
$ rpki-client -vvf repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3137312e302f32342d3234203d3e203233363731.roa
File: 3131312e39322e3137312e302f32342d3234203d3e203233363731.roa (raw, json)
Hash identifier: ycsBQ1f3faWplT+yojRHEipyxF4zBZVwHwB2PpNuO+w=
Subject key identifier: EA:1E:2C:2F:48:E5:79:6E:35:D4:ED:16:79:1A:A2:A1:8C:22:D3:D8
Certificate issuer: /CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F
Certificate serial: 3CE2F6F0E4437D2EB38F38FD94FB5422213F30B9
Authority key identifier: 47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3137312e302f32342d3234203d3e203233363731.roa
Signing time: Mon 30 Mar 2026 10:02:46 +0000
ROA not before: Mon 30 Mar 2026 09:57:46 +0000
ROA not after: Mon 29 Mar 2027 10:02:46 +0000
asID: 23671
IP address blocks: 111.92.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl
rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 12:14:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:e2:f6:f0:e4:43:7d:2e:b3:8f:38:fd:94:fb:54:22:21:3f:30:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F
Validity
Not Before: Mar 30 09:57:46 2026 GMT
Not After : Mar 29 10:02:46 2027 GMT
Subject: CN=EA1E2C2F48E5796E35D4ED16791AA2A18C22D3D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d1:36:b7:9c:9a:20:1a:8e:62:7e:5e:da:d2:
d3:74:ee:3c:33:cc:45:32:7e:22:d5:0f:ce:83:4d:
36:0d:06:25:41:0f:2c:23:ff:45:3c:3a:1e:68:0f:
5b:ee:08:5d:e8:7b:30:75:05:27:27:fb:95:75:d6:
9a:09:1f:c4:9b:37:49:d9:78:84:d6:88:e8:d0:53:
f4:56:58:a6:a1:49:01:d0:b0:94:ff:d9:01:ba:5c:
4e:a5:87:3a:e7:4a:cd:43:39:af:c3:a9:40:13:a6:
f7:f8:a1:d4:98:ec:6e:c2:2d:d6:c1:4d:2f:ab:1d:
81:5b:42:35:8e:4b:a6:6e:b5:f9:d9:55:50:22:3d:
1f:ac:1d:db:b0:01:94:27:bf:d5:9b:14:43:64:18:
75:cb:4d:e8:b1:69:a1:d8:6a:50:ba:9f:f0:87:2f:
c4:e8:e1:b4:a6:df:34:ed:c2:36:5b:08:d9:f3:fd:
32:5f:30:72:4b:3b:a5:9b:b4:d5:31:19:5d:98:c3:
ce:1c:b6:ba:df:5e:ba:50:0d:b8:e1:fc:22:b5:d3:
0c:cb:d3:3f:c3:33:1c:43:08:e0:12:45:ac:da:f6:
de:3a:28:f2:3d:81:49:30:ac:df:62:0c:00:67:53:
e1:12:b0:ba:9f:63:2f:76:dd:18:e6:b0:e4:d1:e0:
f8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1E:2C:2F:48:E5:79:6E:35:D4:ED:16:79:1A:A2:A1:8C:22:D3:D8
X509v3 Authority Key Identifier:
keyid:47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3137312e302f32342d3234203d3e203233363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.92.171.0/24
Signature Algorithm: sha256WithRSAEncryption
87:d5:62:bc:1d:20:d1:6e:24:16:c2:58:ff:c5:27:af:f1:da:
