
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/3135372e32302e34342e302f32342d3234203d3e20313532333932.roa
File: 3135372e32302e34342e302f32342d3234203d3e20313532333932.roa (raw, json)
Hash identifier: P5BEjOqlnRhd5dHiMK0aXJooM/BcbKofscPw2JJ5bRQ=
Subject key identifier: 4C:4A:57:E8:85:10:91:51:A6:71:1F:5C:A7:2B:66:5B:F6:E9:31:07
Certificate issuer: /CN=5A1C1ACEC0B674017FFB89F21865BA63FEAAB909
Certificate serial: 6F4B1AC8B33295FEAC68626240577AF6DCE9FC53
Authority key identifier: 5A:1C:1A:CE:C0:B6:74:01:7F:FB:89:F2:18:65:BA:63:FE:AA:B9:09
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/3135372e32302e34342e302f32342d3234203d3e20313532333932.roa
Signing time: Sun 03 May 2026 02:11:15 +0000
ROA not before: Sun 03 May 2026 02:06:15 +0000
ROA not after: Sun 02 May 2027 02:11:15 +0000
asID: 152392
IP address blocks: 157.20.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.crl
rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:47:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:4b:1a:c8:b3:32:95:fe:ac:68:62:62:40:57:7a:f6:dc:e9:fc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A1C1ACEC0B674017FFB89F21865BA63FEAAB909
Validity
Not Before: May 3 02:06:15 2026 GMT
Not After : May 2 02:11:15 2027 GMT
Subject: CN=4C4A57E885109151A6711F5CA72B665BF6E93107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d1:71:75:f8:9e:1f:f1:d1:7a:c2:a4:9d:be:
f9:73:7e:fe:19:e9:65:3d:bb:ec:da:6d:9a:01:15:
7f:35:c7:bc:1f:d3:38:9c:c3:4f:4e:2b:cb:72:b5:
6b:2d:47:fd:92:97:ca:6c:23:31:c1:94:40:d3:8b:
96:9b:0a:85:bb:2e:60:13:ac:46:9c:fc:5f:a4:f9:
92:7e:d6:b4:26:d2:0f:76:dd:ef:73:92:25:23:2d:
4a:48:40:5d:fd:df:12:5c:ce:73:af:af:cc:21:09:
9f:f7:55:c0:3e:94:7b:e7:bf:27:c6:bb:2c:33:fb:
ab:03:2a:3e:18:5d:33:34:10:d6:c6:66:9b:9d:14:
cc:ce:a0:79:9d:ee:b6:c6:53:a1:2d:4d:b4:de:b1:
9b:d6:be:0a:ab:52:87:c6:6b:cb:a1:9c:6c:25:d3:
d5:8b:eb:33:37:6c:a9:c5:23:be:c6:b8:6f:c2:69:
65:0a:96:87:09:1f:7b:03:04:b0:d6:64:ca:c1:9c:
b7:f5:62:be:ce:11:8f:87:de:72:15:21:57:62:e1:
fc:ce:38:a5:e0:ca:d8:c7:c4:00:ed:f6:e3:56:1b:
e8:4f:da:06:13:f0:74:06:bf:72:8e:07:75:b2:69:
cb:12:4e:57:ac:d5:24:96:4b:06:ae:19:7f:e7:4f:
15:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4A:57:E8:85:10:91:51:A6:71:1F:5C:A7:2B:66:5B:F6:E9:31:07
X509v3 Authority Key Identifier:
keyid:5A:1C:1A:CE:C0:B6:74:01:7F:FB:89:F2:18:65:BA:63:FE:AA:B9:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/3135372e32302e34342e302f32342d3234203d3e20313532333932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.20.44.0/24
Signature Algorithm: sha256WithRSAEncryption
18:24:b3:1d:39:ba:0a:5a:86:77:98:62:f5:af:82:c8:b9:fc:
86:d4:07:e3:f8:04:93:33:35:ec:8e:3a:81:c4:92:98:cc:d4:
80:dd:c2:77:7d:58:a2:96:b2:37:b1:71:bd:8a:7a:83:a5:e7:
bb:0e:85:5e:a4:fa:ba:50:3c:32:06:1c:48:a0:be:fe:c3:0d:
27:b4:0c:0f:69:20:02:a1:e1:f2:55:01:c1:64:3a:c8:d1:ca:
e4:c9:4f:73:41:60:49:5c:64:ec:c9:be:ec:c2:cb:d2:96:74:
31:bd:f4:d7:03:4c:76:c8:fc:0b:ff:77:81:29:2d:59:c5:0e:
a7:cf:5d:f7:ab:5b:69:14:52:92:df:15:36:7f:6f:67:65:0f:
84:c9:03:9d:8c:80:10:2d:26:91:cd:e2:61:73:47:93:72:e1:
7c:ec:10:29:00:77:21:25:e9:1e:a4:fd:9a:9d:75:30:3a:84:
bc:4d:c6:d9:5e:da:ca:0f:4d:d3:d7:a1:11:86:d8:c2:8f:52:
70:59:4e:44:d6:28:dd:53:53:1e:bb:40:e1:99:ad:75:03:c0:
ff:8e:00:06:7b:67:be:18:80:b2:b0:59:e1:d7:ba:d3:77:20:
1c:28:45:de:65:52:ea:1a:81:00:90:3f:d2:f5:40:01:a3:68:
2c:eb:88:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:59:31 2026 by rpki-client