
$ rpki-client -vvf rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3135302e3130372e3234382e302f32322d3234203d3e20313339393338.roa
File: 3135302e3130372e3234382e302f32322d3234203d3e20313339393338.roa (raw, json)
Hash identifier: 89cfsFLBXkB3WFs7rNpw78ZZSzujq+PLIJTF9YsulHg=
Subject key identifier: AF:1B:69:45:F6:1C:2B:F0:CF:3D:98:00:08:4B:2E:43:88:40:18:2B
Certificate issuer: /CN=E00C0AD01CBF6EE9B4254305E7B340D64C5974D0
Certificate serial: 4273ABA4EDBBFF01D066931ECA4798087A19C8C0
Authority key identifier: E0:0C:0A:D0:1C:BF:6E:E9:B4:25:43:05:E7:B3:40:D6:4C:59:74:D0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3135302e3130372e3234382e302f32322d3234203d3e20313339393338.roa
Signing time: Sun 03 May 2026 02:44:04 +0000
ROA not before: Sun 03 May 2026 02:39:04 +0000
ROA not after: Sun 02 May 2027 02:44:04 +0000
asID: 139938
IP address blocks: 150.107.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.crl
rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:73:ab:a4:ed:bb:ff:01:d0:66:93:1e:ca:47:98:08:7a:19:c8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E00C0AD01CBF6EE9B4254305E7B340D64C5974D0
Validity
Not Before: May 3 02:39:04 2026 GMT
Not After : May 2 02:44:04 2027 GMT
Subject: CN=AF1B6945F61C2BF0CF3D9800084B2E438840182B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c7:3b:66:55:2b:a0:d6:aa:d2:1e:df:a9:57:
4b:eb:8d:f9:f2:47:11:5c:5c:42:6c:35:12:6d:1a:
de:22:48:be:1a:c4:6d:4d:7b:83:72:63:8b:9d:32:
24:73:59:a3:b2:e1:dc:21:71:f7:05:bd:13:c5:21:
61:e5:95:66:2b:9d:6a:78:df:26:c9:9d:51:af:e3:
ad:bd:d1:6f:2a:81:e5:0a:ef:41:ac:ca:e6:1e:8d:
c9:f4:14:6d:a5:60:f4:3d:7d:0c:5e:0f:9e:70:1e:
43:bf:48:52:d4:39:fc:60:3b:b4:fd:38:4f:ca:55:
60:35:ed:c8:60:35:d7:74:e9:98:44:0c:d8:95:e5:
e1:6c:04:90:77:31:82:25:a3:1f:28:ca:34:3f:83:
be:b2:cf:b3:87:f1:4f:52:c5:8b:da:e7:b4:c4:49:
5e:c7:3c:20:4a:2d:81:29:af:06:4b:67:75:e3:0d:
d0:11:1a:58:d2:08:b1:54:00:3f:58:5c:1f:ef:2c:
ff:16:9f:b9:c4:00:1d:dc:b8:a0:12:26:d9:93:52:
86:df:a4:c0:ff:5e:30:d5:f9:f7:09:8b:4b:2b:1e:
ee:dd:39:e3:5e:b4:3f:91:62:80:0c:19:8a:3a:8b:
67:33:6d:a4:52:a3:82:4c:83:a2:2b:0d:94:1c:1c:
59:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1B:69:45:F6:1C:2B:F0:CF:3D:98:00:08:4B:2E:43:88:40:18:2B
X509v3 Authority Key Identifier:
keyid:E0:0C:0A:D0:1C:BF:6E:E9:B4:25:43:05:E7:B3:40:D6:4C:59:74:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E00C0AD01CBF6EE9B4254305E7B340D64C5974D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3135302e3130372e3234382e302f32322d3234203d3e20313339393338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.107.248.0/22
Signature Algorithm: sha256WithRSAEncryption
97:3d:25:7c:83:df:8e:51:88:fb:90:4f:12:73:d5:b7:2e:8d:
77:e0:70:0f:9d:4f:18:6e:ef:59:7e:ed:b4:ed:3a:ce:f7:ab:
68:e3:99:ce:88:a1:e0:5a:67:81:11:24:1b:f5:56:15:05:83:
69:be:cb:1a:20:ed:72:f2:da:e4:1a:73:3c:20:56:b6:5a:42:
92:2c:26:56:8c:66:65:88:31:ce:44:26:ac:a0:31:d9:38:8e:
14:eb:1c:ba:38:bc:46:08:92:73:db:c0:17:25:e0:a0:28:2f:
18:30:33:cf:cc:50:4f:f4:eb:80:56:39:84:50:43:5c:ec:f3:
c6:1f:78:13:76:66:91:86:09:fb:3f:b3:28:24:63:50:5c:73:
3d:90:4b:2a:1e:0f:ba:2b:7c:af:3e:a6:1f:ae:4b:96:b2:dc:
70:a5:5d:e9:69:76:f8:db:ab:73:85:1b:0e:12:d3:39:5d:49:
79:24:33:95:3a:0f:ab:47:f7:c9:27:9a:a7:fa:68:8d:f2:7c:
54:95:10:7f:2d:fd:79:b0:3f:4b:27:b5:7f:33:75:04:b3:45:
1c:5c:b5:eb:6d:14:0c:21:7b:92:54:f8:fa:10:7e:57:a2:cc:
02:cf:8c:9a:e0:4c:5e:4b:af:3f:03:a0:7d:68:35:51:6d:f2:
5a:59:0b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:26:36 2026 by rpki-client