
$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/34332e3234372e33322e302f32322d3234203d3e203435333132.roa
File: 34332e3234372e33322e302f32322d3234203d3e203435333132.roa (raw, json)
Hash identifier: hAPrPjY7XYjp71Zhdy4WXQer+n6cyA8RG8tEoC/vrLc=
Subject key identifier: F8:E2:51:EC:27:34:3A:D6:64:BC:F7:F6:71:A2:22:44:C5:B5:3F:6D
Certificate issuer: /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Certificate serial: 7E270CAF326506E21F9830A0E7AEF6603992B155
Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/34332e3234372e33322e302f32322d3234203d3e203435333132.roa
Signing time: Mon 09 Feb 2026 06:00:01 +0000
ROA not before: Mon 09 Feb 2026 05:55:01 +0000
ROA not after: Mon 08 Feb 2027 06:00:01 +0000
asID: 45312
IP address blocks: 43.247.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl
rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 05:17:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:27:0c:af:32:65:06:e2:1f:98:30:a0:e7:ae:f6:60:39:92:b1:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Validity
Not Before: Feb 9 05:55:01 2026 GMT
Not After : Feb 8 06:00:01 2027 GMT
Subject: CN=F8E251EC27343AD664BCF7F671A22244C5B53F6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:fa:05:24:31:9a:67:9f:58:4c:f9:6a:bb:2c:
45:0b:13:ba:76:b2:b2:6c:60:43:a8:e6:47:22:1b:
7f:6f:8f:56:a3:fa:6b:4f:71:8e:11:cb:d8:75:36:
bb:1f:61:d6:a3:43:44:b5:16:74:10:c2:7c:66:b1:
0e:17:22:c7:20:cb:c1:25:b1:3b:90:bb:61:4b:3d:
1e:2e:7f:5a:5d:1b:cf:fd:25:43:af:2c:df:06:47:
82:05:88:56:5e:9a:fc:ba:8b:2d:ac:8e:bb:26:cc:
df:b5:ff:a5:99:1d:63:63:21:89:b5:d4:61:2d:92:
b9:52:92:89:87:59:7c:45:d7:b3:f9:48:fa:d6:15:
98:d1:a6:0d:51:b0:cb:37:53:3f:ea:eb:b6:ba:a1:
66:a4:fc:20:61:26:63:5b:9d:b7:e2:08:05:c6:2d:
ea:dc:c3:e1:b6:0f:55:cd:58:a3:9a:75:52:e3:2d:
2b:30:7e:18:0b:52:e7:ad:1f:ea:a9:89:35:0f:4a:
e7:bf:98:4c:e9:61:66:c1:e7:b5:c4:35:e3:3f:2f:
fa:1b:d8:b2:c9:20:66:cd:f8:19:34:f7:c3:db:40:
90:83:a0:59:07:ff:d7:29:ac:a3:e2:e4:69:7f:86:
4a:49:e0:a9:c2:98:1e:02:78:9d:e6:db:aa:b3:c3:
74:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E2:51:EC:27:34:3A:D6:64:BC:F7:F6:71:A2:22:44:C5:B5:3F:6D
X509v3 Authority Key Identifier:
keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/34332e3234372e33322e302f32322d3234203d3e203435333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.247.32.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:f7:8b:55:f8:d6:99:16:46:74:63:b4:70:f3:78:1f:19:42:
a2:9f:33:96:4c:b6:d1:e8:a6:f8:e1:8a:46:85:0e:24:a5:16:
07:bd:15:0f:58:c4:36:22:9d:69:35:eb:1a:78:39:cc:75:f4:
ee:9d:69:66:ec:ad:d9:66:d9:d8:93:cd:40:5f:bc:36:bd:da:
40:37:d6:00:d4:06:a3:b2:14:ec:c5:a7:c0:26:59:3d:66:8b:
00:43:40:67:45:c4:a1:01:13:7b:3b:80:fd:ee:b5:b8:28:cf:
22:03:d7:da:fe:a0:d3:c9:d9:7d:18:54:b6:e3:40:0c:a3:a4:
35:db:e9:02:95:31:d2:e3:d7:d3:b1:1c:af:af:f5:30:26:11:
83:15:cd:28:26:63:40:60:98:c3:1a:b0:f9:f6:51:79:a1:66:
65:c7:1b:35:74:5b:79:84:05:e0:2d:a1:d2:6c:94:59:a3:67:
db:ed:f0:f5:8e:1a:94:48:37:49:87:69:e0:fd:c1:fd:7f:1b:
b5:c3:9a:da:06:2a:f6:ca:3c:8e:a8:bc:26:45:4e:b2:8a:a2:
c7:98:19:0c:c3:34:67:e0:93:33:83:c7:f5:d1:9d:78:79:b3:
e9:89:a4:30:73:a1:14:57:8f:72:3d:4d:ef:75:d6:ef:50:b1:
5f:1d:0c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:11:14 2026 by rpki-client