
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/3135372e31352e38332e302f32342d3234203d3e20313532333633.roa
File: 3135372e31352e38332e302f32342d3234203d3e20313532333633.roa (raw, json)
Hash identifier: 8N1ryLqGS1Ck4AODHf8NX/rVMxyMRb5QCwGLiIIXGg8=
Subject key identifier: 28:BC:D0:30:90:ED:8C:13:FA:C5:08:4D:19:AE:E5:B7:51:6D:D3:7A
Certificate issuer: /CN=2AE1433BB82F27716DF526DADCCC4C2B37589CA5
Certificate serial: 2081BA354CCF858B3391EFE4864A00E2FE819399
Authority key identifier: 2A:E1:43:3B:B8:2F:27:71:6D:F5:26:DA:DC:CC:4C:2B:37:58:9C:A5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/3135372e31352e38332e302f32342d3234203d3e20313532333633.roa
Signing time: Sun 03 May 2026 02:17:34 +0000
ROA not before: Sun 03 May 2026 02:12:34 +0000
ROA not after: Sun 02 May 2027 02:17:34 +0000
asID: 152363
IP address blocks: 157.15.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.crl
rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:57:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:81:ba:35:4c:cf:85:8b:33:91:ef:e4:86:4a:00:e2:fe:81:93:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AE1433BB82F27716DF526DADCCC4C2B37589CA5
Validity
Not Before: May 3 02:12:34 2026 GMT
Not After : May 2 02:17:34 2027 GMT
Subject: CN=28BCD03090ED8C13FAC5084D19AEE5B7516DD37A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4d:1b:c0:fb:fe:cd:f0:8a:84:d9:69:61:e9:
79:45:1e:32:36:aa:d2:34:12:40:0e:c2:f6:ec:41:
21:6f:28:f2:d2:17:3c:a3:d9:f7:c6:b0:a8:12:83:
50:7f:ec:6e:31:5a:f4:21:11:48:20:be:43:17:81:
79:19:4b:e2:1c:9b:d2:8f:53:cd:9a:d2:2a:8a:3b:
f1:c6:80:4f:4d:24:d3:f3:fc:e7:30:62:40:02:80:
68:bb:3c:d9:04:06:61:88:0a:c9:28:56:4f:da:5f:
b2:8f:d4:13:38:5e:c1:11:27:7f:86:e4:77:c8:c5:
bc:57:8e:85:bd:c2:70:76:b4:19:a1:1f:c1:38:f9:
fe:97:0c:e3:9c:21:2b:ff:a9:c1:e8:3f:64:23:ab:
58:f4:b3:27:cd:fa:09:15:87:7c:63:9b:24:58:50:
6c:4f:31:ea:41:1f:55:98:6d:77:eb:b9:03:ca:8d:
2b:0b:97:93:89:03:f4:09:1d:17:d7:25:63:3d:b0:
74:1a:7e:65:fd:50:65:4b:c8:9c:6e:b4:91:11:06:
67:4c:6b:db:01:5c:35:d0:f3:be:4c:76:66:26:9d:
94:16:9d:e7:b3:60:7d:3a:25:c6:e2:33:cb:c6:d7:
c4:52:5c:79:f0:08:37:44:d6:71:59:13:0b:f4:96:
7d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BC:D0:30:90:ED:8C:13:FA:C5:08:4D:19:AE:E5:B7:51:6D:D3:7A
X509v3 Authority Key Identifier:
keyid:2A:E1:43:3B:B8:2F:27:71:6D:F5:26:DA:DC:CC:4C:2B:37:58:9C:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2AE1433BB82F27716DF526DADCCC4C2B37589CA5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/3135372e31352e38332e302f32342d3234203d3e20313532333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.15.83.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:98:4f:04:fd:30:30:c8:55:c3:23:1f:db:7e:3c:bb:65:41:
15:f7:43:e2:bf:e3:a4:56:2d:96:d2:6d:06:07:fe:90:ce:91:
ae:f9:c7:dc:25:d9:90:4f:3d:3c:63:25:d7:bf:a5:7c:ae:f5:
51:7e:f3:fa:d5:74:3f:0d:ec:12:d7:71:94:53:18:ef:61:6e:
eb:65:ac:cb:27:ab:6c:90:ca:7b:c7:5e:2b:0e:f7:01:66:bd:
4e:88:a8:5b:f2:9f:13:ab:fe:40:b3:ad:b5:ff:11:1f:ad:d2:
14:49:58:43:43:68:77:97:27:ad:e4:6d:d7:ef:bb:e9:29:a3:
30:64:cd:04:bd:a3:c1:07:e4:97:83:2f:a6:2d:3e:a8:54:fa:
d7:15:21:90:c9:71:e5:18:c4:30:5a:ad:d4:19:2b:83:62:26:
bd:36:ef:d2:96:14:8b:4d:42:5c:f1:79:94:be:12:82:1c:13:
2a:04:6b:d4:33:d6:02:5f:49:19:67:03:4b:a5:83:08:c3:22:
2b:79:cf:14:07:bd:e7:44:34:6a:46:dc:01:f1:e0:5a:9b:7a:
34:8b:3c:69:6b:2d:99:03:6f:4b:fd:95:e3:88:36:5a:59:a3:
30:73:d5:31:0c:64:d1:7d:8f:39:58:98:1e:f2:9e:88:29:63:
99:2f:0e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:55:23 2026 by rpki-client