
$ rpki-client -vvf repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233342e302f32332d3234203d3e203435323936.roa
File: 3131332e35392e3233342e302f32332d3234203d3e203435323936.roa (raw, json)
Hash identifier: +9kGEt9FMbzyaqnQ3HEkWMHJN2f1S3notrK/o+QNX2M=
Subject key identifier: 27:94:54:42:CF:23:F2:C8:7A:A7:16:22:53:5D:D7:88:85:C3:9A:9A
Certificate issuer: /CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7
Certificate serial: 7E9D3F4C5F6B31566E6DEB422CE65372B1EFC395
Authority key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233342e302f32332d3234203d3e203435323936.roa
Signing time: Mon 30 Mar 2026 09:00:00 +0000
ROA not before: Mon 30 Mar 2026 08:55:00 +0000
ROA not after: Mon 29 Mar 2027 09:00:00 +0000
asID: 45296
IP address blocks: 113.59.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl
rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 15:19:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:9d:3f:4c:5f:6b:31:56:6e:6d:eb:42:2c:e6:53:72:b1:ef:c3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7
Validity
Not Before: Mar 30 08:55:00 2026 GMT
Not After : Mar 29 09:00:00 2027 GMT
Subject: CN=27945442CF23F2C87AA71622535DD78885C39A9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:fb:22:20:d6:f0:fa:98:6c:92:73:37:c3:
f6:98:2e:e6:dc:36:9f:b6:44:fb:72:78:2c:41:51:
2a:7d:80:30:74:4e:af:95:a1:ed:16:2d:b8:67:80:
42:82:35:ac:da:29:40:df:9c:92:96:8b:36:9b:6b:
f1:97:ed:24:db:c5:cd:5c:28:4c:69:b8:71:ba:2f:
07:33:0f:5f:2e:ca:6e:8d:27:bd:10:44:11:b5:f6:
0c:a2:60:0c:c2:13:bc:32:1f:3e:cb:ed:f1:81:ea:
39:33:b1:db:6e:b5:85:08:65:c2:ff:8b:16:9a:5a:
d4:78:01:bb:bf:1e:d4:0d:8d:3d:f4:cf:df:dd:ef:
7c:f2:9d:8c:cd:88:d5:c2:43:dc:1d:3f:e8:66:d3:
a9:80:cf:9a:9b:65:f9:3b:81:84:a1:22:50:b7:a9:
49:95:6e:2c:dc:51:12:84:88:b8:92:2e:4a:07:d5:
bc:5e:83:0a:f6:20:98:cd:be:76:ef:8e:02:5e:3e:
d9:ce:a9:ea:7f:43:ad:56:98:a9:bd:72:55:42:e7:
2f:62:24:d1:3c:86:62:02:3b:e4:e7:43:59:79:b4:
b4:5d:c5:35:8b:52:8f:28:9d:2e:cc:31:e2:d3:8b:
c5:45:f1:74:e3:d8:d9:38:bc:24:d5:78:c2:4c:30:
4e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:94:54:42:CF:23:F2:C8:7A:A7:16:22:53:5D:D7:88:85:C3:9A:9A
X509v3 Authority Key Identifier:
keyid:9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233342e302f32332d3234203d3e203435323936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
113.59.234.0/23
Signature Algorithm: sha256WithRSAEncryption
00:01:ec:46:c2:3e:fd:d1:8e:c6:8b:4a:e8:2e:a6:67:60:11:
c5:d6:f8:1d:0b:27:5b:2d:d9:9e:c5:7f:58:c5:6d:03:ac:5e:
0e:15:20:f4:56:5f:83:21:20:aa:3b:e5:1d:43:47:ad:3c:1c:
1b:43:24:91:45:0b:f2:4b:0a:1f:a2:fd:86:ca:f1:9e:b2:fd:
3c:21:ff:d0:62:93:92:d0:10:25:7b:cc:56:b3:5d:7e:20:69:
d2:a9:6a:ed:82:fb:3e:d5:98:62:9b:85:b1:c8:9b:81:2b:44:
20:a5:91:5b:e1:18:25:2c:0d:8b:6e:a2:24:15:c7:46:57:96:
35:a7:1d:cd:81:77:88:05:33:c9:1c:e0:b9:78:2d:90:db:63:
23:bf:a6:b0:69:eb:85:23:cc:fb:94:ec:2a:5b:d8:40:05:86:
92:c6:fe:5a:fe:da:0c:45:ec:e2:81:7e:94:45:28:95:b8:9f:
d6:e2:d4:91:0a:1a:74:af:fd:73:dd:e7:4b:2b:67:8e:ba:40:
05:85:85:8d:44:f7:05:67:b7:2b:2b:9b:c4:2c:ae:eb:77:3e:
9e:41:a7:d7:3d:46:bd:6b:a2:ce:fd:2e:9a:8d:f0:74:20:21:
7f:18:1b:2e:ad:4f:00:32:74:9d:0d:aa:00:5d:de:0e:7b:3d:
2c:78:a6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:12:15 2026 by rpki-client