
$ rpki-client -vvf rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/3135372e36362e302e302f32332d3234203d3e20313430343737.roa
File: 3135372e36362e302e302f32332d3234203d3e20313430343737.roa (raw, json)
Hash identifier: OV4p4rnl3XvhRMGFlNaAAWATNpns5GqM8EL2+7mTgLw=
Subject key identifier: E0:2E:43:0E:0F:FD:C8:58:77:E0:99:6B:FB:F0:BC:21:89:18:85:B5
Certificate issuer: /CN=6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9
Certificate serial: 4BA8DE4750C0AEFD1C75712198C95E599E77D271
Authority key identifier: 6E:CA:9A:93:6E:FA:82:76:E4:41:25:E0:B4:C7:BF:41:EF:25:AD:A9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/3135372e36362e302e302f32332d3234203d3e20313430343737.roa
Signing time: Sun 03 May 2026 02:49:12 +0000
ROA not before: Sun 03 May 2026 02:44:12 +0000
ROA not after: Sun 02 May 2027 02:49:12 +0000
asID: 140477
IP address blocks: 157.66.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.crl
rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:16:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:a8:de:47:50:c0:ae:fd:1c:75:71:21:98:c9:5e:59:9e:77:d2:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9
Validity
Not Before: May 3 02:44:12 2026 GMT
Not After : May 2 02:49:12 2027 GMT
Subject: CN=E02E430E0FFDC85877E0996BFBF0BC21891885B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3e:32:6c:86:4c:46:1f:5d:0d:da:2e:3c:eb:
d3:06:29:e4:a1:99:69:df:cb:c1:da:bb:7f:2c:d3:
ba:fe:a3:35:1d:45:fe:23:c9:d0:7b:7d:5c:a3:81:
72:6a:3e:f9:6b:cb:8e:fe:92:0a:e4:f1:d1:bf:ae:
a8:d9:2f:de:28:0b:36:24:8c:30:30:30:81:22:64:
a4:42:be:9c:67:7f:bb:57:5c:9c:69:1a:fc:88:e4:
d8:ef:59:4c:a2:c2:80:54:5a:64:43:cb:4a:00:1f:
eb:57:f1:d5:63:43:cf:33:7d:ab:b8:d7:c8:0d:48:
db:27:91:d8:a5:8e:16:d9:86:3c:c1:e8:1a:19:9a:
8e:bb:e8:50:be:6d:64:ec:f4:55:4b:19:c1:c8:03:
8e:58:b5:b4:67:2d:58:04:29:85:3d:34:19:72:92:
5b:44:ce:4f:2f:1a:2b:45:2d:d7:d4:45:20:62:5c:
1a:b1:b6:cc:e8:02:7c:96:e4:b3:75:00:59:13:72:
0e:60:35:63:0d:bf:a6:da:f0:26:2b:6b:25:b4:87:
38:1a:d5:b8:0d:20:0c:f7:45:b7:8e:6a:be:e3:11:
82:d2:3d:5f:18:1c:31:bc:f9:10:13:04:32:e3:9a:
82:06:f1:be:3a:8d:51:86:f4:7a:60:62:c9:b2:af:
bf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2E:43:0E:0F:FD:C8:58:77:E0:99:6B:FB:F0:BC:21:89:18:85:B5
X509v3 Authority Key Identifier:
keyid:6E:CA:9A:93:6E:FA:82:76:E4:41:25:E0:B4:C7:BF:41:EF:25:AD:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6ECA9A936EFA8276E44125E0B4C7BF41EF25ADA9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/3135372e36362e302e302f32332d3234203d3e20313430343737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.0.0/23
Signature Algorithm: sha256WithRSAEncryption
72:1e:54:13:eb:bd:b8:ca:24:d9:a4:ce:ac:11:07:b6:00:e8:
3b:18:44:5a:0a:03:12:40:29:6e:28:24:d9:ec:fb:9f:9c:88:
a7:a2:70:a9:bc:ee:b9:24:47:a6:68:00:d6:1d:b4:24:c5:9f:
9e:99:42:da:77:cf:3a:88:f0:fb:77:b8:2e:d8:73:c8:ce:d0:
d8:18:d1:a2:e7:9e:3e:88:c9:32:c9:9c:08:87:79:f4:df:a2:
cd:41:dc:f0:dd:5f:3b:64:6b:ba:96:c9:0a:5e:bb:74:c7:57:
a2:f7:bd:42:d4:8b:93:f6:59:45:88:39:8b:67:48:5a:2b:43:
8b:a7:f1:8e:8a:5c:94:3a:72:ff:20:39:32:94:04:8a:67:c8:
73:4c:80:49:c2:53:35:53:28:7a:6c:ae:88:d6:c8:22:f0:ea:
46:88:b7:b9:7e:25:3d:06:c8:61:7e:6b:43:88:04:8e:20:c9:
79:56:68:41:8b:74:1f:ec:90:90:8d:11:e8:71:61:81:42:49:
62:eb:c6:07:f2:45:3e:2e:c9:5a:fe:a2:d9:19:d2:e6:89:e6:
d9:17:e1:c9:92:69:9d:82:54:fe:ce:a8:57:b1:c1:91:7f:fe:
3e:98:7d:58:9e:c9:ed:52:e7:e1:d2:a2:e4:72:88:a2:a7:7d:
bc:b7:6e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:54 2026 by rpki-client