QUI1MTk0MTAeFw0yNjA0MDQwMzU1MDJaFw0yNzA0MDMwNDAwMDJaMDMxMTAvBgNV
BAMTKDI1MTAwNEE5OTQ5RDNFRTcxMzUzOTk2MzMzOURGQjQ4MUMwN0YzOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIGlVbfObyrd60oFz2oKA9SE/h
3z7eHmpgXu0+r9UKPgf96eKP8iV6QW+s2FeMoQ/bw8i6strVFvcu/LP1b6HZNKbE
6Tdr+Cxr9MuFC3a3Vk02BJUvayr+eIi7LMbTdqC4pdBqJ1DOycrVkTDGie0UcpvC
y+wZ6P2E+UX8YIwNopgnibRykgFougbc5wFDF3xlP6RIC88jvOqORyshi4DdK4mM
3RE+gtJgL/Jd8htFZ+j9UdHb3YONzRb6mg5ZhctcpawpMBN9AnNoBJVJRI9yHwOy
zijCuecNhlBZ84G1cndI92Aw5UA2lNVg7AA85TeSf9jThHbIhRHJrpP6038RAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUJRAEqZSdPucTU5ljM537SBwH840wHwYDVR0j
BBgwFoAUZ24S7akStnST6IMWpCjP28q1GUEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
MjY0YmZiMi1kNDFkLTQzMTctYjkyZC1iYjk0NDFmZDBkY2YvMC82NzZFMTJFREE5
MTJCNjc0OTNFODgzMTZBNDI4Q0ZEQkNBQjUxOTQxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvNjc2RTEyRURBOTEyQjY3NDkzRTg4MzE2QTQyOENGREJDQUI1
MTk0MS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IyNjRiZmIyLWQ0MWQtNDMxNy1i
OTJkLWJiOTQ0MWZkMGRjZi8wLzMxMzUzNzJlMzYzNjJlMzQyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTMzMzYzODM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACdQgQwDQYJKoZIhvcN
AQELBQADggEBAB+t3eW3oOWmnKBuT5ZNZrzdDHq2uvNsnuOI4nrneo0kLwOFkQQv
OXRxc8twDRckD49FWBzDcB747qOJxmmdcXESCtdoW77NYGp3RE0mnYmrYXM/czES
QOZFIwAuibZ/RFqop7fYN6tfXeXYFCLkdrOaVOkTvpo2IRh2OIL8yZrWcgzpGjn6
DBoOzH20syJtndkVPmby3wyT/ESQxjIsyrtKGy2u5hAioO6tIjuStxn8ieLAIj9d
6g/QwNGPJ7AFajGsiZqVCXON73YedBfjfBqUfCcCfOyswdwgCMHtiVmV8xIcWb/2
vq3jDx8cmCOR2bb+TcoyZGLDHHX9DFi2bKU=
-----END CERTIFICATE-----
Generated at Sat Apr 18 08:54:18 2026 by rpki-client