
$ rpki-client -vvf repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233322e302f32332d3234203d3e203435323936.roa
File: 3131332e35392e3233322e302f32332d3234203d3e203435323936.roa (raw, json)
Hash identifier: vBsCZpSLsG8TyyHzBprL3UJo7rlFoPAmHEwc5gmedk8=
Subject key identifier: 43:71:DB:99:3A:D6:9D:7A:B1:65:EE:0C:DA:70:0E:29:45:20:E4:EB
Certificate issuer: /CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7
Certificate serial: 3AF81D530AF06EFD2DD372554DB51AD42498EA47
Authority key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233322e302f32332d3234203d3e203435323936.roa
Signing time: Mon 30 Mar 2026 10:00:00 +0000
ROA not before: Mon 30 Mar 2026 09:55:00 +0000
ROA not after: Mon 29 Mar 2027 10:00:00 +0000
asID: 45296
IP address blocks: 113.59.232.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl
rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 15:19:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:f8:1d:53:0a:f0:6e:fd:2d:d3:72:55:4d:b5:1a:d4:24:98:ea:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7
Validity
Not Before: Mar 30 09:55:00 2026 GMT
Not After : Mar 29 10:00:00 2027 GMT
Subject: CN=4371DB993AD69D7AB165EE0CDA700E294520E4EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:00:71:06:98:31:45:a9:0e:ce:21:48:17:6e:
65:ca:54:56:dd:64:da:49:df:e0:aa:4e:ce:e0:af:
7a:19:47:41:ba:29:a0:a1:34:9c:a3:aa:f6:f6:6d:
37:ad:5c:ae:40:de:9f:67:0f:be:92:df:ea:67:56:
dd:84:64:bb:42:fb:22:e2:d7:cb:17:06:62:59:4a:
71:8d:71:3b:52:c0:99:a6:15:33:c8:db:31:ae:d2:
00:5c:d6:9e:19:58:56:ae:f3:f3:4f:05:e6:fe:5d:
20:04:c7:d3:79:15:18:2b:74:3c:b1:0c:fd:3d:bd:
2c:05:15:a4:4e:2a:1f:27:f4:9b:35:22:9b:bb:c4:
04:48:1e:33:88:86:4b:4a:e1:2a:24:72:ad:9a:69:
0b:00:17:95:d5:67:2e:a8:9c:d2:36:29:76:cd:60:
ca:da:1a:70:3a:1d:df:cb:a5:e8:8d:46:10:61:4e:
f1:91:3a:fa:c5:5b:8f:6f:0f:d4:89:68:9c:74:fc:
7a:a1:65:af:85:a3:d7:37:bb:cd:f6:a2:2c:a0:e0:
2f:e5:dd:6e:f9:f1:87:73:a0:e5:1e:1a:53:9f:dd:
5b:99:54:c8:42:84:b0:b3:00:20:e1:ed:0a:a6:34:
31:6c:b3:57:33:90:8d:a4:84:95:ff:5a:2f:a9:a4:
f2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:71:DB:99:3A:D6:9D:7A:B1:65:EE:0C:DA:70:0E:29:45:20:E4:EB
X509v3 Authority Key Identifier:
keyid:9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233322e302f32332d3234203d3e203435323936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.59.232.0/23
Signature Algorithm: sha256WithRSAEncryption
01:ce:4b:bb:17:cb:fb:e9:1c:07:ba:c3:5b:a3:ca:a6:1e:d5:
59:eb:83:d9:a0:89:66:37:30:2a:e1:a1:40:1c:98:84:5e:11:
f7:33:a6:d6:80:6d:03:ba:be:d1:cc:ce:2b:6c:e8:b3:23:83:
a0:4a:ab:2f:58:c3:e8:50:72:5a:2b:98:24:64:ed:60:95:45:
2e:ae:25:a7:e6:78:fe:87:8c:1f:c0:fb:de:c0:10:32:76:20:
df:1e:8e:0a:da:33:0c:be:ec:dd:14:9e:14:e0:cd:4b:a8:08:
4a:50:a5:0e:1e:b3:8f:d9:19:a3:a4:e1:6d:e3:b9:70:ca:fe:
f3:bc:89:5c:d1:2d:5f:ea:5d:43:00:63:f5:28:ff:f3:ae:8c:
3b:e7:6f:79:42:b7:70:c2:2e:dd:ed:a8:ff:32:ef:9d:f3:dc:
c5:51:a8:f1:1a:c5:c1:61:17:4f:52:39:bc:f4:f5:ef:4a:f2:
4c:3c:b8:d4:59:b5:c6:24:cf:f7:77:20:51:e8:d8:bd:cf:a9:
20:ff:b3:08:e4:4f:41:f8:0b:74:94:67:65:ec:91:2a:f6:46:
01:0a:74:1b:4f:82:e6:47:a8:59:7b:ef:71:c8:48:21:f4:46:
f2:72:c8:29:8f:36:d2:a2:09:fc:d5:bf:d9:c6:1b:d1:eb:57:
ad:0a:52:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:15:05 2026 by rpki-client