
$ rpki-client -vvf rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/3135372e36362e32392e302f32342d3234203d3e203539323831.roa
File: 3135372e36362e32392e302f32342d3234203d3e203539323831.roa (raw, json)
Hash identifier: Lkb66D/b6HHbDg6MW2ra2IYcOlvwvMwBNjyaQ7Wpqq4=
Subject key identifier: 55:ED:EA:C7:E9:4F:DC:4F:C0:9F:DB:E9:61:72:92:36:19:A4:0B:C0
Certificate issuer: /CN=8100B25D994714EDA24AA78389FB6369505FB6A1
Certificate serial: 63BF69FD22346B22EFDAECB0FBD8694FBA135AF1
Authority key identifier: 81:00:B2:5D:99:47:14:ED:A2:4A:A7:83:89:FB:63:69:50:5F:B6:A1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8100B25D994714EDA24AA78389FB6369505FB6A1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/3135372e36362e32392e302f32342d3234203d3e203539323831.roa
Signing time: Sun 03 May 2026 02:24:03 +0000
ROA not before: Sun 03 May 2026 02:19:03 +0000
ROA not after: Sun 02 May 2027 02:24:03 +0000
asID: 59281
IP address blocks: 157.66.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/8100B25D994714EDA24AA78389FB6369505FB6A1.crl
rsync://rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/8100B25D994714EDA24AA78389FB6369505FB6A1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8100B25D994714EDA24AA78389FB6369505FB6A1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:25:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:bf:69:fd:22:34:6b:22:ef:da:ec:b0:fb:d8:69:4f:ba:13:5a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8100B25D994714EDA24AA78389FB6369505FB6A1
Validity
Not Before: May 3 02:19:03 2026 GMT
Not After : May 2 02:24:03 2027 GMT
Subject: CN=55EDEAC7E94FDC4FC09FDBE96172923619A40BC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c3:18:66:18:fe:7e:21:29:5d:07:f5:13:2d:
39:02:69:c2:56:b5:8a:ed:d6:78:31:8b:6c:7e:c0:
a5:e1:5f:a5:67:14:b2:9d:39:6a:66:9f:97:9a:24:
9d:49:db:57:bb:f7:e0:a1:ae:d3:26:13:75:b3:56:
7b:c4:ee:a2:c7:67:57:5c:ea:ac:4d:d4:ca:c9:11:
cf:3b:7b:17:b4:39:29:45:2b:2b:53:c3:b8:4c:12:
e1:fa:d2:6e:54:05:10:1e:64:b5:8c:3f:20:23:ec:
d3:1e:2a:b8:36:1a:59:fb:63:67:37:ee:78:d8:83:
6c:c8:99:c5:19:1c:59:b1:f5:07:75:f7:31:d9:e2:
20:67:1b:3e:da:c4:fc:77:38:70:54:97:0a:d5:ad:
f8:92:49:de:93:fb:00:7d:06:8f:54:c5:cd:3c:9a:
61:9e:2e:5c:80:f4:16:e6:c8:b8:f5:66:ec:5c:70:
09:76:87:95:fb:cf:7d:a1:85:62:26:cd:50:ee:f3:
f2:e0:6e:84:01:7e:20:19:f9:c7:37:80:db:89:2c:
fd:aa:10:31:61:db:cb:ac:d3:d8:23:3b:31:0f:f8:
5f:fc:51:ca:e7:00:7d:6f:fb:4a:21:16:ef:4d:d5:
5e:2f:9e:d8:9d:ea:9d:aa:eb:c2:c5:1d:b7:f1:bd:
bb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:ED:EA:C7:E9:4F:DC:4F:C0:9F:DB:E9:61:72:92:36:19:A4:0B:C0
X509v3 Authority Key Identifier:
