
$ rpki-client -vvf rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/3135372e31302e3138322e302f32342d3234203d3e20313532333434.roa
File: 3135372e31302e3138322e302f32342d3234203d3e20313532333434.roa (raw, json)
Hash identifier: YTcLxO+mbdwk1sv6hkGjyOE34UWEs5shSWT+DleZD5E=
Subject key identifier: BE:BA:BB:9B:63:67:D8:C8:E6:31:E2:B9:C7:14:4B:A8:FB:90:B5:7F
Certificate issuer: /CN=2D8147AB32AE34FE0599301C399BA431CBD96AE2
Certificate serial: 05DDCEEB3FAE256BE81A06D7C459AC3F1F2D4823
Authority key identifier: 2D:81:47:AB:32:AE:34:FE:05:99:30:1C:39:9B:A4:31:CB:D9:6A:E2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/3135372e31302e3138322e302f32342d3234203d3e20313532333434.roa
Signing time: Sun 03 May 2026 02:52:03 +0000
ROA not before: Sun 03 May 2026 02:47:03 +0000
ROA not after: Sun 02 May 2027 02:52:03 +0000
asID: 152344
IP address blocks: 157.10.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.crl
rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:dd:ce:eb:3f:ae:25:6b:e8:1a:06:d7:c4:59:ac:3f:1f:2d:48:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D8147AB32AE34FE0599301C399BA431CBD96AE2
Validity
Not Before: May 3 02:47:03 2026 GMT
Not After : May 2 02:52:03 2027 GMT
Subject: CN=BEBABB9B6367D8C8E631E2B9C7144BA8FB90B57F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ea:26:3b:ed:ed:41:cb:c1:b5:74:60:9c:0c:
e8:58:51:93:07:2d:94:d7:76:e3:17:ff:6a:18:d9:
bb:20:b0:da:ce:76:27:8f:0f:66:d9:5b:7d:dc:bc:
08:30:9e:b7:19:81:9a:03:cc:c5:47:e6:6a:a8:a4:
49:56:33:15:3a:09:97:cc:7c:b2:2f:e2:20:ca:74:
ba:f3:15:00:3c:7c:20:93:3b:b3:52:24:84:0f:7f:
d4:1a:17:34:eb:6e:07:5e:42:0f:c7:d6:dd:6c:1a:
97:cc:be:f6:1c:f3:bd:8f:a2:38:fa:00:4e:4b:83:
e1:41:06:eb:64:0b:d1:1f:51:df:21:e3:bf:c6:65:
aa:66:2c:ad:71:e1:e6:9d:c3:a9:05:7f:ba:e1:21:
72:b8:fc:73:a1:af:55:8e:64:64:d8:5f:9e:cb:9c:
ad:7e:0b:ed:30:53:6f:66:c6:0e:18:a4:07:bd:6c:
2c:3a:1f:b0:9b:41:2d:94:4b:2b:45:93:99:ae:c7:
d8:82:07:b3:ff:67:80:3f:56:20:0d:53:e1:aa:1e:
4b:cf:1f:e4:6e:44:49:a1:5d:0b:55:3a:c2:4e:b8:
7c:02:62:8e:a9:4f:a7:0b:89:e7:3e:cd:3f:79:03:
ab:1f:1d:ed:31:b1:ba:d4:2b:fa:a3:4b:fb:5c:e0:
3d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BA:BB:9B:63:67:D8:C8:E6:31:E2:B9:C7:14:4B:A8:FB:90:B5:7F
X509v3 Authority Key Identifier:
keyid:2D:81:47:AB:32:AE:34:FE:05:99:30:1C:39:9B:A4:31:CB:D9:6A:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2D8147AB32AE34FE0599301C399BA431CBD96AE2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/3135372e31302e3138322e302f32342d3234203d3e20313532333434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.10.182.0/24
Signature Algorithm: sha256WithRSAEncryption
93:49:30:82:55:b3:35:65:1e:b7:40:7a:c2:ee:8f:f1:8f:b3:
96:13:46:44:45:1b:4b:a6:78:b6:24:76:b6:f1:69:4a:60:cd:
7d:d6:3f:fd:33:b9:db:d2:54:a8:60:a4:59:1f:d1:18:d9:28:
9c:66:03:e0:ed:d1:8b:53:d8:17:5e:e4:6a:52:9c:4e:a3:c7:
03:c9:9e:5f:09:1d:2c:f8:11:ed:ec:ce:6a:27:e1:ed:a0:6f:
70:d2:d7:d5:57:b4:71:27:59:be:56:19:1c:f6:4f:98:31:cb:
86:3a:5d:f8:f2:d2:b5:a6:f4:bd:35:d1:ce:f8:af:05:6c:2e:
92:57:23:c3:76:ad:81:22:2c:c4:6d:f1:ea:31:f9:5f:b7:f0:
dd:6d:a1:d3:eb:99:73:48:50:66:2d:62:19:6b:59:bc:2e:47:
55:c2:c8:38:9a:8f:3a:bc:67:34:bb:62:98:8f:4e:0b:1b:c0:
89:9b:bd:09:26:84:4e:3e:6c:28:c7:d5:1b:2a:a3:90:9a:df:
74:8b:4f:7a:0f:67:0e:0b:71:1d:8e:75:cf:d5:6a:29:11:37:
a3:4c:28:bb:34:c8:8d:64:a3:26:3b:d1:e0:af:83:87:be:23:
93:e2:b2:a9:f9:f4:e3:0c:66:dc:38:93:ea:3d:19:02:47:e8:
7b:74:88:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:28 2026 by rpki-client