
$ rpki-client -vvf repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3131372e35342e302e302f31362d3234203d3e2039333430.roa
File: 3131372e35342e302e302f31362d3234203d3e2039333430.roa (raw, json)
Hash identifier: /38osmS1ovCsNqWoBte+rgzduLMxUE6ppFENnBxm0Os=
Subject key identifier: C3:14:4D:A6:1A:B3:09:F5:55:F0:F4:A4:16:09:06:E8:BF:3D:4B:A2
Certificate issuer: /CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308
Certificate serial: 18B6CFA0BCF271F544C80B52C25D28EEA7BB067C
Authority key identifier: B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3131372e35342e302e302f31362d3234203d3e2039333430.roa
Signing time: Wed 18 Feb 2026 07:01:56 +0000
ROA not before: Wed 18 Feb 2026 06:56:56 +0000
ROA not after: Wed 17 Feb 2027 07:01:56 +0000
asID: 9340
IP address blocks: 117.54.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl
rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 15:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:b6:cf:a0:bc:f2:71:f5:44:c8:0b:52:c2:5d:28:ee:a7:bb:06:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308
Validity
Not Before: Feb 18 06:56:56 2026 GMT
Not After : Feb 17 07:01:56 2027 GMT
Subject: CN=C3144DA61AB309F555F0F4A4160906E8BF3D4BA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:74:c4:de:b6:cf:92:41:e3:18:58:cd:3e:f2:
a2:1d:6e:83:2f:53:0a:46:2d:19:d2:99:f7:91:a8:
cf:ff:28:9b:19:1d:48:cb:56:39:99:45:2f:74:6e:
fe:05:f1:d5:f1:e7:ec:50:4f:66:67:8f:5c:04:20:
c7:44:5c:e4:30:ad:af:1c:80:bd:44:7d:11:e1:be:
06:3d:93:65:d2:02:22:5c:22:e4:d8:15:e0:02:6b:
83:8b:d1:c2:a2:5f:ec:ee:2d:58:0f:fe:a8:5e:a2:
79:fc:11:60:2f:73:70:36:f4:85:9f:79:43:eb:f3:
65:e7:87:50:ee:4f:ae:ca:bc:75:aa:5b:e5:39:e1:
cc:a2:32:bc:7b:be:5c:d2:2a:86:b9:ca:17:3e:cc:
ef:45:d0:6d:1d:d8:88:e7:4c:ea:28:00:31:7e:99:
13:a4:f6:b1:54:59:1e:92:c5:d7:97:04:56:f3:3b:
97:52:c1:ee:b6:09:62:d9:cd:2a:20:29:68:3a:fc:
b3:8f:bf:86:69:f9:bf:a7:3f:7a:8d:75:18:d9:c9:
b4:8b:98:19:dd:d6:6b:f4:55:bf:74:62:8e:8e:f1:
af:30:e3:7f:f6:2c:63:6b:65:64:47:83:cb:1e:0a:
95:33:6c:99:32:df:7e:a6:88:5d:5e:c8:49:f2:c9:
28:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:14:4D:A6:1A:B3:09:F5:55:F0:F4:A4:16:09:06:E8:BF:3D:4B:A2
X509v3 Authority Key Identifier:
keyid:B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3131372e35342e302e302f31362d3234203d3e2039333430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.54.0.0/16
Signature Algorithm: sha256WithRSAEncryption
53:8a:b3:69:91:54:39:6d:eb:f5:36:52:d8:e3:21:06:6c:02:
24:0e:1c:af:2c:b3:78:8b:51:1b:30:1a:4a:7b:b7:41:db:ff:
ca:62:27:66:d6:e5:30:9f:4e:c7:76:40:e1:f6:e4:42:6e:96:
c4:31:e7:5f:ec:70:72:40:3d:ab:94:93:e9:0a:70:2a:4a:48:
86:56:82:67:ef:df:e9:06:57:d0:10:83:c3:c3:c1:1c:5c:39:
ce:b7:d4:7c:9a:c6:1a:4e:d1:a8:78:88:33:6a:cd:31:a3:4a:
b5:16:af:1f:47:ca:80:2f:24:a7:7b:cc:de:73:00:dc:ab:38:
61:0f:49:66:83:33:92:8a:fe:dc:87:e3:df:df:43:26:31:6a:
cc:f7:27:c7:df:5f:0a:a9:a6:40:b6:ee:a4:d7:04:c2:0b:da:
06:03:f8:9c:3b:ef:57:57:d3:04:98:04:5f:15:64:57:67:3f:
f7:51:b0:a6:5c:6d:24:4d:b5:aa:1b:65:a9:58:75:a6:e7:99:
42:1a:1a:0b:8c:e7:84:0e:0e:60:ab:39:7c:4d:91:44:71:8f:
52:57:fc:a0:85:91:97:be:1c:1d:bc:b4:9b:b5:ad:db:b9:96:
cc:eb:16:5e:d4:89:9e:c7:c4:26:72:3c:59:f2:2c:81:e0:19:
b0:ca:e4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:08:19 2026 by rpki-client