
$ rpki-client -vvf repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3132332e3137362e3132322e302f32332d3234203d3e20313336313036.roa
File: 3132332e3137362e3132322e302f32332d3234203d3e20313336313036.roa (raw, json)
Hash identifier: oMWcKMmbzKpWnu4Ys5WPcnPN1g5zt9N0OXFUMe5ZWD0=
Subject key identifier: 66:25:C9:85:F9:9D:6F:8F:6F:FD:50:6E:E8:72:3A:58:79:98:79:6E
Certificate issuer: /CN=55FE929F3DF18E4B5BC4309769AA6C72AFF634CC
Certificate serial: 787DC332D7DE6497874B77733F0B4D5B6D532D44
Authority key identifier: 55:FE:92:9F:3D:F1:8E:4B:5B:C4:30:97:69:AA:6C:72:AF:F6:34:CC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3132332e3137362e3132322e302f32332d3234203d3e20313336313036.roa
Signing time: Wed 18 Mar 2026 09:02:50 +0000
ROA not before: Wed 18 Mar 2026 08:57:50 +0000
ROA not after: Wed 17 Mar 2027 09:02:50 +0000
asID: 136106
IP address blocks: 123.176.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.crl
rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 20:09:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:7d:c3:32:d7:de:64:97:87:4b:77:73:3f:0b:4d:5b:6d:53:2d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55FE929F3DF18E4B5BC4309769AA6C72AFF634CC
Validity
Not Before: Mar 18 08:57:50 2026 GMT
Not After : Mar 17 09:02:50 2027 GMT
Subject: CN=6625C985F99D6F8F6FFD506EE8723A587998796E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9e:5d:33:6f:0d:e3:5d:af:c1:3e:fa:06:a2:
10:ce:99:e5:4d:2b:a9:93:ce:b9:01:29:cb:1b:bd:
05:5c:d0:cf:c9:cb:0f:4d:1f:9e:eb:91:e2:6e:66:
af:dd:a7:4e:dd:e8:e5:8d:05:68:82:20:5c:16:f3:
39:79:7f:b3:1c:aa:fb:92:32:0e:3e:2c:4e:05:93:
e2:1c:07:ee:ba:da:97:b4:70:69:48:37:4a:58:35:
22:e3:6b:ce:ab:f7:c3:40:a0:e5:5c:c6:9d:c5:90:
41:ca:f1:7e:33:c5:aa:5f:c4:8a:2e:ba:44:01:64:
4c:70:d1:e8:60:56:8c:f9:17:08:e5:ae:01:0a:3d:
0c:8a:19:85:4f:9a:4d:63:74:1f:98:64:9e:94:9f:
14:b1:10:56:57:2a:85:d3:12:58:e5:4e:0b:a6:88:
f2:d8:7f:92:76:33:41:45:05:36:7c:64:9d:f3:e4:
06:60:c4:f2:70:07:8f:d8:28:b7:cf:44:d0:f2:91:
63:fd:1e:49:ff:e8:03:e2:15:9b:41:f7:0e:34:e8:
3d:43:1f:2a:94:8f:c4:46:5a:07:59:8b:ad:37:aa:
ae:42:92:8f:d0:78:29:b4:53:4a:a7:c9:6b:72:51:
c0:04:bc:7a:4a:29:70:c5:8e:9a:54:a7:4c:42:e3:
ed:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:25:C9:85:F9:9D:6F:8F:6F:FD:50:6E:E8:72:3A:58:79:98:79:6E
X509v3 Authority Key Identifier:
keyid:55:FE:92:9F:3D:F1:8E:4B:5B:C4:30:97:69:AA:6C:72:AF:F6:34:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3132332e3137362e3132322e302f32332d3234203d3e20313336313036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.176.122.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:09:1b:7c:67:86:2d:94:ab:c9:56:86:a4:4f:26:9e:e6:1c:
1e:ae:2e:7e:45:16:6d:e1:e8:59:16:7e:ef:69:11:39:3f:f5:
c9:bc:76:f3:88:97:1c:e4:54:b8:05:e2:ba:01:ef:8c:8c:fb:
59:06:47:31:49:dc:53:d7:01:e8:87:7a:4f:1f:8d:03:9d:4d:
e3:56:f0:9f:57:cb:46:a4:64:0a:7b:e2:1b:52:59:30:7f:00:
09:c3:25:e8:68:1c:c6:22:4b:6f:da:83:89:e1:b5:60:75:e7:
07:43:75:8e:44:a1:17:a6:c6:8d:cc:7f:43:b1:82:c3:32:73:
43:df:6f:f0:ff:f3:dd:89:d1:d1:b7:2e:06:c4:12:a2:69:f3:
81:6e:82:53:32:74:66:9f:de:30:d2:f7:cf:1d:10:a4:82:e5:
18:c1:d8:ec:39:73:f2:d8:55:eb:e6:ea:75:a8:84:03:c6:69:
30:64:00:3a:5a:72:e5:d3:55:9c:67:48:4c:b8:69:de:7b:ad:
11:15:d1:5e:f6:f0:a8:a2:b3:5b:39:ae:42:d3:19:b4:dc:3b:
60:d3:da:c9:cf:57:99:e3:99:28:2a:03:d2:44:f3:87:13:92:
9e:3d:12:b7:7a:1f:4d:80:9a:26:52:1d:b5:34:8d:8c:43:15:
9c:51:f5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:48:29 2026 by rpki-client