
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/3135372e31352e38322e302f32332d3233203d3e20313532333633.roa
File: 3135372e31352e38322e302f32332d3233203d3e20313532333633.roa (raw, json)
Hash identifier: 8wKUF9NYC7pRZOxvlEf5LxZ2nZECYvwr1BSS5u1G+4Y=
Subject key identifier: 88:0D:B5:6D:E5:DA:7B:EA:13:8F:EF:8B:3B:3A:DF:BF:70:42:04:EF
Certificate issuer: /CN=2AE1433BB82F27716DF526DADCCC4C2B37589CA5
Certificate serial: 79877D13858E817258D645EB111B2B9746C9EA6B
Authority key identifier: 2A:E1:43:3B:B8:2F:27:71:6D:F5:26:DA:DC:CC:4C:2B:37:58:9C:A5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/3135372e31352e38322e302f32332d3233203d3e20313532333633.roa
Signing time: Sun 03 May 2026 02:17:34 +0000
ROA not before: Sun 03 May 2026 02:12:34 +0000
ROA not after: Sun 02 May 2027 02:17:34 +0000
asID: 152363
IP address blocks: 157.15.82.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.crl
rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:57:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:87:7d:13:85:8e:81:72:58:d6:45:eb:11:1b:2b:97:46:c9:ea:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AE1433BB82F27716DF526DADCCC4C2B37589CA5
Validity
Not Before: May 3 02:12:34 2026 GMT
Not After : May 2 02:17:34 2027 GMT
Subject: CN=880DB56DE5DA7BEA138FEF8B3B3ADFBF704204EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:be:b9:57:10:c4:76:6d:1c:d4:61:37:8b:e2:
68:90:47:06:28:d3:e5:b8:ff:20:f0:6e:bd:ae:03:
48:f8:3f:e8:95:de:c6:b2:60:5d:88:4d:a5:8b:d9:
ff:3b:d7:5b:71:80:b6:49:18:31:de:53:b2:c6:6f:
14:ca:04:98:8b:34:71:7d:0d:df:8f:8b:47:8f:29:
8a:60:87:3d:bd:4f:39:13:8f:ed:8b:16:82:d4:ca:
59:2c:b4:1e:ff:b3:4b:8a:6c:6e:b8:41:a6:f5:1d:
b3:a0:82:f1:9a:36:f0:c3:19:8f:59:44:fd:c1:2c:
48:75:5e:33:95:df:0d:f1:24:fe:a3:cf:ae:22:1d:
5b:f1:d0:db:55:6c:dc:d4:32:3b:dd:dc:85:6f:d7:
3b:68:c3:4b:15:d9:e5:2b:f2:25:5a:a6:57:17:fc:
25:cd:1e:16:82:48:90:8e:e6:e0:1a:2d:3c:c2:a8:
57:f1:b4:e9:34:95:ea:f9:ce:dc:7c:55:09:9c:fe:
57:46:99:20:f2:70:14:a3:96:e8:ed:d1:88:21:82:
12:60:2a:13:10:7a:cc:0e:7c:1c:82:01:61:8f:35:
90:4a:ca:db:a6:79:98:35:5c:c1:ca:c9:b9:f9:45:
8a:9b:ef:4d:29:1d:3d:11:48:56:ff:a2:c5:25:82:
82:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0D:B5:6D:E5:DA:7B:EA:13:8F:EF:8B:3B:3A:DF:BF:70:42:04:EF
X509v3 Authority Key Identifier:
keyid:2A:E1:43:3B:B8:2F:27:71:6D:F5:26:DA:DC:CC:4C:2B:37:58:9C:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/3135372e31352e38322e302f32332d3233203d3e20313532333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.15.82.0/23
Signature Algorithm: sha256WithRSAEncryption
ce:34:2d:1e:5c:31:be:94:b5:14:94:c9:86:26:48:3b:7f:3e:
38:0b:05:68:b8:49:5f:65:7d:41:75:2b:9a:8a:93:45:3c:37:
98:6f:4e:9c:73:37:ea:04:ef:be:fa:93:96:9e:f2:5b:77:b2:
1c:be:f6:ef:78:58:7e:73:21:f3:61:a1:43:ba:e7:38:b2:e9:
b9:ca:c1:c8:16:f0:72:90:b6:d7:4a:ca:af:b6:83:ed:28:b2:
40:35:98:fb:a6:d4:c4:b7:a6:e0:10:9f:20:a1:62:db:70:ba:
6e:69:c4:6c:cf:53:66:f1:42:bb:20:2c:7c:e2:3d:1d:9b:5a:
9b:55:81:f3:4f:94:4a:6e:6e:4e:2b:27:36:fd:d2:fd:23:e2:
a3:94:99:14:2c:96:bf:a3:66:7d:43:4a:f3:69:1b:09:da:48:
e9:98:16:54:e9:97:f4:3b:81:87:97:dc:b1:6f:02:62:24:2b:
5e:96:d1:a9:cf:52:df:22:66:d6:2e:3a:ac:10:bc:37:78:cc:
07:c5:96:0b:e4:72:2f:9e:ad:f5:41:2c:4d:e9:95:0c:53:c2:
d0:1e:c8:c7:37:bf:3d:33:7d:af:d7:f8:50:c9:55:75:1d:16:
eb:89:cb:d1:c6:f5:2d:4c:18:ae:f7:b9:bf:92:45:fc:3a:b6:
15:66:d4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:37:49 2026 by rpki-client