
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/3135372e36362e35362e302f32342d3234203d3e203538343737.roa
File: 3135372e36362e35362e302f32342d3234203d3e203538343737.roa (raw, json)
Hash identifier: c2UfSKD11fX4h2x5HJIXy7pbYdyuzBLTiInfb4Fri14=
Subject key identifier: 92:E7:22:DB:2B:99:BB:F7:79:1D:60:AD:55:F2:EC:C1:F1:21:31:FE
Certificate issuer: /CN=8B463984C16522A35FAAB60708D34C89D9D9F1E7
Certificate serial: 019EB1E66EB5AEAAA5F7A686FC46AD3C448D22E0
Authority key identifier: 8B:46:39:84:C1:65:22:A3:5F:AA:B6:07:08:D3:4C:89:D9:D9:F1:E7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/3135372e36362e35362e302f32342d3234203d3e203538343737.roa
Signing time: Sun 03 May 2026 02:17:37 +0000
ROA not before: Sun 03 May 2026 02:12:37 +0000
ROA not after: Sun 02 May 2027 02:17:37 +0000
asID: 58477
IP address blocks: 157.66.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.crl
rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:44:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:e6:6e:b5:ae:aa:a5:f7:a6:86:fc:46:ad:3c:44:8d:22:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B463984C16522A35FAAB60708D34C89D9D9F1E7
Validity
Not Before: May 3 02:12:37 2026 GMT
Not After : May 2 02:17:37 2027 GMT
Subject: CN=92E722DB2B99BBF7791D60AD55F2ECC1F12131FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a3:16:02:86:ab:45:7b:dc:48:bc:05:4e:a0:
00:8d:32:1d:ac:95:2f:ca:9c:6d:d3:7f:7b:af:94:
0c:68:2f:98:83:69:7c:21:1e:db:a8:40:c7:31:74:
e5:f4:64:bd:71:16:f4:07:9f:5d:2b:8e:41:d6:a9:
82:1c:26:2b:60:f1:4d:b6:a5:ba:7a:55:2f:f2:73:
0b:3a:9c:47:e6:a4:c1:9c:ff:af:8a:e0:75:cb:21:
a4:eb:01:95:bf:28:a4:b9:fd:12:a4:fc:a1:bd:59:
fe:3d:b4:32:f2:bb:85:88:e5:77:77:3b:28:54:f5:
a7:9a:fb:b8:ae:ac:ed:43:96:30:84:33:5d:fa:e8:
69:a5:97:08:0b:4c:4d:b5:7a:fb:7c:5a:88:21:4b:
8d:fe:61:0d:5f:63:49:96:95:1b:56:74:d6:08:55:
bb:0e:a0:6a:bc:7e:76:04:99:f6:52:90:2b:74:32:
cd:93:13:d6:63:f4:08:a4:5d:16:6a:6a:0e:72:99:
8f:c0:b5:aa:fc:a9:cd:56:27:6a:39:b2:af:50:66:
f1:5f:68:b2:01:d0:d3:40:a6:a9:9d:28:ac:81:14:
6a:a4:00:14:00:be:86:52:60:54:23:b9:fd:f8:68:
c5:17:73:31:1b:9f:f7:cb:fc:5e:79:6d:08:6a:cf:
45:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E7:22:DB:2B:99:BB:F7:79:1D:60:AD:55:F2:EC:C1:F1:21:31:FE
X509v3 Authority Key Identifier:
keyid:8B:46:39:84:C1:65:22:A3:5F:AA:B6:07:08:D3:4C:89:D9:D9:F1:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8B463984C16522A35FAAB60708D34C89D9D9F1E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/3135372e36362e35362e302f32342d3234203d3e203538343737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.56.0/24
Signature Algorithm: sha256WithRSAEncryption
34:8c:03:16:b6:dd:c5:47:56:e1:c0:5b:01:1d:00:e1:d5:17:
0a:c4:d6:68:be:89:d1:e5:dd:29:17:d6:7a:a6:0a:c8:4f:75:
f2:b2:4c:10:c4:b7:88:8a:af:7c:4b:5c:8b:a5:f4:2a:b1:15:
10:a6:6d:e7:b2:80:d4:91:2c:53:63:0a:96:ab:67:dc:7e:da:
23:13:f9:1c:20:90:a8:44:87:73:6e:88:d5:7a:36:36:02:50:
b5:0d:6a:e3:b0:41:40:7b:08:97:ad:25:05:22:5c:b8:39:92:
97:70:19:05:7f:1a:9d:e9:3f:e2:50:18:46:76:9d:13:ec:db:
3f:17:bb:13:64:3c:32:03:6d:f6:40:cc:a0:b3:68:64:24:72:
ab:5c:b6:96:45:fc:0e:60:25:20:70:18:99:92:18:f8:e6:98:
77:35:18:05:a0:b9:cd:01:e4:3a:ae:4a:24:b3:dc:bf:24:83:
ca:cf:28:2b:4a:ba:fa:9a:05:02:52:74:d7:81:9e:dc:2c:91:
2c:63:67:1d:00:4c:0e:bc:6f:b1:63:f8:63:2f:7b:86:38:b3:
2a:8a:ef:4a:c8:45:36:b6:51:db:d2:2c:34:ba:c2:7e:48:f1:
59:bd:84:16:49:26:53:38:8c:8e:b3:ed:44:a9:07:69:10:66:
ee:0f:ba:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:24 2026 by rpki-client