
$ rpki-client -vvf rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/3135372e31352e37372e302f32342d3234203d3e20313338313331.roa
File: 3135372e31352e37372e302f32342d3234203d3e20313338313331.roa (raw, json)
Hash identifier: 6EcU8NSCnoNhvC4s40Zznvtp988+13OVsM3urPI8O18=
Subject key identifier: 7A:D8:F7:EC:8A:DD:B6:49:32:17:6E:04:C4:D3:4F:27:6E:34:1B:3F
Certificate issuer: /CN=CC4A3B86531912A00DCFBF94884369F58244CFCD
Certificate serial: 710E2B33A0C764A6F534264F4CA8E9FB12524D31
Authority key identifier: CC:4A:3B:86:53:19:12:A0:0D:CF:BF:94:88:43:69:F5:82:44:CF:CD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/3135372e31352e37372e302f32342d3234203d3e20313338313331.roa
Signing time: Sun 03 May 2026 02:43:34 +0000
ROA not before: Sun 03 May 2026 02:38:34 +0000
ROA not after: Sun 02 May 2027 02:43:34 +0000
asID: 138131
IP address blocks: 157.15.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.crl
rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:0e:2b:33:a0:c7:64:a6:f5:34:26:4f:4c:a8:e9:fb:12:52:4d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC4A3B86531912A00DCFBF94884369F58244CFCD
Validity
Not Before: May 3 02:38:34 2026 GMT
Not After : May 2 02:43:34 2027 GMT
Subject: CN=7AD8F7EC8ADDB64932176E04C4D34F276E341B3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e3:43:94:47:64:77:59:cd:3c:75:e0:b8:60:
4c:a8:ba:d1:b0:02:3e:53:52:52:36:fd:de:e5:b7:
55:28:8a:5d:64:5f:da:47:b3:6a:02:16:38:e3:03:
83:99:c2:56:3d:fe:f9:76:91:6a:66:ca:0e:e8:f2:
d6:30:48:f7:bb:f6:ba:bb:d3:12:14:c6:e1:50:1b:
17:3f:de:d5:c6:5b:97:f6:45:e9:17:02:1b:60:35:
f5:2c:b2:75:04:3a:d7:ad:65:9c:de:52:ec:06:4c:
69:50:99:79:06:87:cb:c1:43:69:88:07:87:55:bd:
98:f5:a1:67:03:01:1f:e7:5a:28:9b:39:f9:85:90:
16:3b:7b:71:9a:47:ae:76:49:b0:90:76:95:f6:ee:
79:54:93:93:64:db:80:33:9b:ba:44:86:1b:3f:4f:
62:f5:d1:17:68:1b:e4:75:e6:80:e5:84:84:14:c9:
39:15:a2:2b:bb:c1:1e:8c:84:eb:21:52:df:38:7e:
95:ba:3f:f6:e4:cc:e5:63:9a:c6:85:da:fe:cc:9c:
e5:c7:c8:f7:dc:2e:53:c9:83:6c:db:d7:fc:8e:a2:
77:b6:11:0a:2f:1d:49:3a:0f:5b:6f:5b:cd:fa:fd:
5e:d4:2c:3d:f0:12:41:0d:18:fa:63:ad:5b:02:ee:
3b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D8:F7:EC:8A:DD:B6:49:32:17:6E:04:C4:D3:4F:27:6E:34:1B:3F
X509v3 Authority Key Identifier:
keyid:CC:4A:3B:86:53:19:12:A0:0D:CF:BF:94:88:43:69:F5:82:44:CF:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CC4A3B86531912A00DCFBF94884369F58244CFCD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/3135372e31352e37372e302f32342d3234203d3e20313338313331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.15.77.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:6d:db:e0:9a:19:73:ed:9e:5b:25:8f:80:7c:56:75:e4:2e:
3f:41:94:ad:40:d1:67:17:97:d1:a6:90:9d:99:4d:8e:bd:fa:
6c:b2:69:96:98:41:ad:e4:47:79:f9:45:9f:c2:27:d2:d2:e0:
8f:5c:39:59:0d:0e:f7:e4:21:65:3b:7e:3c:4e:1b:19:c5:9c:
42:65:a5:09:4f:69:89:23:59:07:8a:c1:5b:28:c4:94:0c:9c:
37:8a:8b:1d:f2:c0:4a:c7:e7:3b:6d:a5:3e:fc:71:b5:7a:4d:
97:91:fc:88:f2:76:87:bf:7f:52:02:c0:5e:77:b9:48:e6:6c:
24:ef:e5:6b:cf:bf:50:4f:da:af:14:45:0b:ad:95:44:e7:c9:
13:8d:e0:8a:02:fa:9f:44:91:ed:58:66:0b:c2:f5:23:38:60:
35:cb:21:ab:f3:a2:56:01:b2:81:13:97:c7:aa:78:b3:0d:de:
78:d1:bd:43:be:ad:f9:cb:45:ab:e1:24:d0:1d:fd:8b:32:67:
5f:16:29:ca:ad:c6:76:78:d7:c7:d0:e1:c2:2d:ad:bc:ae:97:
c1:07:8b:bf:5c:35:e2:97:9f:82:50:e7:49:1f:aa:9c:c7:42:
af:a4:76:86:cb:db:a0:c5:51:5a:e3:9a:be:31:03:f4:e1:04:
a6:6b:c0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:51:42 2026 by rpki-client