
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/3135372e36362e36322e302f32332d3233203d3e20313431363039.roa
File: 3135372e36362e36322e302f32332d3233203d3e20313431363039.roa (raw, json)
Hash identifier: s0qL2weEhTe4sBj4h3x5XjkUykXaQaRd3WPD4VdRPq0=
Subject key identifier: C6:0A:F9:20:00:6E:27:2C:31:D9:0A:10:F6:9B:E4:D3:63:29:27:2C
Certificate issuer: /CN=5297FC0B52CD4FC7F06C165310D113C81A16F8DF
Certificate serial: 5A0AB19FD64A403449919F43521ECAFE2A6B3285
Authority key identifier: 52:97:FC:0B:52:CD:4F:C7:F0:6C:16:53:10:D1:13:C8:1A:16:F8:DF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/3135372e36362e36322e302f32332d3233203d3e20313431363039.roa
Signing time: Sun 03 May 2026 02:45:52 +0000
ROA not before: Sun 03 May 2026 02:40:52 +0000
ROA not after: Sun 02 May 2027 02:45:52 +0000
asID: 141609
IP address blocks: 157.66.62.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl
rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:58:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:0a:b1:9f:d6:4a:40:34:49:91:9f:43:52:1e:ca:fe:2a:6b:32:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5297FC0B52CD4FC7F06C165310D113C81A16F8DF
Validity
Not Before: May 3 02:40:52 2026 GMT
Not After : May 2 02:45:52 2027 GMT
Subject: CN=C60AF920006E272C31D90A10F69BE4D36329272C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:02:9d:dc:02:18:b4:90:cf:08:40:58:a5:5c:
5f:75:36:5d:f2:4a:ea:64:58:a0:f8:72:7d:77:12:
81:95:47:c3:48:94:c7:68:91:af:47:ad:95:4f:40:
f9:68:f5:dc:ae:b1:0f:53:96:bf:88:77:9e:34:5b:
34:ae:b4:b4:4f:58:40:8e:c4:ba:37:ad:d9:f2:81:
e1:08:35:1c:4e:51:c3:31:c0:71:c3:b3:91:96:8e:
fa:db:90:58:c1:99:5b:78:b7:f1:cb:02:39:2f:81:
a3:09:e8:e6:c7:d1:3f:31:38:67:cf:5d:79:c4:c4:
c8:12:30:31:fa:ac:4b:6e:39:31:a0:29:df:af:35:
74:a6:53:2b:44:de:d3:20:57:51:9a:4d:3e:97:88:
b2:fc:7e:e4:32:74:b5:9d:ea:36:c4:f4:1a:3f:ca:
84:cd:5e:4e:b2:12:dc:25:28:a5:14:8b:5f:ea:e2:
dd:d1:57:14:2b:7f:ec:67:24:54:7e:9f:ca:ce:94:
3a:0e:5d:f0:11:24:70:a0:c1:37:96:58:1a:ae:f5:
45:52:6d:3d:63:02:0b:7f:09:40:0d:6a:07:2e:52:
60:d3:7b:df:2a:68:e8:f6:9b:03:1d:d4:3c:94:b8:
fe:9e:ae:70:76:c8:a6:45:0d:ee:b6:26:cb:9d:bc:
c6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0A:F9:20:00:6E:27:2C:31:D9:0A:10:F6:9B:E4:D3:63:29:27:2C
X509v3 Authority Key Identifier:
keyid:52:97:FC:0B:52:CD:4F:C7:F0:6C:16:53:10:D1:13:C8:1A:16:F8:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/3135372e36362e36322e302f32332d3233203d3e20313431363039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.62.0/23
Signature Algorithm: sha256WithRSAEncryption
66:b3:75:4a:40:f3:b2:eb:59:66:b4:51:f7:a2:04:c7:be:72:
7f:ea:f0:ad:d1:b6:67:ef:e6:dd:92:c7:6d:5b:e6:46:0e:a2:
1d:da:d8:b7:3c:00:66:2b:f7:c7:f4:73:98:8b:10:49:ce:a4:
38:c6:6d:82:88:ca:2c:32:04:9c:c6:1e:71:e7:a8:fd:49:32:
a5:00:eb:7b:00:02:1e:f5:02:36:1d:a5:19:4d:34:a8:c4:87:
b3:ed:9e:b9:d9:88:2e:69:f4:e3:2d:58:21:df:e9:49:79:c4:
61:f9:2b:9d:7e:34:39:3d:4a:43:d9:d2:26:5d:06:5b:83:26:
4b:c1:4b:b6:93:d6:5d:dd:2d:ea:72:0e:88:fb:12:39:99:4a:
2e:9f:cb:16:6d:50:f6:e9:19:c4:b8:37:69:2d:de:80:ca:5a:
b9:90:ad:28:47:35:4f:3e:4b:03:2c:de:7a:51:79:c2:1c:d4:
67:c0:f1:da:64:f8:cc:a9:11:21:72:46:83:58:86:72:4d:eb:
c6:e3:22:02:72:25:c6:65:59:8b:da:74:67:00:4d:b1:6c:0c:
5c:37:ea:17:2a:75:4e:e8:e3:a7:99:08:51:57:b0:46:53:f6:
1b:6c:4d:93:05:69:f4:66:4a:40:98:e9:47:00:41:6d:34:6a:
5b:b3:6c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:49:50 2026 by rpki-client