
$ rpki-client -vvf repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/3135372e36362e3134322e302f32342d3234203d3e203136353039.roa
File: 3135372e36362e3134322e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: dtHpP/m8KLbGnRe3ljBhKMMLzWqW+st7m3ZDgM49VKg=
Subject key identifier: A7:A1:A0:AE:FB:97:EB:2D:1C:8E:03:DA:D7:3F:A5:ED:5C:7D:A2:C1
Certificate issuer: /CN=9C0CD04CE56225A0085EF8AB28640C3808768B42
Certificate serial: 3CC88A7CBCBFD8B4CACF368EE1E5DAAB1644A8DB
Authority key identifier: 9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/3135372e36362e3134322e302f32342d3234203d3e203136353039.roa
Signing time: Mon 06 Apr 2026 17:00:00 +0000
ROA not before: Mon 06 Apr 2026 16:55:00 +0000
ROA not after: Mon 05 Apr 2027 17:00:00 +0000
asID: 16509
IP address blocks: 157.66.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl
rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 12:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:c8:8a:7c:bc:bf:d8:b4:ca:cf:36:8e:e1:e5:da:ab:16:44:a8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C0CD04CE56225A0085EF8AB28640C3808768B42
Validity
Not Before: Apr 6 16:55:00 2026 GMT
Not After : Apr 5 17:00:00 2027 GMT
Subject: CN=A7A1A0AEFB97EB2D1C8E03DAD73FA5ED5C7DA2C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7a:50:6a:a0:f1:1b:6e:ff:ad:13:eb:54:b8:
6d:fd:9d:2a:d7:a3:94:b7:65:d4:59:13:e0:48:3e:
88:75:96:b0:c9:48:96:c6:18:c1:84:a5:a3:d4:b5:
3f:25:ae:8a:f7:fa:82:e7:b8:85:91:5f:47:fe:8b:
21:3e:85:b8:db:af:87:92:ff:78:56:30:99:4f:bc:
61:43:51:c9:30:cd:72:96:c9:b0:74:f6:44:cc:e6:
26:14:df:56:96:dc:72:56:ca:0c:3b:65:e6:af:00:
97:5c:ca:01:20:c3:ae:3f:c5:d2:6e:9f:60:4e:e1:
f8:5c:fe:60:a5:b7:fc:6f:dd:79:62:c9:1b:a5:43:
dc:f9:51:a6:24:5c:36:f6:25:d7:46:2c:ef:bf:46:
5c:42:0b:2e:56:dd:d2:f7:ed:fb:04:48:6f:12:e6:
98:32:8b:cc:f6:65:85:d7:18:3c:dc:4c:63:2d:9c:
6b:fc:23:26:42:bb:ed:9b:cc:fd:fa:3a:b0:8c:6d:
c5:7b:bb:d6:8b:1e:08:24:09:39:33:89:37:b5:d6:
c6:49:cc:c4:23:15:e5:91:8a:32:40:7c:86:74:c1:
4d:88:26:c8:87:5e:0a:55:65:e4:23:b5:41:ea:3f:
5c:2c:f8:b5:f0:66:f0:4f:24:83:22:c0:88:ad:2a:
dc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A1:A0:AE:FB:97:EB:2D:1C:8E:03:DA:D7:3F:A5:ED:5C:7D:A2:C1
X509v3 Authority Key Identifier:
keyid:9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/3135372e36362e3134322e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.142.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:3c:21:54:a9:dd:d8:07:6d:2d:9c:cb:b9:da:0d:8c:28:8c:
9d:4e:a9:71:10:af:24:81:47:1e:79:52:66:39:85:1c:56:dd:
89:4a:dc:50:f9:1f:9e:10:09:0b:f4:b7:30:26:58:a0:95:e1:
38:fd:60:8e:f1:f6:cb:5d:45:7f:e4:6c:f6:b1:25:49:f1:d3:
bc:fb:b2:ac:57:19:1d:2c:27:29:4d:25:4b:74:cc:43:5b:5d:
07:b3:ad:2a:f9:04:72:fc:a3:10:e5:c3:2d:d5:72:c4:93:89:
a8:14:43:8b:ee:07:c2:a8:47:ac:af:f9:16:e3:5d:37:bb:65:
8f:4d:ac:c0:82:a2:f9:34:c9:9b:58:78:99:38:2b:e7:c1:d6:
05:a5:50:0b:40:4b:ff:1b:c9:12:53:f2:55:bc:b5:33:cd:54:
fc:6a:50:18:da:d3:c8:3e:59:37:65:07:50:f5:41:75:e8:73:
49:c6:47:f1:2e:d8:79:1a:ab:83:94:11:1a:ce:18:19:d0:38:
85:ee:ea:06:51:10:98:aa:a9:fc:b3:c0:42:ce:0a:3b:c2:0b:
ef:2c:a4:ba:e5:b2:e9:b8:43:8e:1e:5d:89:c5:dd:ec:04:1c:
0b:77:dc:8f:e2:23:78:dd:e2:06:13:e4:d0:2d:9a:b5:e5:35:
49:a4:17:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:41:34 2026 by rpki-client