
$ rpki-client -vvf rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/3135372e31302e38392e302f32342d3234203d3e20313532303832.roa
File: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (raw, json)
Hash identifier: 5twMEBpUGZCFXRPaiYDXrww+UAg0G4R4iDCrbaZ4+Ho=
Subject key identifier: D2:E6:1F:F8:07:CF:56:9E:2E:A8:AE:6A:31:F0:07:17:4B:B1:DD:48
Certificate issuer: /CN=B39B19C9084084F7FCB3FAFF376368D876F66372
Certificate serial: 26F5D7F985DADCF0B3DA153CD079E644FD72A39C
Authority key identifier: B3:9B:19:C9:08:40:84:F7:FC:B3:FA:FF:37:63:68:D8:76:F6:63:72
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B39B19C9084084F7FCB3FAFF376368D876F66372.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/3135372e31302e38392e302f32342d3234203d3e20313532303832.roa
Signing time: Sun 03 May 2026 02:42:54 +0000
ROA not before: Sun 03 May 2026 02:37:54 +0000
ROA not after: Sun 02 May 2027 02:42:54 +0000
asID: 152082
IP address blocks: 157.10.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.crl
rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B39B19C9084084F7FCB3FAFF376368D876F66372.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:28:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:f5:d7:f9:85:da:dc:f0:b3:da:15:3c:d0:79:e6:44:fd:72:a3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B39B19C9084084F7FCB3FAFF376368D876F66372
Validity
Not Before: May 3 02:37:54 2026 GMT
Not After : May 2 02:42:54 2027 GMT
Subject: CN=D2E61FF807CF569E2EA8AE6A31F007174BB1DD48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ef:55:ce:0c:d9:18:36:78:de:74:55:68:30:
9a:3b:1c:b5:ae:9f:70:5d:df:c8:3f:ae:31:9c:12:
32:91:bb:fc:c9:a1:fd:82:c9:ae:05:3e:9b:e1:a9:
9f:c3:80:ff:91:6f:4e:cc:8f:66:f9:a1:ef:c3:07:
74:cf:82:a4:59:ab:9d:4b:c0:cf:24:b5:8e:2a:b9:
1c:98:06:a8:f4:d2:d7:21:b2:fc:a6:7f:be:35:a9:
67:fe:ae:38:fe:af:4d:37:76:8f:c1:85:f5:17:90:
27:e0:84:00:c6:b7:2f:a6:23:8d:9c:74:f1:b8:ee:
f5:09:47:00:c8:03:d9:86:39:ea:fc:2c:0d:a8:3c:
e5:91:64:4f:97:3b:79:13:02:4c:e7:45:6f:09:5d:
07:a6:97:e3:0d:04:c9:32:49:10:f7:82:1e:fa:98:
10:99:02:08:c2:e0:9d:82:33:00:9a:20:8b:ca:07:
f6:9a:3f:5e:09:2e:55:e1:b6:94:fc:47:2a:e8:26:
66:48:fd:ad:db:05:02:43:bd:bc:7c:3f:f1:f2:52:
d9:ea:43:91:9d:c8:68:3f:33:0c:2c:4a:a5:1d:cb:
6f:15:f4:75:39:84:d6:c3:4e:73:ac:68:1f:0a:b8:
52:ac:1d:33:38:82:2c:b2:18:d9:2c:15:a8:48:77:
6e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E6:1F:F8:07:CF:56:9E:2E:A8:AE:6A:31:F0:07:17:4B:B1:DD:48
X509v3 Authority Key Identifier:
keyid:B3:9B:19:C9:08:40:84:F7:FC:B3:FA:FF:37:63:68:D8:76:F6:63:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/B39B19C9084084F7FCB3FAFF376368D876F66372.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B39B19C9084084F7FCB3FAFF376368D876F66372.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/732e4f86-48e7-48c7-ba91-e25968378e95/0/3135372e31302e38392e302f32342d3234203d3e20313532303832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.10.89.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:5e:26:0a:2c:a5:0d:67:9b:77:ce:ab:e0:9c:6f:d2:c3:4f:
7f:0a:65:a3:c0:6e:5d:f6:06:99:e3:0e:2b:35:a9:65:cb:81:
47:e8:1c:1a:ce:12:c1:55:e5:e4:d0:c7:a6:85:af:69:3e:7c:
bd:86:a3:d1:92:68:bd:ec:bc:34:7a:c1:fd:0c:d4:d1:96:01:
05:3f:58:e3:cf:9e:b2:ea:83:67:93:85:a9:e0:51:9b:7a:7c:
72:41:18:d0:bc:b0:0b:e4:e2:72:34:ea:68:eb:40:d3:c5:e3:
54:ac:a2:dd:0e:1b:91:33:f4:ff:9d:ca:78:1a:65:44:f8:21:
17:cc:40:b3:5b:6c:ca:0a:66:12:36:3a:84:d9:5b:a5:bf:a3:
78:61:97:7c:32:e1:51:02:90:7d:55:fb:54:ee:90:a7:86:9f:
5b:73:78:ff:27:95:38:ad:e4:e9:12:07:c4:ca:94:5d:43:d1:
20:f3:94:06:c1:0b:35:28:8f:88:e0:ab:f7:89:a7:60:a0:96:
fc:54:60:bd:5a:f0:0d:65:17:1f:56:5d:dd:f9:db:fd:c6:33:
5b:a6:31:69:f1:0c:e8:21:bf:46:5c:86:ad:b3:23:1f:87:c8:
fc:eb:42:2e:9f:65:53:f9:e3:1d:4e:8f:ed:f3:e4:75:9b:f1:
fa:aa:3c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:37:23 2026 by rpki-client