
$ rpki-client -vvf rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/3135372e38352e3230382e302f32342d3234203d3e20313339393934.roa
File: 3135372e38352e3230382e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier: ldPhAAtFE22FqY5h7hsA1Z1c6QVe3aVniGrsGK5jmrw=
Subject key identifier: FD:06:48:04:49:50:5B:CF:D5:CA:2B:3E:02:D9:EE:A9:DA:98:06:20
Certificate issuer: /CN=E51553190D79639AC8B731759BCAF93A9BA75390
Certificate serial: 047B80CB18597A34B5F8ECF68B33319B188D8915
Authority key identifier: E5:15:53:19:0D:79:63:9A:C8:B7:31:75:9B:CA:F9:3A:9B:A7:53:90
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/3135372e38352e3230382e302f32342d3234203d3e20313339393934.roa
Signing time: Sun 03 May 2026 02:53:31 +0000
ROA not before: Sun 03 May 2026 02:48:31 +0000
ROA not after: Sun 02 May 2027 02:53:31 +0000
asID: 139994
IP address blocks: 157.85.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.crl
rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:50:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:7b:80:cb:18:59:7a:34:b5:f8:ec:f6:8b:33:31:9b:18:8d:89:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E51553190D79639AC8B731759BCAF93A9BA75390
Validity
Not Before: May 3 02:48:31 2026 GMT
Not After : May 2 02:53:31 2027 GMT
Subject: CN=FD06480449505BCFD5CA2B3E02D9EEA9DA980620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:42:a6:49:99:8f:72:6f:6c:46:50:3e:6c:2d:
8c:42:ac:f0:44:0f:9d:bb:c1:bd:2f:82:5e:48:e1:
a3:49:c7:20:24:24:1b:94:5d:39:28:7a:64:41:98:
6e:de:d5:42:16:3d:84:75:bb:f2:db:92:e0:51:3e:
11:94:44:e0:ac:1c:98:42:50:ce:e6:d0:44:4c:f6:
57:a0:46:2c:78:e8:5b:95:92:74:dd:b1:75:a1:2d:
c5:f2:1d:17:47:cd:0a:f4:f6:8e:ce:5a:ad:da:63:
9a:f8:83:dd:23:ec:c2:bd:bb:dd:a1:c3:51:51:96:
b1:e3:a3:b3:57:3a:fe:03:49:ed:89:c0:94:21:a3:
bd:b8:e2:0e:a2:da:a9:49:11:d0:35:6c:46:b5:93:
2b:58:0c:92:32:50:41:72:1c:40:80:10:51:a1:41:
7f:37:d6:95:ae:ce:fb:e3:39:48:66:55:d5:8c:ac:
3e:e2:f2:9e:b2:c6:07:26:e9:e1:b6:af:55:45:af:
e9:9f:b2:30:b6:3e:0d:04:02:0f:68:23:cd:a4:24:
c2:99:4c:8e:0b:cc:55:8e:3f:21:43:01:c1:53:d3:
7b:52:35:86:82:ae:94:04:7b:6d:f4:8d:b7:18:77:
0f:5c:9f:c0:90:bd:b6:2c:c7:e3:c5:79:b1:1b:88:
32:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:06:48:04:49:50:5B:CF:D5:CA:2B:3E:02:D9:EE:A9:DA:98:06:20
X509v3 Authority Key Identifier:
keyid:E5:15:53:19:0D:79:63:9A:C8:B7:31:75:9B:CA:F9:3A:9B:A7:53:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/3135372e38352e3230382e302f32342d3234203d3e20313339393934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.85.208.0/24
Signature Algorithm: sha256WithRSAEncryption
09:c4:55:42:99:7f:3f:74:41:25:e3:0d:9a:0f:52:da:d3:19:
72:07:f7:4f:bb:a6:7c:27:05:97:bc:1e:6e:40:b3:6c:82:7b:
6a:1a:79:b2:4a:07:1e:57:6b:f1:d1:3f:aa:d0:11:a5:2f:31:
89:df:9b:1e:fa:98:d6:d8:67:11:88:43:62:cd:c3:17:75:59:
bb:57:8d:5a:aa:f5:46:bc:8e:2a:86:cb:4c:77:c7:b4:7e:c9:
26:50:dc:8c:cd:2d:53:77:47:5a:ea:38:df:5f:4f:d4:7f:43:
1a:dd:48:fc:42:41:8d:b2:73:ce:0c:6b:91:62:c7:9e:04:f4:
49:91:44:c9:50:93:ea:86:60:bf:e4:55:90:5d:6d:ab:5f:4a:
ab:76:6c:97:f7:6c:e3:52:87:32:2e:aa:3d:97:76:c3:10:a3:
cb:14:6b:8a:98:d3:2c:a8:ba:df:b8:cf:8b:8a:c1:7c:94:af:
80:87:e6:ae:b2:15:1e:11:8c:3b:de:48:c5:11:a9:a2:58:8a:
37:c7:38:be:8b:fe:9c:3f:cc:7a:41:d7:e1:29:90:07:8f:0a:
f3:27:1d:cc:3e:75:a5:09:93:d3:de:3c:55:8d:c0:72:2b:7b:
8f:02:73:19:b8:b7:d5:62:c0:6c:f7:25:de:48:42:c9:af:87:
3d:c0:1f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:24:05 2026 by rpki-client