
$ rpki-client -vvf repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e38382e302f32342d3234203d3e203338373733.roa
File: 3131342e3134312e38382e302f32342d3234203d3e203338373733.roa (raw, json)
Hash identifier: rfAEDfb98EmJrbbYSOsJh0R3GKeVtrdV920jQ6JYXXk=
Subject key identifier: 63:B8:28:E8:42:04:C8:7E:5F:BC:00:C7:91:71:53:83:53:2B:7D:CD
Certificate issuer: /CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
Certificate serial: 5E93B64E15BDC413D1260A62343C5CA6A28728A0
Authority key identifier: 1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e38382e302f32342d3234203d3e203338373733.roa
Signing time: Wed 18 Feb 2026 03:00:02 +0000
ROA not before: Wed 18 Feb 2026 02:55:02 +0000
ROA not after: Wed 17 Feb 2027 03:00:02 +0000
asID: 38773
IP address blocks: 114.141.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl
rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 19:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:93:b6:4e:15:bd:c4:13:d1:26:0a:62:34:3c:5c:a6:a2:87:28:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
Validity
Not Before: Feb 18 02:55:02 2026 GMT
Not After : Feb 17 03:00:02 2027 GMT
Subject: CN=63B828E84204C87E5FBC00C791715383532B7DCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:b0:a1:1c:3c:3d:43:98:06:38:39:8d:4e:18:
13:d4:5b:fd:36:83:d2:ad:dc:23:65:0d:ab:7c:77:
c0:3e:2f:c2:12:e4:d1:53:d0:26:1d:08:4d:ce:1a:
b0:c7:92:f3:e7:2b:98:7c:eb:31:e0:b2:a3:45:1d:
8d:c4:73:1c:0a:95:a7:d9:cb:3a:b3:c1:4e:7e:bc:
4c:0a:a4:96:bc:f1:f1:9c:4d:a5:69:15:b0:de:5e:
8b:84:a1:2e:27:da:ed:e2:cb:6c:e6:7a:4f:2a:ae:
98:21:d7:c1:ec:87:52:58:22:29:05:f5:b6:6f:70:
b5:36:9a:36:4d:c9:8a:fa:ce:0f:cf:f8:d5:15:67:
e6:21:ce:2b:e9:8d:e8:cc:a9:26:12:80:cc:95:d8:
ec:b3:a2:a8:99:7b:ae:fb:b7:f6:ee:81:93:2d:29:
5d:98:df:9a:ed:3e:2e:d6:5c:b4:52:07:3c:d6:13:
a3:fb:09:d2:5a:a9:f6:83:d9:e7:8b:be:b5:21:a8:
9a:ac:cb:88:c4:1f:df:d3:db:c9:8f:fa:e7:bd:5b:
1e:33:b7:3b:46:af:1c:8e:71:c1:59:97:fd:cd:50:
05:69:9a:a9:b7:17:6f:97:49:ad:04:31:73:1f:77:
f3:3c:da:0b:58:10:91:a2:fe:d3:b6:3b:34:2a:84:
5c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B8:28:E8:42:04:C8:7E:5F:BC:00:C7:91:71:53:83:53:2B:7D:CD
X509v3 Authority Key Identifier:
keyid:1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e38382e302f32342d3234203d3e203338373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.141.88.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:80:28:05:89:f0:2a:5c:fa:bf:97:ab:41:5b:b7:53:e7:a6:
1c:ff:41:54:2e:43:6e:e0:3a:4d:c4:be:5e:00:dd:a8:a3:79:
07:51:47:e3:0f:64:f7:83:88:cc:6c:a7:1c:d1:e5:2d:b0:9c:
4e:d9:f1:4e:be:f5:c2:d5:c0:73:da:10:7b:2d:7b:e8:71:ce:
d5:12:f6:25:74:34:44:c1:f8:54:e9:2b:3e:5c:19:0c:7b:4c:
c4:57:9c:40:a3:52:bb:b2:a8:5c:b0:0f:27:dc:fe:14:dd:57:
bc:f1:03:c2:0d:2f:11:68:a4:68:9a:ef:80:af:1e:b9:74:2a:
ee:1e:fd:ab:da:2a:3e:54:46:2d:ab:62:e9:13:bb:5c:17:05:
67:48:14:e2:48:f3:40:12:9f:f3:c7:5e:bb:61:98:c7:93:5c:
8a:95:b5:3e:c7:17:39:f1:91:2a:f5:f9:13:7e:84:f7:1e:97:
ab:67:54:70:b8:77:8d:0d:25:7c:80:05:15:b4:b0:65:fd:0e:
8b:ab:8b:d8:ab:84:d9:7f:c0:24:43:65:b1:12:0c:32:1b:50:
de:4a:57:48:7c:ca:49:bf:03:50:0e:a6:1f:3a:c3:51:1f:44:
6f:f5:dc:99:af:75:0c:88:e4:34:c1:2d:25:09:3f:30:6e:45:
19:c7:36:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:59:48 2026 by rpki-client