
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/3135372e36362e36332e302f32342d3234203d3e20313431363039.roa
File: 3135372e36362e36332e302f32342d3234203d3e20313431363039.roa (raw, json)
Hash identifier: Xm5n/XLcKtlX7vaWLbK2D/7cXu3TQ6c3pSXsVlfA9/0=
Subject key identifier: 34:B9:6E:E8:E3:2C:87:EF:AB:76:3C:41:1A:3C:DA:35:FE:F4:59:F3
Certificate issuer: /CN=5297FC0B52CD4FC7F06C165310D113C81A16F8DF
Certificate serial: 6F14FFFFF37BECD13AEC7DC1DC14362F3DF9FE58
Authority key identifier: 52:97:FC:0B:52:CD:4F:C7:F0:6C:16:53:10:D1:13:C8:1A:16:F8:DF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/3135372e36362e36332e302f32342d3234203d3e20313431363039.roa
Signing time: Sun 03 May 2026 02:45:52 +0000
ROA not before: Sun 03 May 2026 02:40:52 +0000
ROA not after: Sun 02 May 2027 02:45:52 +0000
asID: 141609
IP address blocks: 157.66.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl
rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:58:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:14:ff:ff:f3:7b:ec:d1:3a:ec:7d:c1:dc:14:36:2f:3d:f9:fe:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5297FC0B52CD4FC7F06C165310D113C81A16F8DF
Validity
Not Before: May 3 02:40:52 2026 GMT
Not After : May 2 02:45:52 2027 GMT
Subject: CN=34B96EE8E32C87EFAB763C411A3CDA35FEF459F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:06:3f:aa:bc:7d:43:7e:12:70:f6:68:d0:fe:
73:9f:6c:da:a3:7e:e1:d1:9a:ba:79:6e:73:f2:be:
f1:07:87:01:2b:d8:6d:6f:d8:63:15:30:67:45:59:
b5:ad:04:bf:aa:b2:e6:ba:ce:f2:e0:1b:56:dd:6d:
25:a5:ef:0f:2b:cd:b7:3a:43:d7:fb:1d:7a:99:44:
32:8c:37:88:77:6b:0f:90:47:e6:92:de:11:16:b8:
c4:cd:1f:bd:aa:f4:33:d0:97:81:63:4b:01:d1:7d:
80:5f:39:04:f2:4a:c2:39:26:ed:f6:ef:fe:c7:b1:
82:6b:02:c9:d3:36:96:8d:5a:6d:1c:da:41:0c:a0:
23:39:97:2f:93:1e:18:1f:4d:e1:00:37:92:aa:25:
a7:58:7b:f6:23:66:6e:0f:d4:87:57:cc:de:1e:87:
44:c7:66:e3:9f:57:99:d3:80:6e:fc:4c:34:4f:a8:
44:81:b4:20:fd:d1:ec:d4:d9:99:8e:a0:f9:b0:93:
c8:61:cb:72:54:5b:94:6d:dc:3b:70:21:cb:11:97:
7c:09:d4:5d:1a:1f:a6:c6:11:79:ce:b7:fd:4e:ad:
3f:58:3c:b4:ba:e8:c2:65:ba:77:b8:1a:b7:5f:97:
61:ff:a8:60:50:37:4b:36:44:57:a9:57:f2:36:e2:
5b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B9:6E:E8:E3:2C:87:EF:AB:76:3C:41:1A:3C:DA:35:FE:F4:59:F3
X509v3 Authority Key Identifier:
keyid:52:97:FC:0B:52:CD:4F:C7:F0:6C:16:53:10:D1:13:C8:1A:16:F8:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5297FC0B52CD4FC7F06C165310D113C81A16F8DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/3135372e36362e36332e302f32342d3234203d3e20313431363039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.63.0/24
