
$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e38382e302f32332d3233203d3e203435373235.roa
File: 3138302e3231312e38382e302f32332d3233203d3e203435373235.roa (raw, json)
Hash identifier: oChMsN5j/5oPIrh3RrzlSsxyq4+7vnx0MXBMJBGCZK8=
Subject key identifier: 6E:26:10:A8:40:50:4E:82:2D:8F:76:45:FB:96:9F:57:3A:58:3E:63
Certificate issuer: /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial: 32DA840F55B684B25D47B629482626BF8F49E8B3
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e38382e302f32332d3233203d3e203435373235.roa
Signing time: Sun 08 Mar 2026 16:00:01 +0000
ROA not before: Sun 08 Mar 2026 15:55:01 +0000
ROA not after: Sun 07 Mar 2027 16:00:01 +0000
asID: 45725
IP address blocks: 180.211.88.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl
rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 21:55:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:da:84:0f:55:b6:84:b2:5d:47:b6:29:48:26:26:bf:8f:49:e8:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Validity
Not Before: Mar 8 15:55:01 2026 GMT
Not After : Mar 7 16:00:01 2027 GMT
Subject: CN=6E2610A840504E822D8F7645FB969F573A583E63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:34:89:e1:41:b3:7d:0b:47:ba:41:7b:cb:dc:
1b:59:05:03:8d:8b:c2:0a:5a:ce:e8:23:9e:fe:51:
90:fb:94:d8:d2:e8:c9:52:0e:32:26:ee:76:df:a8:
b3:98:48:b5:0a:4a:09:0c:20:52:d3:51:b0:85:b4:
c2:1c:2f:ff:29:06:2b:4a:e3:3b:da:0d:ee:73:a5:
2d:af:16:f6:d7:57:76:ea:2d:0c:51:da:a5:9d:31:
6d:b2:f0:8b:2e:56:a6:d7:16:a8:8b:c9:a9:40:9c:
05:17:4a:94:f1:ed:c4:94:7f:e0:0e:a5:59:60:b5:
20:f7:d3:53:81:3d:b8:40:00:7e:40:cc:b8:f0:a6:
a3:ca:22:3b:5c:42:14:80:1d:97:da:cd:6f:e3:56:
3d:8d:dc:53:7a:be:50:45:ab:01:d4:3d:c5:85:3a:
e0:51:81:de:2c:b2:c8:3a:c9:87:44:7e:0b:fe:c1:
e5:10:db:20:69:33:57:6c:45:75:b8:32:f7:28:aa:
74:aa:20:d1:77:92:9f:02:53:a5:3c:85:7b:fd:87:
d0:29:11:34:e3:68:72:ac:f3:2c:3d:0c:b0:49:df:
53:6b:72:32:30:bd:4f:17:5b:7a:51:e7:ce:23:fb:
4f:4a:fa:0c:79:db:b2:d0:c3:11:2b:26:2e:00:47:
cf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:26:10:A8:40:50:4E:82:2D:8F:76:45:FB:96:9F:57:3A:58:3E:63
X509v3 Authority Key Identifier:
keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e38382e302f32332d3233203d3e203435373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.211.88.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:c7:b5:d5:3c:23:52:67:63:86:81:2f:7c:d3:c3:c0:0e:62:
fb:57:f3:a6:24:de:ac:56:5c:67:5c:a6:5a:7b:38:e5:f1:4e:
cb:b1:44:8f:c4:3f:fa:ee:86:6e:ad:6e:87:30:96:54:ee:be:
b0:81:3e:0b:f5:76:ad:a3:66:88:2a:5d:2d:61:52:c7:48:76:
87:01:c8:a2:f5:99:e3:0b:70:1f:7d:aa:51:41:eb:f7:18:fa:
4e:1b:ed:c3:f1:f7:cc:98:8b:79:6b:0e:49:d5:b8:59:e8:b1:
e3:c0:0d:32:f1:71:b9:e7:54:c5:f0:68:61:9d:30:80:0b:f8:
6c:36:bd:dd:ed:e2:a7:d8:ec:5f:03:01:b3:77:43:e8:4d:2d:
30:4b:f4:08:33:14:b2:6d:01:b1:a7:96:c4:76:d6:87:7f:e5:
56:41:fc:97:97:88:1d:c2:9a:70:83:07:5f:57:b5:4b:36:ce:
60:ff:65:06:7f:81:ac:71:62:55:33:8a:32:a4:07:57:64:6a:
ef:22:cf:67:23:f2:e0:1b:a6:22:38:11:dd:01:4d:dd:17:d3:
58:aa:a9:89:bd:18:5c:20:aa:78:ae:38:33:02:1e:b2:85:82:
e5:f9:3a:47:7b:f0:1a:86:4c:57:26:93:e0:53:0c:f5:a4:6d:
26:49:3e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:32:12 2026 by rpki-client