
$ rpki-client -vvf rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/3135372e38352e3231322e302f32342d3234203d3e20313339393934.roa
File: 3135372e38352e3231322e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier: NIHD8Mbpczu2PfLMlL+SSgF1nFRtlrbgz83XkUNgyis=
Subject key identifier: 8B:3D:BC:63:FF:E6:97:95:A5:56:0D:2A:73:F7:1D:A6:DB:45:22:CA
Certificate issuer: /CN=E51553190D79639AC8B731759BCAF93A9BA75390
Certificate serial: 60B206CA72CFB3F67ECB768E30A8A7A991EE6E5B
Authority key identifier: E5:15:53:19:0D:79:63:9A:C8:B7:31:75:9B:CA:F9:3A:9B:A7:53:90
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/3135372e38352e3231322e302f32342d3234203d3e20313339393934.roa
Signing time: Sun 03 May 2026 02:53:33 +0000
ROA not before: Sun 03 May 2026 02:48:33 +0000
ROA not after: Sun 02 May 2027 02:53:33 +0000
asID: 139994
IP address blocks: 157.85.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.crl
rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:50:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:b2:06:ca:72:cf:b3:f6:7e:cb:76:8e:30:a8:a7:a9:91:ee:6e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E51553190D79639AC8B731759BCAF93A9BA75390
Validity
Not Before: May 3 02:48:33 2026 GMT
Not After : May 2 02:53:33 2027 GMT
Subject: CN=8B3DBC63FFE69795A5560D2A73F71DA6DB4522CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f6:93:54:27:bc:40:e5:6d:33:af:fe:3c:48:
5c:89:df:34:af:e7:c8:c3:86:d6:5c:a9:0a:db:5d:
df:b4:0d:f1:bf:38:cc:89:32:c7:b3:30:4e:26:c2:
e6:46:17:81:73:fe:04:3f:b5:55:30:f2:2f:8b:ed:
07:1f:87:81:41:36:d2:4a:23:59:a1:6f:97:7a:82:
97:fd:25:ad:eb:ee:fc:f2:95:a4:56:74:2e:da:6e:
07:ff:92:0f:8a:b6:41:62:be:c9:dc:18:ee:12:5b:
5d:95:47:7a:e4:2b:a6:4e:30:42:f6:67:0c:4c:49:
9d:e6:be:d6:19:60:d2:5b:bd:48:27:e7:ad:61:03:
26:21:86:10:00:ba:1a:5f:d8:33:c1:33:b3:b6:3f:
24:51:5a:0b:f3:56:c6:a8:82:71:5e:b3:ed:0b:8c:
8b:d7:55:45:08:e9:4f:bb:f6:83:89:04:ed:3b:9b:
49:a4:41:56:a4:3f:5b:6a:eb:c7:d8:b0:ef:f8:9f:
40:92:36:e1:f0:23:b3:b8:cb:d7:cb:c8:65:d3:bf:
06:19:dc:c9:51:63:f4:53:cd:5f:11:36:fe:d9:40:
1e:1c:fc:ff:2d:71:e5:74:ec:cc:c5:1d:8f:85:8e:
c9:d0:b5:e7:c9:e2:3e:56:d5:6d:c6:1c:87:71:2e:
91:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3D:BC:63:FF:E6:97:95:A5:56:0D:2A:73:F7:1D:A6:DB:45:22:CA
X509v3 Authority Key Identifier:
keyid:E5:15:53:19:0D:79:63:9A:C8:B7:31:75:9B:CA:F9:3A:9B:A7:53:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/3135372e38352e3231322e302f32342d3234203d3e20313339393934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.85.212.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:03:cc:ca:d6:9f:0c:11:46:6b:1c:c0:c3:7f:24:36:2d:20:
ba:57:bc:43:d7:d1:11:56:f2:f3:c9:82:8c:2d:74:f7:8f:6e:
17:b5:1c:3e:87:1a:b1:fd:47:b8:61:0d:5d:f8:8b:6c:60:5a:
f2:79:c9:c4:ba:bf:1e:95:bd:a3:c1:b6:24:1d:1e:8a:3e:03:
3e:3f:a1:ad:5b:57:f2:74:dd:2b:6a:87:b0:34:22:a2:53:89:
33:77:d9:04:2f:bf:f1:fd:18:86:4e:41:1c:8f:d2:de:5a:22:
b9:f2:64:5d:67:96:3a:1c:1c:15:ff:2b:1f:8e:b9:11:fa:7e:
d8:05:d0:5e:11:bb:c6:09:1e:9d:35:0a:f1:e4:8e:d6:f7:15:
8c:98:c2:2d:74:67:ae:4d:a9:8a:b2:f7:98:66:36:c8:1b:a4:
2b:20:69:58:d8:fa:13:1d:3a:ba:96:64:c3:77:dc:b0:fa:0a:
7b:1f:82:46:9b:28:f8:81:81:10:eb:c1:d5:f6:1e:73:f7:e8:
e0:1a:d8:99:c7:a7:da:19:3e:ef:56:fe:58:af:fa:37:6d:49:
a4:39:65:cd:24:bb:aa:7f:2e:ee:bc:16:51:85:bf:15:51:82:
a3:a2:a7:3b:f0:2b:99:84:1a:96:ca:61:af:b0:e5:b7:f0:26:
a0:41:13:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:24:46 2026 by rpki-client