
$ rpki-client -vvf rpki-rsync.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/3135302e3234322e3137362e302f32342d3234203d3e20313532303639.roa
File: 3135302e3234322e3137362e302f32342d3234203d3e20313532303639.roa (raw, json)
Hash identifier: cjE8N8SonYXudiNgGVS0p3xIfvw3WuGivTObtGkKRTg=
Subject key identifier: DE:89:23:7C:91:96:BC:26:4B:AA:6C:BC:1C:18:17:E8:7B:77:1D:64
Certificate issuer: /CN=F908019F3DDAFD79BB1C8B63809C31742646ED94
Certificate serial: 033F1D3226B25462F0882DDC8839AC53C2E3AF81
Authority key identifier: F9:08:01:9F:3D:DA:FD:79:BB:1C:8B:63:80:9C:31:74:26:46:ED:94
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F908019F3DDAFD79BB1C8B63809C31742646ED94.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/3135302e3234322e3137362e302f32342d3234203d3e20313532303639.roa
Signing time: Sun 03 May 2026 02:34:39 +0000
ROA not before: Sun 03 May 2026 02:29:39 +0000
ROA not after: Sun 02 May 2027 02:34:39 +0000
asID: 152069
IP address blocks: 150.242.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/F908019F3DDAFD79BB1C8B63809C31742646ED94.crl
rsync://rpki-rsync.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/F908019F3DDAFD79BB1C8B63809C31742646ED94.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F908019F3DDAFD79BB1C8B63809C31742646ED94.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:50:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:3f:1d:32:26:b2:54:62:f0:88:2d:dc:88:39:ac:53:c2:e3:af:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F908019F3DDAFD79BB1C8B63809C31742646ED94
Validity
Not Before: May 3 02:29:39 2026 GMT
Not After : May 2 02:34:39 2027 GMT
Subject: CN=DE89237C9196BC264BAA6CBC1C1817E87B771D64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:00:b2:15:28:d0:59:1c:30:cd:b1:64:5a:7f:
37:51:7a:32:88:10:3a:6e:aa:ee:65:cc:7e:9c:3d:
9a:d0:4f:d4:60:e8:b5:a4:39:3d:fc:cc:b3:c1:f0:
23:6a:fd:90:3e:61:10:b4:64:65:38:55:fb:a5:b8:
26:36:4a:00:e8:11:c1:f1:19:21:84:48:8c:be:b6:
12:1f:ce:9f:dc:71:b0:48:26:8b:52:03:6f:e2:3a:
27:e6:f5:57:a5:50:20:7e:21:7e:bd:a6:44:af:59:
08:ba:2b:ec:01:55:f1:cd:dd:41:a4:4f:2f:eb:38:
0b:9a:de:fe:80:76:91:a4:a0:a2:8a:bc:10:c4:62:
a6:55:f4:d9:36:0c:49:f9:b6:5e:34:48:be:db:a0:
e3:8d:53:83:44:92:cd:10:87:85:0b:74:b9:1c:57:
96:93:b4:f1:a7:f6:e0:c9:25:fb:71:eb:04:6a:97:
d0:56:75:73:1c:9f:59:8c:66:b6:b4:69:4c:85:ec:
c0:a4:b7:ae:ed:b2:a9:b1:2a:56:b9:7d:b3:95:71:
8a:c7:5a:f3:bd:21:04:e6:b8:e7:97:7c:03:af:1c:
1b:a3:23:c4:4f:23:1d:c7:d0:1c:17:a4:59:de:4e:
a2:e2:b6:4d:8f:db:03:97:98:45:5e:43:6a:59:54:
23:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:89:23:7C:91:96:BC:26:4B:AA:6C:BC:1C:18:17:E8:7B:77:1D:64
X509v3 Authority Key Identifier:
