
$ rpki-client -vvf rpki-rsync.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/3135372e31302e3135382e302f32332d3233203d3e20313532333535.roa
File: 3135372e31302e3135382e302f32332d3233203d3e20313532333535.roa (raw, json)
Hash identifier: lH+nzpIH7qgPs23GtnInagGD3Vn9prF5U113/245LQE=
Subject key identifier: C4:F9:89:A2:CF:0E:C8:4D:65:CF:C1:85:AD:E8:72:FF:D7:F7:83:8F
Certificate issuer: /CN=F5B80CDE21C19D1110E1718B273B65D38874444D
Certificate serial: 3D19D4F0B1AB0333655F408E2011E719B6091216
Authority key identifier: F5:B8:0C:DE:21:C1:9D:11:10:E1:71:8B:27:3B:65:D3:88:74:44:4D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B80CDE21C19D1110E1718B273B65D38874444D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/3135372e31302e3135382e302f32332d3233203d3e20313532333535.roa
Signing time: Sun 03 May 2026 02:14:41 +0000
ROA not before: Sun 03 May 2026 02:09:41 +0000
ROA not after: Sun 02 May 2027 02:14:41 +0000
asID: 152355
IP address blocks: 157.10.158.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/F5B80CDE21C19D1110E1718B273B65D38874444D.crl
rsync://rpki-rsync.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/F5B80CDE21C19D1110E1718B273B65D38874444D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B80CDE21C19D1110E1718B273B65D38874444D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:19:d4:f0:b1:ab:03:33:65:5f:40:8e:20:11:e7:19:b6:09:12:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5B80CDE21C19D1110E1718B273B65D38874444D
Validity
Not Before: May 3 02:09:41 2026 GMT
Not After : May 2 02:14:41 2027 GMT
Subject: CN=C4F989A2CF0EC84D65CFC185ADE872FFD7F7838F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:57:b3:f8:a5:68:9c:79:74:fc:d4:39:aa:e8:
50:3c:23:0d:42:65:df:f5:ba:55:1a:69:15:c7:49:
58:96:42:e1:65:41:db:d2:14:8e:55:be:0c:63:03:
b0:81:5c:49:b4:10:64:03:51:33:8f:f5:cf:c4:ca:
6b:2d:5f:16:99:46:60:7e:cd:81:e0:97:35:39:df:
f4:0a:58:c6:ef:86:24:63:ac:9a:9d:27:7c:36:eb:
9d:9f:1f:d8:ce:0e:61:fc:63:04:3c:01:55:a1:e9:
bd:03:4e:cd:87:b7:60:79:12:be:10:b4:93:fd:5b:
77:20:b8:dc:4e:45:9f:7b:2f:66:de:93:cb:b3:70:
17:41:f0:5d:86:e5:a1:af:2e:7b:13:7f:08:43:54:
e7:b6:cf:e4:09:eb:96:03:dc:a7:5c:bd:3e:33:f5:
09:c5:ce:12:99:48:20:94:0a:06:48:bb:6b:30:e7:
3c:8e:96:07:85:1f:a6:cd:19:ee:c7:50:fe:29:ff:
55:1d:29:60:f5:dd:68:d4:7b:b6:55:35:3e:6d:a0:
df:e6:63:78:6e:2d:79:6c:78:ca:6c:0d:14:d2:69:
bf:77:ee:29:f2:68:75:24:56:69:81:8f:86:48:38:
31:09:dd:02:72:37:5e:d7:ee:a1:b3:40:3f:cd:a9:
6e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F9:89:A2:CF:0E:C8:4D:65:CF:C1:85:AD:E8:72:FF:D7:F7:83:8F
X509v3 Authority Key Identifier:
keyid:F5:B8:0C:DE:21:C1:9D:11:10:E1:71:8B:27:3B:65:D3:88:74:44:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/F5B80CDE21C19D1110E1718B273B65D38874444D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B80CDE21C19D1110E1718B273B65D38874444D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/3135372e31302e3135382e302f32332d3233203d3e20313532333535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.10.158.0/23
Signature Algorithm: sha256WithRSAEncryption
06:fd:4b:44:c1:d2:b7:1e:45:b3:db:3a:bf:f3:a6:d9:d8:d0:
ba:92:4e:b2:b6:ce:39:1c:99:fc:b3:93:79:05:b4:73:da:bd:
8d:03:86:73:c6:f1:8f:a0:10:75:65:d3:e8:95:46:11:d3:3f:
49:a7:1e:a4:a8:42:24:2e:ef:8e:e9:06:82:09:86:fa:d9:f7:
62:c0:96:9b:57:f3:94:7d:92:2e:55:a5:68:e5:60:d2:96:c5:
09:fe:6b:69:27:ae:4e:3e:54:ee:04:a8:4b:a6:c0:33:41:6b:
6a:10:b9:c7:8f:4e:28:c9:12:29:a6:17:7b:8d:55:f4:4f:a5:
c1:1e:15:13:39:45:a1:85:8e:86:a5:03:f2:ae:5c:db:22:13:
47:1f:b4:9b:b9:10:26:20:d7:dc:5a:77:03:6f:63:f6:c9:5c:
7c:67:9a:45:3b:62:3f:a2:c3:cc:fc:e9:60:e7:6f:87:fe:e3:
96:b3:f2:47:b0:c5:1a:ac:fd:ee:da:09:59:5f:59:cd:1f:54:
9d:47:64:76:ec:61:16:37:a2:eb:58:38:84:4a:cd:fc:89:88:
a9:26:4c:0e:2d:ef:eb:52:dd:20:e9:62:2d:19:af:75:22:c0:
b8:8f:00:c1:db:65:ef:6f:6d:d6:84:6f:db:60:70:c6:ba:83:
a2:40:3a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:39:54 2026 by rpki-client