keyid:81:00:B2:5D:99:47:14:ED:A2:4A:A7:83:89:FB:63:69:50:5F:B6:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/8100B25D994714EDA24AA78389FB6369505FB6A1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8100B25D994714EDA24AA78389FB6369505FB6A1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/3135372e36362e32392e302f32342d3234203d3e203539323831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.29.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:a5:aa:7f:dc:3d:e2:fd:b0:e9:02:33:84:4e:01:b1:36:6a:
37:41:e2:1e:2f:9e:93:db:b1:01:31:e9:ff:de:a7:a4:ed:21:
3d:a4:21:5b:52:9d:60:ff:bd:64:6c:50:f5:0d:c0:db:b1:ac:
f6:1d:dc:28:c8:43:43:66:19:73:96:89:03:ee:c1:11:23:42:
b1:a0:af:c7:ea:87:86:ab:ac:4d:0b:1c:d8:84:6c:fa:52:df:
51:98:3c:b4:cc:a9:82:41:c8:34:72:31:57:33:5b:75:17:21:
a8:fd:b0:1f:78:32:94:3e:0c:5b:93:d6:c7:3f:77:54:71:81:
38:35:b2:5d:99:f7:a3:56:87:c3:d3:e1:aa:b7:e6:46:ef:41:
42:b3:73:91:f7:1b:79:86:bb:80:a8:76:41:4a:32:d2:d0:ed:
10:80:c7:15:21:45:33:ae:8d:4a:4f:a8:07:92:c9:6b:b0:18:
f8:0c:1f:28:7c:66:9f:55:9f:26:7f:3e:bd:c6:e8:ff:29:0d:
fa:84:35:22:7d:4a:7e:66:19:47:a2:eb:a5:14:df:eb:5e:54:
76:68:b3:4e:ee:5b:51:a8:6d:dc:e3:8e:97:40:5b:16:a0:e6:
b7:1e:50:0b:68:9c:3f:fb:97:f7:d1:c3:5c:4d:1d:64:b9:20:
1f:d7:0f:00
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUY79p/SI0ayLv2uyw+9hpT7oTWvEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODEwMEIyNUQ5OTQ3MTRFREEyNEFBNzgzODlGQjYzNjk1
MDVGQjZBMTAeFw0yNjA1MDMwMjE5MDNaFw0yNzA1MDIwMjI0MDNaMDMxMTAvBgNV
BAMTKDU1RURFQUM3RTk0RkRDNEZDMDlGREJFOTYxNzI5MjM2MTlBNDBCQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5wxhmGP5+ISldB/UTLTkCacJW
tYrt1ngxi2x+wKXhX6VnFLKdOWpmn5eaJJ1J21e79+ChrtMmE3WzVnvE7qLHZ1dc
6qxN1MrJEc87exe0OSlFKytTw7hMEuH60m5UBRAeZLWMPyAj7NMeKrg2Gln7Y2c3
7njYg2zImcUZHFmx9Qd19zHZ4iBnGz7axPx3OHBUlwrVrfiSSd6T+wB9Bo9Uxc08
mmGeLlyA9BbmyLj1ZuxccAl2h5X7z32hhWImzVDu8/LgboQBfiAZ+cc3gNuJLP2q
EDFh28us09gjOzEP+F/8UcrnAH1v+0ohFu9N1V4vntid6p2q68LFHbfxvbtVAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUVe3qx+lP3E/An9vpYXKSNhmkC8AwHwYDVR0j
BBgwFoAUgQCyXZlHFO2iSqeDiftjaVBftqEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MzFiNDMzYTUtNzJiMS00NjUzLTk5ZDMtOTQ2OWM4YjhiNzYyLzAvODEwMEIyNUQ5
OTQ3MTRFREEyNEFBNzgzODlGQjYzNjk1MDVGQjZBMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC84MTAwQjI1RDk5NDcxNEVEQTI0QUE3ODM4OUZCNjM2OTUwNUZC
NkExLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzMxYjQzM2E1LTcyYjEtNDY1My05
OWQzLTk0NjljOGI4Yjc2Mi8wLzMxMzUzNzJlMzYzNjJlMzIzOTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM1MzkzMjM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACdQh0wDQYJKoZIhvcN
AQELBQADggEBALClqn/cPeL9sOkCM4ROAbE2ajdB4h4vnpPbsQEx6f/ep6TtIT2k
IVtSnWD/vWRsUPUNwNuxrPYd3CjIQ0NmGXOWiQPuwREjQrGgr8fqh4arrE0LHNiE
bPpS31GYPLTMqYJByDRyMVczW3UXIaj9sB94MpQ+DFuT1sc/d1RxgTg1sl2Z96NW
h8PT4aq35kbvQUKzc5H3G3mGu4CodkFKMtLQ7RCAxxUhRTOujUpPqAeSyWuwGPgM
Hyh8Zp9VnyZ/Pr3G6P8pDfqENSJ9Sn5mGUei66UU3+teVHZos07uW1GobdzjjpdA
Wxag5rceUAtonD/7l/fRw1xNHWS5IB/XDwA=
-----END CERTIFICATE-----
Generated at Wed May 13 04:15:59 2026 by rpki-client