
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/3135372e36362e36362e302f32342d3234203d3e20313532373831.roa
File: 3135372e36362e36362e302f32342d3234203d3e20313532373831.roa (raw, json)
Hash identifier: grf0YK9bJyH/cVnLX3ovqZL+z5fiMqaMnTX+lrSCaV0=
Subject key identifier: 27:4C:A4:56:35:1E:A4:35:DC:0E:15:6D:96:32:3E:9B:B8:F9:A1:A0
Certificate issuer: /CN=E161BF656F0149CB290354E631915A62950E0DF7
Certificate serial: 606448B996689EE67B87B89CB1601FECFBC3CCB4
Authority key identifier: E1:61:BF:65:6F:01:49:CB:29:03:54:E6:31:91:5A:62:95:0E:0D:F7
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E161BF656F0149CB290354E631915A62950E0DF7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/3135372e36362e36362e302f32342d3234203d3e20313532373831.roa
Signing time: Sun 03 May 2026 02:43:42 +0000
ROA not before: Sun 03 May 2026 02:38:42 +0000
ROA not after: Sun 02 May 2027 02:43:42 +0000
asID: 152781
IP address blocks: 157.66.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.crl
rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E161BF656F0149CB290354E631915A62950E0DF7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:51:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:64:48:b9:96:68:9e:e6:7b:87:b8:9c:b1:60:1f:ec:fb:c3:cc:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E161BF656F0149CB290354E631915A62950E0DF7
Validity
Not Before: May 3 02:38:42 2026 GMT
Not After : May 2 02:43:42 2027 GMT
Subject: CN=274CA456351EA435DC0E156D96323E9BB8F9A1A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:9b:8d:9e:ac:d4:50:3f:81:21:49:90:22:
b8:09:2c:0a:6e:6a:93:e0:3c:f4:fd:85:7e:33:7a:
3d:47:9c:cd:59:28:66:8d:3f:f3:1e:16:1d:f4:2c:
62:43:70:d6:b0:03:57:05:25:87:bf:0e:b9:2c:8c:
75:02:bc:ea:77:e3:9c:a7:90:a9:90:b4:fa:d1:7b:
ed:87:88:ef:b8:31:94:8e:f1:b9:5b:a1:4d:58:df:
b2:d0:b2:fd:c3:86:58:c5:51:3c:d9:a4:ea:b9:a2:
48:1c:6d:78:f1:bd:09:bf:58:13:73:5f:04:22:61:
f2:62:44:3d:c3:15:eb:d8:7b:f9:73:a8:e3:c0:c8:
41:dc:77:c9:d4:f7:d7:3d:f1:cd:08:62:71:68:cf:
ec:1c:3b:0d:a4:14:d1:6f:75:28:42:34:c9:2f:b3:
5f:72:e6:bf:c6:b2:59:a9:79:f7:1c:25:f5:6b:e9:
86:53:fc:8e:9e:4b:bd:e7:e0:09:bd:53:05:64:96:
9a:f4:5d:cb:aa:cd:c8:ca:2a:69:5d:73:93:ee:60:
d0:e7:af:1b:92:00:d5:f8:60:00:ca:09:00:a3:5d:
5f:d9:36:3b:c1:f7:cc:55:3d:35:04:d8:5a:f6:b0:
94:c6:3b:4d:c8:90:5e:ed:a4:0c:1c:0b:26:3e:70:
06:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4C:A4:56:35:1E:A4:35:DC:0E:15:6D:96:32:3E:9B:B8:F9:A1:A0
X509v3 Authority Key Identifier:
keyid:E1:61:BF:65:6F:01:49:CB:29:03:54:E6:31:91:5A:62:95:0E:0D:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E161BF656F0149CB290354E631915A62950E0DF7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/3135372e36362e36362e302f32342d3234203d3e20313532373831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.66.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:7b:4f:ae:da:34:f2:29:e4:44:a6:70:4a:7b:e5:59:ab:94:
87:8a:6c:54:7c:08:b4:17:28:2d:4e:82:27:38:ea:28:05:17:
8c:e8:10:68:96:c2:a3:cb:fa:1b:53:c5:5e:d1:03:2d:9c:ff:
a9:d7:dc:79:ad:95:77:0f:6e:ba:9a:01:59:5e:fd:b1:55:2a:
65:ba:68:a1:ad:49:99:43:64:fa:57:33:a8:28:4e:02:a4:6a:
25:69:2e:0e:43:67:e7:38:b7:25:c3:43:4c:17:1f:ae:78:8e:
10:f3:84:5b:d0:49:f0:e4:30:c9:6f:ec:58:04:d4:cb:63:38:
30:09:f9:f3:24:74:f2:c8:4d:f5:8e:32:75:b3:75:24:9a:cd:
e5:26:87:ab:f3:57:8a:11:e6:aa:81:bf:3e:c4:42:12:b3:62:
97:3e:25:88:31:df:cc:28:76:28:4d:fe:1e:86:92:d8:10:a2:
19:3a:67:aa:5a:0a:9b:fa:ce:f2:b5:fd:42:9c:cf:f0:6d:8c:
e4:f7:9e:a0:76:6c:0f:d9:68:66:21:16:7d:96:67:e6:81:c8:
41:bc:65:7d:de:89:a1:22:12:1a:19:47:95:dd:ca:0d:dd:53:
5c:1c:b9:65:a0:25:a6:fb:dd:96:b2:d1:71:9d:d2:5e:32:b5:
7c:d3:0b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:11 2026 by rpki-client