
$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32342e302f32312d3234203d3e203138303539.roa
File: 3132322e3132382e32342e302f32312d3234203d3e203138303539.roa (raw, json)
Hash identifier: riZTjImBkDvVePLljyYMeOUPtkG436I9e4pnoU9kdQs=
Subject key identifier: 79:A6:E2:37:BA:F8:E5:44:5D:B7:36:A8:56:26:94:39:CB:0A:28:FC
Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial: 575F009E66071F35D42BFE304A6892D32249B449
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32342e302f32312d3234203d3e203138303539.roa
Signing time: Fri 20 Feb 2026 10:00:01 +0000
ROA not before: Fri 20 Feb 2026 09:55:01 +0000
ROA not after: Fri 19 Feb 2027 10:00:01 +0000
asID: 18059
IP address blocks: 122.128.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 14:25:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:5f:00:9e:66:07:1f:35:d4:2b:fe:30:4a:68:92:d3:22:49:b4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Validity
Not Before: Feb 20 09:55:01 2026 GMT
Not After : Feb 19 10:00:01 2027 GMT
Subject: CN=79A6E237BAF8E5445DB736A856269439CB0A28FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:04:8a:96:69:f9:2c:61:54:af:28:2f:aa:f8:
7b:3b:4a:64:32:40:38:81:7d:bf:4b:5d:39:de:ad:
5c:16:76:13:38:d9:b1:13:90:16:f9:57:f9:27:a5:
54:ca:4f:7e:a6:da:4b:27:53:c7:06:6c:92:50:e2:
e7:1d:6f:11:39:9c:34:b2:ab:6b:7d:64:69:bd:d5:
ae:d0:e9:3a:4d:66:8a:e8:e7:bb:26:bc:04:c6:d3:
8b:74:bc:fd:1f:4a:7e:e0:11:c5:b4:c2:f8:cb:2a:
64:ed:b9:87:f7:67:86:a8:fd:3b:7d:9e:0d:19:e8:
46:06:74:06:26:b5:a4:9d:7d:8f:58:3e:8e:6b:d2:
ed:68:e2:81:86:70:11:0b:c9:bd:b9:ed:36:f8:48:
19:5e:92:19:e0:f2:d2:3e:5b:57:92:94:5d:8e:4d:
f3:f8:70:fa:93:41:85:cb:7f:16:83:81:db:fc:cc:
f7:0d:4b:4f:06:9f:db:d3:2d:34:99:e4:85:a0:ff:
b8:a5:48:1e:cc:48:d7:8e:21:69:62:89:57:4a:95:
c0:25:7b:d5:1b:54:5b:6d:6e:b7:00:68:16:d1:b8:
27:7a:38:3a:c4:b6:da:b0:f3:c2:2f:64:60:7d:0d:
75:9b:49:fb:b2:ef:88:31:c5:e2:1d:7c:b8:c2:4c:
90:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A6:E2:37:BA:F8:E5:44:5D:B7:36:A8:56:26:94:39:CB:0A:28:FC
X509v3 Authority Key Identifier:
keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32342e302f32312d3234203d3e203138303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.128.24.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:f2:4f:f1:2e:f1:55:63:ec:eb:5c:6a:bf:b4:84:37:f9:56:
ea:67:52:44:da:2f:a5:43:6b:57:c5:4f:d0:4b:19:43:6b:7f:
0c:3a:ec:73:89:88:5d:d1:01:d5:38:65:09:da:4f:aa:15:61:
eb:1f:c0:70:e0:38:a9:e1:3a:9f:8a:48:38:36:29:2f:a1:32:
0a:c1:62:c1:55:69:1d:fd:6f:3c:fb:55:a0:ce:46:85:4b:a2:
b5:0e:80:e7:c2:8f:22:f1:30:3a:0c:a8:06:cf:8e:bd:cd:b7:
43:97:4b:61:75:ae:b8:f5:79:33:cc:22:54:be:5f:fb:64:f4:
7c:06:c9:82:b7:2a:8d:30:db:69:b9:1f:14:4b:2c:12:b9:fc:
43:56:35:54:d7:b0:2a:86:6a:f6:ae:fb:37:5e:06:89:7d:26:
b0:dd:b8:31:c0:4c:32:42:ef:0e:31:e1:02:44:f2:63:63:1b:
0f:95:77:77:41:16:49:60:ce:e8:74:d0:57:91:0f:df:68:0f:
e0:e0:0d:a2:98:92:9a:5f:de:34:ab:15:63:07:9e:7a:f3:37:
be:77:be:75:ed:9a:ae:4e:40:89:6f:f7:47:27:b8:f6:68:c6:
52:df:d5:a7:5d:08:15:a8:b9:73:6b:4e:26:c5:65:fa:aa:db:
9b:db:ed:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:54:51 2026 by rpki-client