
$ rpki-client -vvf rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136302e302f32322d3234203d3e203539323831.roa
File: 3133372e35392e3136302e302f32322d3234203d3e203539323831.roa (raw, json)
Hash identifier: eKAt3iHXo2lgEa5TxrbQhnXVdOLFjM4blG/eTgED9F0=
Subject key identifier: 78:7B:D7:94:FB:14:45:43:C3:CF:AF:A4:3E:60:8B:0F:E2:14:7F:C9
Certificate issuer: /CN=C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9
Certificate serial: 7541DCCE90D55D3EB26B057973514D5B24CD0484
Authority key identifier: C7:6F:AE:70:E7:14:64:49:6E:F4:FA:8E:EE:F0:DF:5C:93:12:C7:C9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136302e302f32322d3234203d3e203539323831.roa
Signing time: Sun 03 May 2026 02:15:51 +0000
ROA not before: Sun 03 May 2026 02:10:51 +0000
ROA not after: Sun 02 May 2027 02:15:51 +0000
asID: 59281
IP address blocks: 137.59.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.crl
rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:41:dc:ce:90:d5:5d:3e:b2:6b:05:79:73:51:4d:5b:24:cd:04:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9
Validity
Not Before: May 3 02:10:51 2026 GMT
Not After : May 2 02:15:51 2027 GMT
Subject: CN=787BD794FB144543C3CFAFA43E608B0FE2147FC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:23:95:e9:42:89:22:ac:7f:93:3f:03:c0:c1:
ca:23:46:39:aa:16:6b:01:51:2d:49:da:31:f1:bd:
23:12:8b:73:21:d4:cb:a0:35:ad:7e:d6:88:18:78:
6d:6e:9b:c2:a9:0b:fa:65:8a:a9:19:0f:80:f0:b0:
ce:37:d3:99:44:44:bc:45:1e:d4:e8:7e:7c:e0:f4:
50:49:43:98:64:b4:4c:6a:2e:27:57:ed:9a:e7:b1:
0c:35:9a:ff:ea:af:fb:40:28:ac:5a:e9:8a:58:b6:
df:a8:ba:22:ca:88:94:7c:bf:cb:c9:3f:0e:87:5f:
e1:d9:cd:a8:b0:1d:91:36:9d:8c:75:96:29:2e:cc:
78:35:55:6b:37:7e:6f:70:c7:75:6a:37:92:e0:f5:
67:1f:f5:64:75:50:18:ba:7b:c8:58:29:b2:0f:d6:
c6:c2:ec:63:d2:e7:2e:8d:a1:0a:c2:f0:a9:31:ae:
84:17:54:d2:35:94:13:5b:ac:47:4e:1c:dc:a9:b2:
33:4b:01:45:57:91:4b:a3:e6:50:52:52:fa:aa:3a:
10:ec:79:f6:65:56:77:24:92:be:5e:9e:1a:bb:e6:
2a:cf:44:b1:f6:1d:63:f9:d7:07:74:db:40:bb:59:
82:59:ba:05:a7:16:49:39:61:49:db:27:d4:ba:24:
04:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7B:D7:94:FB:14:45:43:C3:CF:AF:A4:3E:60:8B:0F:E2:14:7F:C9
X509v3 Authority Key Identifier:
keyid:C7:6F:AE:70:E7:14:64:49:6E:F4:FA:8E:EE:F0:DF:5C:93:12:C7:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136302e302f32322d3234203d3e203539323831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.59.160.0/22
Signature Algorithm: sha256WithRSAEncryption
24:95:69:eb:75:97:05:16:94:61:36:47:eb:6c:0c:45:96:25:
48:18:30:52:bf:aa:67:b7:4b:fd:ea:87:db:da:18:3f:f5:41:
1c:44:db:6f:98:79:bf:04:fc:13:8d:7d:73:92:cc:67:15:9c:
df:c9:29:44:41:f1:23:66:7d:f7:a9:a5:ef:cf:5d:12:f1:b7:
cc:6d:d8:14:50:42:e6:af:a7:a1:13:05:93:85:82:64:b2:60:
14:2b:40:0b:36:f2:d4:67:5b:87:e8:05:2e:49:09:bd:39:ab:
cc:23:d9:ea:0e:06:02:77:4e:c0:7f:66:2f:69:85:11:5d:05:
f1:c7:78:4b:2a:7a:cd:3a:f8:04:1c:3e:24:69:1e:01:0d:99:
f4:38:e1:30:15:40:d2:d3:99:7d:08:b9:d0:a7:18:03:80:fa:
7f:c7:cf:0e:90:29:1b:d5:9f:75:c0:84:cb:11:42:1b:75:e0:
40:3e:86:6c:9d:94:bc:c8:78:88:e5:c6:71:bf:62:b6:af:02:
3b:a1:f2:09:c1:aa:02:91:d7:ed:85:45:21:87:11:23:70:b6:
49:ab:70:7b:f4:92:0c:25:ec:12:43:1c:65:cb:f3:82:31:2e:
ee:5a:30:94:2d:26:46:43:b1:9d:5a:fc:3b:3f:49:56:4a:a5:
5f:a8:00:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:27:22 2026 by rpki-client