
$ rpki-client -vvf repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3132332e3137362e3132312e302f32342d3234203d3e20313336313036.roa
File: 3132332e3137362e3132312e302f32342d3234203d3e20313336313036.roa (raw, json)
Hash identifier: a+Zt9k8KO4g7DCz8chIDoBqTYXRp9ebEdo4pY7I45zs=
Subject key identifier: FD:F0:AD:91:AB:8F:40:3B:71:25:CB:8B:F9:2B:66:9E:D8:02:F1:EB
Certificate issuer: /CN=55FE929F3DF18E4B5BC4309769AA6C72AFF634CC
Certificate serial: 051F0081FE7E1D2EB722511EAB6C9459DBC044C5
Authority key identifier: 55:FE:92:9F:3D:F1:8E:4B:5B:C4:30:97:69:AA:6C:72:AF:F6:34:CC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3132332e3137362e3132312e302f32342d3234203d3e20313336313036.roa
Signing time: Wed 18 Mar 2026 09:02:50 +0000
ROA not before: Wed 18 Mar 2026 08:57:50 +0000
ROA not after: Wed 17 Mar 2027 09:02:50 +0000
asID: 136106
IP address blocks: 123.176.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.crl
rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 20:09:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:1f:00:81:fe:7e:1d:2e:b7:22:51:1e:ab:6c:94:59:db:c0:44:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55FE929F3DF18E4B5BC4309769AA6C72AFF634CC
Validity
Not Before: Mar 18 08:57:50 2026 GMT
Not After : Mar 17 09:02:50 2027 GMT
Subject: CN=FDF0AD91AB8F403B7125CB8BF92B669ED802F1EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cb:ed:59:b1:5c:bc:c4:b8:41:66:b5:c6:f2:
82:c7:aa:f8:3b:25:e5:2e:33:11:24:64:71:cf:80:
d7:42:41:fa:58:31:cb:6d:ff:b5:6a:b4:c7:a9:03:
a6:30:78:2d:8a:2c:2a:f3:d1:86:76:f9:d5:93:15:
55:ca:12:ff:a8:88:d9:e2:d0:97:ce:20:49:23:bf:
42:56:3d:f0:b2:a8:35:40:d1:b4:2d:1e:9e:eb:f8:
07:46:1f:87:5f:ed:09:04:0c:39:1c:c3:b1:ac:b8:
50:8a:42:b0:81:7c:5b:24:0c:88:68:a3:73:e5:f1:
27:98:86:c1:1a:57:b2:96:d7:be:49:0d:2c:d5:d3:
f0:26:16:c6:86:92:d4:3b:24:04:46:0d:78:cd:de:
37:0a:68:50:5f:12:1f:90:6f:e7:d7:aa:09:bc:92:
d1:75:93:2f:c7:e0:1c:d6:c7:48:82:b8:7e:6e:73:
af:6b:2a:b4:6f:67:b2:83:a5:12:94:b0:43:3f:11:
68:7b:03:5c:50:b2:e1:e7:68:5a:69:b0:00:67:46:
c0:aa:b8:40:fc:ff:e4:82:9e:f5:62:a4:72:82:88:
fe:aa:db:a0:88:05:67:6e:2c:60:61:33:b1:2e:5d:
a7:35:59:e2:ed:2f:d6:8c:03:16:f4:0e:50:9b:15:
49:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F0:AD:91:AB:8F:40:3B:71:25:CB:8B:F9:2B:66:9E:D8:02:F1:EB
X509v3 Authority Key Identifier:
keyid:55:FE:92:9F:3D:F1:8E:4B:5B:C4:30:97:69:AA:6C:72:AF:F6:34:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3132332e3137362e3132312e302f32342d3234203d3e20313336313036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.176.121.0/24
Signature Algorithm: sha256WithRSAEncryption
64:84:00:5d:cb:50:78:89:12:ef:39:44:eb:54:8b:31:d3:6e:
c9:77:49:5a:b3:cc:0c:da:9c:df:48:67:2b:6f:40:54:6c:b7:
11:6b:0d:9c:73:6a:d1:77:82:4f:27:1c:a0:bb:1c:bf:06:a1:
5d:c2:e9:a6:8a:4a:24:fc:63:da:8c:3c:26:48:da:7e:53:5b:
f0:25:7c:5a:e9:5f:98:a9:55:7f:d4:59:e2:d8:33:33:c9:2f:
5a:31:0c:5b:ad:92:43:c2:d9:a1:d8:fb:91:77:6e:fe:7d:7e:
d9:86:5b:66:bb:3c:61:9b:11:4e:53:90:9a:49:d4:36:26:e8:
59:b5:95:be:9c:06:0f:a8:31:dd:01:62:f4:46:d2:50:c2:bc:
36:b1:6b:c7:58:68:8b:87:61:4f:2d:2a:80:bb:0a:cc:35:da:
9a:dd:8e:2a:38:25:75:bd:b4:7f:dd:3e:e4:cc:87:2e:22:f9:
09:dc:70:fc:c2:37:1f:8e:16:04:eb:13:c6:26:04:da:fe:14:
b3:ec:36:ca:15:00:56:90:32:b6:91:1f:ae:d0:67:64:98:65:
29:a6:f2:98:b7:48:42:2c:28:29:52:38:6b:05:37:59:96:f6:
4b:91:a7:32:4c:ca:c8:25:e8:8e:9b:51:e5:5c:8e:ba:cf:52:
3b:fa:ab:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:31:26 2026 by rpki-client