
$ rpki-client -vvf rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/3135372e36362e35382e302f32342d3234203d3e203633383633.roa
File: 3135372e36362e35382e302f32342d3234203d3e203633383633.roa (raw, json)
Hash identifier: a6w3hGAhWsxMabz324Q4GA5dPuEuhj0nKmf3WW+KTCc=
Subject key identifier: C4:1D:C6:9D:6D:30:FC:C3:D5:FF:10:44:01:58:AA:0E:8B:D4:06:28
Certificate issuer: /CN=ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872
Certificate serial: 2A780BC332E040EABCD1413913AA22313B7D8B79
Authority key identifier: EC:A0:04:7E:A8:E4:DC:E9:2E:BC:57:2E:E8:A1:1D:17:C6:B6:48:72
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/3135372e36362e35382e302f32342d3234203d3e203633383633.roa
Signing time: Sun 03 May 2026 02:30:20 +0000
ROA not before: Sun 03 May 2026 02:25:20 +0000
ROA not after: Sun 02 May 2027 02:30:20 +0000
asID: 63863
IP address blocks: 157.66.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.crl
rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:78:0b:c3:32:e0:40:ea:bc:d1:41:39:13:aa:22:31:3b:7d:8b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872
Validity
Not Before: May 3 02:25:20 2026 GMT
Not After : May 2 02:30:20 2027 GMT
Subject: CN=C41DC69D6D30FCC3D5FF10440158AA0E8BD40628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b2:86:ee:03:b0:59:75:88:4e:38:f6:3e:b3:
c2:ea:6f:07:e7:f3:32:28:12:46:27:bc:dd:64:a0:
73:52:d4:28:05:dc:20:a0:60:d1:07:7c:06:ee:6a:
83:eb:ee:ef:c1:d0:df:e1:11:99:a7:c2:fd:10:a7:
10:06:e6:ea:ec:e8:78:88:0c:35:c1:e9:c6:c8:30:
ef:2a:7d:61:b1:7b:1c:28:6f:84:e5:20:74:b8:fd:
7f:07:0a:d0:56:55:54:19:81:2f:9a:9f:87:15:8d:
82:14:88:2f:d9:78:89:d4:60:ee:44:6f:d8:58:a4:
6f:0f:d5:39:9f:b0:9d:6f:78:31:7a:59:31:c6:87:
9e:7f:6f:65:5b:52:c7:fb:35:90:6a:4e:0d:1b:f8:
88:d7:62:bc:b7:79:39:c6:47:8a:65:5e:7b:22:cf:
23:99:c8:23:bb:9a:19:56:4f:a7:ab:19:12:8d:56:
8f:60:2e:ff:a4:96:6f:5e:1d:f9:1b:e3:95:d3:43:
2e:80:cc:1c:30:00:85:ba:5e:c8:ea:1d:16:59:52:
79:72:a3:bf:d0:2b:37:59:79:cd:c0:dd:a7:10:33:
4f:50:42:a5:be:f6:1c:ec:fb:1d:56:10:66:83:4d:
c7:d5:67:46:55:96:c1:dc:ec:ed:03:9d:8a:b5:c9:
a9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1D:C6:9D:6D:30:FC:C3:D5:FF:10:44:01:58:AA:0E:8B:D4:06:28
X509v3 Authority Key Identifier:
keyid:EC:A0:04:7E:A8:E4:DC:E9:2E:BC:57:2E:E8:A1:1D:17:C6:B6:48:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ECA0047EA8E4DCE92EBC572EE8A11D17C6B64872.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/3135372e36362e35382e302f32342d3234203d3e203633383633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.58.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:ee:f6:44:40:5a:8d:f7:67:7d:c3:8c:95:25:e8:9c:8c:21:
32:19:8e:22:8b:ae:7c:1e:74:64:9f:1a:20:b4:9f:31:23:96:
ad:3f:85:cb:4d:41:9a:ae:df:46:e5:8e:f5:8a:7e:4c:83:d5:
66:d4:e6:66:e7:1a:fe:53:22:76:18:d4:e3:ab:ce:1e:1b:11:
cc:fb:9d:31:40:b1:13:4e:29:fb:1c:72:02:a7:46:d0:91:b5:
8b:06:25:4f:15:74:de:82:90:75:a7:e7:fa:8c:1c:eb:53:6a:
12:d2:62:21:20:ff:b3:24:b7:31:e2:95:a9:a1:ed:72:bd:81:
a0:14:e2:9a:f3:30:2d:32:f9:04:0f:a7:1c:f6:46:63:f9:8b:
0f:f0:6d:7b:97:0b:5d:87:15:41:8f:46:10:3f:6f:b8:3a:49:
cc:5b:15:cc:fe:c8:33:63:1d:9b:b2:33:43:50:01:1a:fd:f1:
93:43:78:59:d5:8c:83:a4:53:1e:38:10:e6:cd:74:83:86:3d:
92:c3:53:5a:ca:ef:d5:91:f3:63:1d:70:24:5c:12:08:58:46:
b5:77:be:c8:fc:7a:97:11:b3:a7:d2:ec:af:bd:49:85:9d:10:
4b:56:ff:e1:a2:ea:c2:0d:ee:d9:51:11:91:b5:38:3d:70:33:
e8:36:b4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:45:29 2026 by rpki-client