ad:b7:9f:44:a3:4d:c6:93:c2:ec:e9:c2:00:d3:52:f6:d7:5b:
3f:3d:04:51:ce:83:47:83:d1:0c:0e:d3:02:3f:5f:91:22:51:
b8:e7:c6:db:de:58:45:5c:79:02:04:19:c3:be:fc:77:96:1a:
7e:0d:41:68:f0:e2:4f:be:e8:02:33:a4:3e:eb:fb:b6:9f:3a:
00:b1:1b:26:a8:40:b3:a7:2b:48:39:a3:9b:cc:dc:78:20:7e:
fd:9c:bd:28:7d:07:71:3d:f2:bc:88:a3:44:e9:31:a9:3b:b4:
45:85:a5:1d:5e:a8:d8:37:15:98:6c:7a:e9:00:c8:90:f0:2c:
36:64:e0:ca:9c:b1:3c:c7:1a:3f:a9:fc:01:50:ef:5d:c2:b1:
55:b5:45:72:4b:64:10:c2:d3:8f:1e:b8:e4:36:00:a1:f3:38:
d0:bb:26:c3:cd:ee:06:36:47:65:09:18:f6:79:60:fe:64:6a:
5a:2d:0a:5a:a3:ea:bf:90:90:66:ec:9e:9e:8e:17:e3:01:ae:
70:f9:12:9f:7f:b7:23:cc:fa:79:9f:b4:12:2c:dc:72:1b:36:
bd:f3:67:62:9a:d4:19:e5:91:31:10:30:92:c9:16:7c:74:1d:
95:a1:fc:d0
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUPOL28ORDfS6zjzj9lPtUIiE/MLkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc2NjFEQzQyQTJCQ0M1QkNFRUU3M0FDOEFCQTcxQjEy
MTg4ODY2RjAeFw0yNjAzMzAwOTU3NDZaFw0yNzAzMjkxMDAyNDZaMDMxMTAvBgNV
BAMTKEVBMUUyQzJGNDhFNTc5NkUzNUQ0RUQxNjc5MUFBMkExOEMyMkQzRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx0Ta3nJogGo5ifl7a0tN07jwz
zEUyfiLVD86DTTYNBiVBDywj/0U8Oh5oD1vuCF3oezB1BScn+5V11poJH8SbN0nZ
eITWiOjQU/RWWKahSQHQsJT/2QG6XE6lhzrnSs1DOa/DqUATpvf4odSY7G7CLdbB
TS+rHYFbQjWOS6ZutfnZVVAiPR+sHduwAZQnv9WbFENkGHXLTeixaaHYalC6n/CH
L8To4bSm3zTtwjZbCNnz/TJfMHJLO6WbtNUxGV2Yw84ctrrfXrpQDbjh/CK10wzL
0z/DMxxDCOASRaza9t46KPI9gUkwrN9iDABnU+ESsLqfYy923RjmsOTR4PjhAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU6h4sL0jleW411O0WeRqioYwi09gwHwYDVR0j
BBgwFoAUR2YdxCorzFvO7nOsirpxsSGIhm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ZDliYTk1My04NDg5LTQ1MGUtYmJkZi03NjQ1NzFmYmFjZTcvMC80NzY2MURDNDJB
MkJDQzVCQ0VFRTczQUM4QUJBNzFCMTIxODg4NjZGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDc2NjFEQzQyQTJCQ0M1QkNFRUU3M0FDOEFCQTcxQjEyMTg4
ODY2Ri5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VkOWJhOTUzLTg0ODktNDUwZS1i
YmRmLTc2NDU3MWZiYWNlNy8wLzMxMzEzMTJlMzkzMjJlMzEzNzMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG9cqzANBgkqhkiG
9w0BAQsFAAOCAQEAh9VivB0g0W4kFsJY/8Unr/HarbefRKNNxpPC7OnCANNS9tdb
Pz0EUc6DR4PRDA7TAj9fkSJRuOfG295YRVx5AgQZw778d5Yafg1BaPDiT77oAjOk
Puv7tp86ALEbJqhAs6crSDmjm8zceCB+/Zy9KH0HcT3yvIijROkxqTu0RYWlHV6o
2DcVmGx66QDIkPAsNmTgypyxPMcaP6n8AVDvXcKxVbVFcktkEMLTjx645DYAofM4
0Lsmw83uBjZHZQkY9nlg/mRqWi0KWqPqv5CQZuyeno4X4wGucPkSn3+3I8z6eZ+0
Eizcchs2vfNnYprUGeWRMRAwkskWfHQdlaH80A==
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:04:29 2026 by rpki-client