keyid:F9:08:01:9F:3D:DA:FD:79:BB:1C:8B:63:80:9C:31:74:26:46:ED:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/F908019F3DDAFD79BB1C8B63809C31742646ED94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F908019F3DDAFD79BB1C8B63809C31742646ED94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/3135302e3234322e3137362e302f32342d3234203d3e20313532303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.242.176.0/24
Signature Algorithm: sha256WithRSAEncryption
51:15:9f:25:1c:e7:5d:4e:d1:ce:0c:51:53:8f:a7:d3:cb:92:
41:3e:0c:2e:b9:ad:60:0d:9a:b9:10:a9:8b:55:ec:b1:f0:f8:
d4:e7:b9:ca:2e:5c:12:e4:69:8e:53:4b:ee:09:11:79:6d:68:
38:48:88:0a:cd:20:65:64:89:5f:58:9f:73:2a:78:57:aa:cc:
ec:18:cb:79:e4:be:5c:4d:7b:93:b2:40:22:e3:9f:62:3f:1d:
5c:05:bd:b2:06:8a:60:ae:ad:bb:92:ca:48:87:dd:7e:03:7e:
08:f1:49:b1:ef:bb:ca:8f:5d:ec:b6:a5:02:7e:5b:5c:f2:6c:
2b:a9:b6:7f:a4:4f:a5:78:db:42:3f:f8:e7:84:4c:3d:f7:e8:
93:e1:78:8c:4e:34:8c:1b:80:be:17:71:8b:52:2f:b3:b8:4a:
5b:86:de:b2:e2:17:d4:1a:ac:9c:7d:95:c1:5d:a8:3f:b1:9b:
12:a2:20:34:a5:a0:f1:7d:98:9d:74:e1:61:3a:99:5c:3c:73:
2d:e2:d1:b3:b0:d6:be:7c:7a:be:1b:8a:08:00:73:12:75:28:
31:46:f2:13:b0:05:ca:39:17:a9:9d:f1:ca:db:2f:34:99:60:
02:3c:96:11:17:18:87:c8:03:1a:c7:0e:13:fc:7d:d2:8a:74:
d9:02:b5:88
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUAz8dMiayVGLwiC3ciDmsU8Ljr4EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjkwODAxOUYzRERBRkQ3OUJCMUM4QjYzODA5QzMxNzQy
NjQ2RUQ5NDAeFw0yNjA1MDMwMjI5MzlaFw0yNzA1MDIwMjM0MzlaMDMxMTAvBgNV
BAMTKERFODkyMzdDOTE5NkJDMjY0QkFBNkNCQzFDMTgxN0U4N0I3NzFENjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQALIVKNBZHDDNsWRafzdRejKI
EDpuqu5lzH6cPZrQT9Rg6LWkOT38zLPB8CNq/ZA+YRC0ZGU4VfuluCY2SgDoEcHx
GSGESIy+thIfzp/ccbBIJotSA2/iOifm9VelUCB+IX69pkSvWQi6K+wBVfHN3UGk
Ty/rOAua3v6AdpGkoKKKvBDEYqZV9Nk2DEn5tl40SL7boOONU4NEks0Qh4ULdLkc
V5aTtPGn9uDJJftx6wRql9BWdXMcn1mMZra0aUyF7MCkt67tsqmxKla5fbOVcYrH
WvO9IQTmuOeXfAOvHBujI8RPIx3H0BwXpFneTqLitk2P2wOXmEVeQ2pZVCOLAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU3okjfJGWvCZLqmy8HBgX6Ht3HWQwHwYDVR0j
BBgwFoAU+QgBnz3a/Xm7HItjgJwxdCZG7ZQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NTdjMDU1MjEtMDMzOC00ZjMxLWEyMDktNGY4NzhiZWY2MzhhLzAvRjkwODAxOUYz
RERBRkQ3OUJCMUM4QjYzODA5QzMxNzQyNjQ2RUQ5NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GOTA4MDE5RjNEREFGRDc5QkIxQzhCNjM4MDlDMzE3NDI2NDZF
RDk0LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzU3YzA1NTIxLTAzMzgtNGYzMS1h
MjA5LTRmODc4YmVmNjM4YS8wLzMxMzUzMDJlMzIzNDMyMmUzMTM3MzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzIzMDM2Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACW8rAwDQYJ
KoZIhvcNAQELBQADggEBAFEVnyUc511O0c4MUVOPp9PLkkE+DC65rWANmrkQqYtV
7LHw+NTnucouXBLkaY5TS+4JEXltaDhIiArNIGVkiV9Yn3MqeFeqzOwYy3nkvlxN
e5OyQCLjn2I/HVwFvbIGimCurbuSykiH3X4DfgjxSbHvu8qPXey2pQJ+W1zybCup
tn+kT6V420I/+OeETD336JPheIxONIwbgL4XcYtSL7O4SluG3rLiF9QarJx9lcFd
qD+xmxKiIDSloPF9mJ104WE6mVw8cy3i0bOw1r58er4biggAcxJ1KDFG8hOwBco5
F6md8crbLzSZYAI8lhEXGIfIAxrHDhP8fdKKdNkCtYg=
-----END CERTIFICATE-----
Generated at Wed May 13 14:40:32 2026 by rpki-client