
$ rpki-client -vvf rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136322e302f32342d3234203d3e203536323432.roa
File: 3133372e35392e3136322e302f32342d3234203d3e203536323432.roa (raw, json)
Hash identifier: WqJlVr9FXIRfRfoifCa2GdwTJsz5m8eNFT1ExD1lr/o=
Subject key identifier: B6:6E:3E:30:EB:FE:E6:7D:C2:D9:46:6D:48:5F:76:7A:C5:B3:76:78
Certificate issuer: /CN=C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9
Certificate serial: 2A550AC179C094AC003CF79A84EFE3CF2243E1E2
Authority key identifier: C7:6F:AE:70:E7:14:64:49:6E:F4:FA:8E:EE:F0:DF:5C:93:12:C7:C9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136322e302f32342d3234203d3e203536323432.roa
Signing time: Sun 03 May 2026 02:15:49 +0000
ROA not before: Sun 03 May 2026 02:10:49 +0000
ROA not after: Sun 02 May 2027 02:15:49 +0000
asID: 56242
IP address blocks: 137.59.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.crl
rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:55:0a:c1:79:c0:94:ac:00:3c:f7:9a:84:ef:e3:cf:22:43:e1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9
Validity
Not Before: May 3 02:10:49 2026 GMT
Not After : May 2 02:15:49 2027 GMT
Subject: CN=B66E3E30EBFEE67DC2D9466D485F767AC5B37678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:55:8c:b5:31:d8:df:54:b6:6e:bf:7a:57:29:
f6:92:a7:36:8f:36:f8:a6:51:64:da:3d:ad:e2:15:
ed:c1:b6:81:33:d4:7d:d7:b4:cb:dc:4a:e5:8d:31:
ee:85:70:53:5a:cd:47:43:9b:62:89:c1:e3:fe:ff:
2b:ad:f8:02:32:56:8f:15:fd:63:be:05:5e:52:9a:
6f:a4:ad:4c:69:91:aa:24:c1:11:6e:3d:77:34:b4:
18:82:73:16:99:cd:d0:63:9f:df:6a:aa:61:86:25:
4c:1d:a0:57:5d:1a:de:d4:fa:4d:26:2e:5b:46:3d:
32:f2:51:48:ca:79:a8:80:de:b4:d2:d1:29:a2:16:
c1:d4:e4:cc:f9:64:eb:ff:c1:31:03:6f:f2:bf:00:
13:52:4f:1c:4f:67:0a:21:56:ba:87:e3:45:98:3f:
60:2c:e9:54:ae:a5:17:d1:e3:63:11:64:88:28:f8:
e7:d6:7f:b2:57:43:82:66:25:7b:36:fb:1c:bc:fc:
d4:59:1e:f5:c6:2e:de:29:a0:3f:85:7b:7f:17:2b:
83:55:19:6e:46:39:41:9a:dd:d5:78:6e:93:d6:50:
51:32:87:07:bb:06:22:9b:a9:53:d7:50:6f:77:d4:
38:14:30:57:fb:20:31:3c:10:83:5c:f5:95:85:c5:
79:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6E:3E:30:EB:FE:E6:7D:C2:D9:46:6D:48:5F:76:7A:C5:B3:76:78
X509v3 Authority Key Identifier:
keyid:C7:6F:AE:70:E7:14:64:49:6E:F4:FA:8E:EE:F0:DF:5C:93:12:C7:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136322e302f32342d3234203d3e203536323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.59.162.0/24
Signature Algorithm: sha256WithRSAEncryption
04:59:b7:a3:a5:d0:e3:ed:35:ad:7e:f6:9c:86:b7:8c:00:3e:
c0:25:7a:78:07:08:90:ec:76:3d:a6:3a:f9:23:54:80:df:7c:
3f:72:e7:46:51:fc:c5:7d:71:71:9f:f9:27:6b:80:92:b5:f4:
20:af:fe:74:05:28:9c:2a:b5:4f:2f:bf:09:ad:ae:d8:10:e1:
26:c2:5f:77:d9:1c:48:69:32:7f:2c:44:13:35:e4:ae:25:e2:
ac:df:65:b4:fe:ba:d2:f9:8b:46:03:fd:33:c7:f7:7c:ce:a5:
b6:14:61:1b:72:06:f6:f9:2f:e6:fa:95:ad:aa:3f:6a:c7:a9:
cd:7f:88:e9:7c:f4:a3:94:41:95:7b:a7:dc:6e:2f:15:ec:0b:
9f:3e:f1:8d:79:73:b6:34:66:2c:7b:97:f3:12:50:f7:2d:64:
3e:74:58:67:87:e9:b6:07:fa:15:5d:55:34:4c:fe:d1:5a:7a:
cb:ce:12:14:43:98:0a:74:a4:ec:47:f6:ab:90:8b:f0:64:7d:
7e:03:37:8c:7f:d8:f0:85:ce:9e:b3:9b:91:45:83:a6:77:f4:
4d:3c:3c:f9:8e:03:79:20:39:d5:33:c6:21:bc:1d:67:02:e5:
af:b4:14:a3:02:66:81:1e:cc:59:f8:38:8e:02:00:66:f9:51:
c7:78:61:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:15:32 2026 by rpki-client