
$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130362e302f32342d3234203d3e203234353235.roa
File: 3131342e3139392e3130362e302f32342d3234203d3e203234353235.roa (raw, json)
Hash identifier: m2xoqgI8OMrKdqmhh6RK3kHZHhjFEXrrukDePWDof9g=
Subject key identifier: 68:B0:BB:56:6F:00:3E:5F:0F:34:4F:46:52:97:BD:C2:26:4A:9F:D2
Certificate issuer: /CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Certificate serial: 7A3CC5D82C94EE60AB4BAB28E9ACE4200412AF66
Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130362e302f32342d3234203d3e203234353235.roa
Signing time: Sat 04 Apr 2026 10:00:03 +0000
ROA not before: Sat 04 Apr 2026 09:55:03 +0000
ROA not after: Sat 03 Apr 2027 10:00:03 +0000
asID: 24525
IP address blocks: 114.199.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl
rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 11:57:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:3c:c5:d8:2c:94:ee:60:ab:4b:ab:28:e9:ac:e4:20:04:12:af:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Validity
Not Before: Apr 4 09:55:03 2026 GMT
Not After : Apr 3 10:00:03 2027 GMT
Subject: CN=68B0BB566F003E5F0F344F465297BDC2264A9FD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f9:be:ee:b3:c5:32:20:8f:dd:ca:f1:e0:51:
b4:71:8c:20:e8:32:e7:4c:a4:7c:08:e1:27:6c:03:
c6:97:11:e0:72:81:d3:60:a7:6a:5e:d2:e4:6c:12:
a5:26:43:a0:0f:b6:84:38:81:f9:c5:9d:d4:a0:b6:
d9:c3:34:41:91:7c:2b:f1:19:a3:c4:04:a2:0b:05:
41:60:bf:fe:c5:75:f7:db:bf:64:ae:04:c8:3d:c1:
f4:80:54:86:c3:90:23:82:c8:fc:55:b5:18:ce:55:
d1:08:c3:1d:14:2c:4d:3f:80:68:5d:99:85:5e:c8:
bb:a9:75:c6:bd:0c:76:9b:cc:28:99:89:9c:c0:84:
7e:ab:96:c0:c4:1b:06:84:c0:0f:db:9a:a7:91:81:
e2:51:a5:12:0c:b8:84:d5:07:60:98:19:a0:5a:1c:
6e:69:1a:23:e6:f1:39:b0:27:b6:b5:20:7e:0b:e0:
0a:e3:e3:bc:a2:c8:3e:21:ea:1a:52:e8:ba:ce:a3:
f6:d1:cc:9f:60:92:78:e7:0f:03:97:c0:8d:d3:70:
a3:91:b3:f7:55:ff:2c:c3:20:74:c0:c3:57:5f:f5:
e1:c4:04:76:04:e2:19:14:df:e0:37:57:af:87:ca:
b1:5c:bc:b6:10:24:3e:32:f0:5b:3b:f3:b3:90:d2:
01:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B0:BB:56:6F:00:3E:5F:0F:34:4F:46:52:97:BD:C2:26:4A:9F:D2
X509v3 Authority Key Identifier:
keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130362e302f32342d3234203d3e203234353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.106.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:07:e7:7a:c3:61:c4:f1:2e:ce:f2:5a:df:fd:cb:cd:e5:94:
97:c2:5b:9f:ed:cf:67:50:58:6b:44:54:a7:4a:12:0e:a8:e1:
d0:d9:4f:72:05:76:d7:31:a3:d9:70:b5:20:81:c7:7b:e9:31:
f5:3f:5a:fa:6d:52:b1:b9:59:c3:e0:be:c0:85:61:a2:07:4b:
54:f2:70:23:4b:8d:2c:7d:31:11:42:2f:9a:56:2c:78:d2:7e:
2a:fd:da:1d:d1:3d:b5:52:70:67:70:ac:2d:19:48:09:eb:85:
fe:8f:bf:43:2a:2e:ed:22:b0:21:18:e4:da:70:7d:d2:56:06:
96:97:61:f5:c3:c4:7b:12:5e:0c:72:3b:47:c3:ae:43:0c:e1:
13:6f:51:f9:dc:17:6e:7c:e8:52:0e:66:ba:bf:5a:b3:a7:23:
49:5f:01:05:4c:e3:54:49:37:7b:64:bf:98:d7:e4:8d:a7:12:
9f:2d:75:c2:95:c7:7c:34:d1:90:10:04:9f:56:e4:3f:20:3b:
71:0b:f8:4a:18:c4:31:13:92:89:aa:82:34:76:8d:5a:6c:b3:
c0:8f:82:51:3a:5a:a7:80:6e:10:7e:0a:4e:75:23:f0:9c:c6:
9e:fa:64:1c:30:98:5b:2c:d7:3b:d9:73:3c:36:cd:7e:46:f2:
8e:c9:1d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:23:31 2026 by rpki-client