
$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39322e302f32332d3233203d3e203435373235.roa
File: 3138302e3231312e39322e302f32332d3233203d3e203435373235.roa (raw, json)
Hash identifier: MyP4+gmqEMvATd1am80ukKw6KXcbOWLTuRR9iOrCz38=
Subject key identifier: 71:56:A6:33:3B:73:6C:E3:6D:24:9F:73:E0:7B:73:1C:9A:BB:4E:BA
Certificate issuer: /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial: 217994903E59EAEA4BA2B12E8D404983494C5064
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39322e302f32332d3233203d3e203435373235.roa
Signing time: Sun 08 Mar 2026 16:00:02 +0000
ROA not before: Sun 08 Mar 2026 15:55:02 +0000
ROA not after: Sun 07 Mar 2027 16:00:02 +0000
asID: 45725
IP address blocks: 180.211.92.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl
rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 30 Mar 2026 01:32:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:79:94:90:3e:59:ea:ea:4b:a2:b1:2e:8d:40:49:83:49:4c:50:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Validity
Not Before: Mar 8 15:55:02 2026 GMT
Not After : Mar 7 16:00:02 2027 GMT
Subject: CN=7156A6333B736CE36D249F73E07B731C9ABB4EBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:12:19:ca:4a:3c:3b:ff:13:34:96:f7:68:69:
a5:8e:8d:29:d7:31:80:b6:f0:24:18:b9:0c:df:ef:
17:c0:87:ca:0a:d1:eb:01:09:77:df:2b:03:ef:35:
7d:3d:70:88:4e:a4:9f:02:53:cd:b9:1f:e4:07:b1:
48:46:e6:e5:21:5d:4d:14:b8:6a:58:f7:f6:b1:39:
8c:bb:b4:58:74:e1:50:0c:b7:14:67:da:0b:f6:97:
8e:b0:b4:bc:4b:70:c0:57:3e:0f:a7:1c:c1:88:61:
7c:b6:56:c5:94:25:29:ea:9c:6c:74:11:d7:75:91:
cd:80:18:00:b1:61:fc:a4:ad:31:a0:35:35:1c:48:
6a:0d:af:99:22:75:01:f1:5c:93:b0:eb:92:fb:8b:
a8:55:e1:1f:37:67:e8:ec:a5:61:86:ae:ff:e5:a2:
ba:6d:0a:f1:7e:36:87:e6:78:a7:dd:8f:28:98:3f:
60:e5:16:ef:9e:99:0d:f4:e5:69:8c:8b:29:95:3c:
e3:4b:62:a6:f4:fc:38:18:bc:6c:d6:e4:62:b0:49:
60:61:da:8a:d0:aa:10:26:03:92:e3:7e:e1:af:ac:
14:4e:51:16:04:28:11:4d:9f:f1:58:7b:89:19:59:
fc:b7:7d:21:f9:af:77:35:ec:9d:23:47:5f:38:bc:
81:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:56:A6:33:3B:73:6C:E3:6D:24:9F:73:E0:7B:73:1C:9A:BB:4E:BA
X509v3 Authority Key Identifier:
keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e39322e302f32332d3233203d3e203435373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.211.92.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:f7:c1:08:ab:e1:23:3a:81:1e:6c:1f:49:e2:b4:ee:8f:e5:
72:1a:0b:8a:15:b1:08:9b:5b:6d:1a:45:8b:62:dd:a8:f9:98:
dd:8f:3c:6f:6d:8e:dc:56:2a:86:3b:94:26:15:d4:7f:f8:0c:
03:60:1d:66:e6:98:c7:04:1b:a4:d9:7a:60:ee:8a:60:a2:d0:
e0:aa:23:7c:ab:5e:d1:1b:6b:3f:ee:1d:e9:49:13:4f:49:93:
e3:ec:50:62:0f:9a:93:7b:43:56:9f:e5:4a:82:75:23:31:a9:
36:02:94:62:d7:92:5f:29:df:fe:e3:7a:ff:95:5b:1e:59:40:
24:58:a4:91:fe:fd:02:12:64:28:23:75:2f:07:68:d4:f8:70:
cb:5a:e9:c9:30:ac:35:48:58:b3:1a:d0:4d:82:47:8a:86:1e:
ed:9d:1c:6f:d7:4b:fd:4d:04:03:27:a1:5b:8f:39:fc:18:c3:
58:3f:32:e2:47:3e:10:db:f3:77:32:27:f8:7c:25:9b:6d:87:
75:a1:44:66:30:02:f9:02:05:bb:46:9b:4c:79:9b:2e:ef:be:
f8:08:d3:5b:a1:bc:12:10:2e:1e:3b:cc:e1:ad:33:cc:30:1e:
79:ab:81:75:22:72:b7:0f:2a:3e:bd:ce:9e:a7:d0:59:67:67:
ca:d0:28:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:58:11 2026 by rpki-client