Signature Algorithm: sha256WithRSAEncryption
34:5f:42:3b:69:70:64:91:dc:d7:64:58:cc:8e:7f:cd:8f:53:
a9:d3:07:0f:9e:d4:99:fa:8a:ed:31:14:34:da:2c:c2:45:6b:
35:bc:a0:75:a1:4d:62:2b:ec:7f:4d:5e:d1:d8:a6:b1:64:35:
9a:fc:64:92:94:0a:34:83:4d:e8:14:a1:bd:c9:c3:91:27:af:
e3:53:1f:60:8a:bc:1a:1e:ea:04:81:22:b9:fc:d3:29:41:57:
56:c0:df:3e:25:3c:be:08:a6:43:88:75:e4:fb:3f:10:f1:18:
89:92:68:bb:2a:f2:f7:d4:9d:ce:eb:ba:2c:e8:7d:d1:57:6d:
af:72:96:22:5a:6f:01:25:7f:8d:26:ed:ed:b4:79:01:8d:1a:
cb:1a:e8:e6:30:07:9b:3c:ee:33:e7:af:26:25:50:e6:87:92:
30:86:a3:08:07:27:b1:b7:04:e4:c1:57:6f:86:3a:06:a9:58:
cf:3d:df:b7:22:43:d4:cf:0f:a2:84:a2:ab:ab:f0:7a:8d:b2:
c2:94:19:c4:dc:ba:d5:8d:27:5d:c1:49:6c:3e:8f:39:7a:13:
36:38:23:13:67:3a:94:a8:dc:6a:43:8d:1f:e5:fb:3b:f4:8e:
84:b3:02:17:9e:f7:d6:8c:90:30:f7:90:8c:e8:f0:26:8c:dd:
7b:9e:42:0f
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUbxT///N77NE67H3B3BQ2Lz35/lgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTI5N0ZDMEI1MkNENEZDN0YwNkMxNjUzMTBEMTEzQzgx
QTE2RjhERjAeFw0yNjA1MDMwMjQwNTJaFw0yNzA1MDIwMjQ1NTJaMDMxMTAvBgNV
BAMTKDM0Qjk2RUU4RTMyQzg3RUZBQjc2M0M0MTFBM0NEQTM1RkVGNDU5RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKBj+qvH1DfhJw9mjQ/nOfbNqj
fuHRmrp5bnPyvvEHhwEr2G1v2GMVMGdFWbWtBL+qsua6zvLgG1bdbSWl7w8rzbc6
Q9f7HXqZRDKMN4h3aw+QR+aS3hEWuMTNH72q9DPQl4FjSwHRfYBfOQTySsI5Ju32
7/7HsYJrAsnTNpaNWm0c2kEMoCM5ly+THhgfTeEAN5KqJadYe/YjZm4P1IdXzN4e
h0THZuOfV5nTgG78TDRPqESBtCD90ezU2ZmOoPmwk8hhy3JUW5Rt3DtwIcsRl3wJ
1F0aH6bGEXnOt/1OrT9YPLS66MJlune4Grdfl2H/qGBQN0s2RFepV/I24lspAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUNLlu6OMsh++rdjxBGjzaNf70WfMwHwYDVR0j
BBgwFoAUUpf8C1LNT8fwbBZTENETyBoW+N8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
N2RkYmI3OWMtOWVhMi00N2YwLWI0NWYtMTgxNjY1MGJhMjNmLzAvNTI5N0ZDMEI1
MkNENEZDN0YwNkMxNjUzMTBEMTEzQzgxQTE2RjhERi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC81Mjk3RkMwQjUyQ0Q0RkM3RjA2QzE2NTMxMEQxMTNDODFBMTZG
OERGLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzdkZGJiNzljLTllYTItNDdmMC1i
NDVmLTE4MTY2NTBiYTIzZi8wLzMxMzUzNzJlMzYzNjJlMzYzMzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzQzMTM2MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ1CPzANBgkqhkiG
9w0BAQsFAAOCAQEANF9CO2lwZJHc12RYzI5/zY9TqdMHD57UmfqK7TEUNNoswkVr
NbygdaFNYivsf01e0dimsWQ1mvxkkpQKNINN6BShvcnDkSev41MfYIq8Gh7qBIEi
ufzTKUFXVsDfPiU8vgimQ4h15Ps/EPEYiZJouyry99Sdzuu6LOh90Vdtr3KWIlpv
ASV/jSbt7bR5AY0ayxro5jAHmzzuM+evJiVQ5oeSMIajCAcnsbcE5MFXb4Y6BqlY
zz3ftyJD1M8PooSiq6vweo2ywpQZxNy61Y0nXcFJbD6POXoTNjgjE2c6lKjcakON
H+X7O/SOhLMCF5731oyQMPeQjOjwJozde55CDw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:54:22 2026 by rpki-client