
$ rpki-client -vvf rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/3135372e38352e3232302e302f32342d3234203d3e20313339393934.roa
File: 3135372e38352e3232302e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier: 5jVZrO3bdvEgp42Wf+N9tYjId+fRI8dV8A/PBcK0Ano=
Subject key identifier: 59:2E:95:77:D9:1C:03:EF:BC:28:3D:E7:AA:32:22:AC:56:61:64:93
Certificate issuer: /CN=E51553190D79639AC8B731759BCAF93A9BA75390
Certificate serial: 1A75E83FFB830FDF839465204B982856690A88A4
Authority key identifier: E5:15:53:19:0D:79:63:9A:C8:B7:31:75:9B:CA:F9:3A:9B:A7:53:90
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/3135372e38352e3232302e302f32342d3234203d3e20313339393934.roa
Signing time: Sun 03 May 2026 02:53:31 +0000
ROA not before: Sun 03 May 2026 02:48:31 +0000
ROA not after: Sun 02 May 2027 02:53:31 +0000
asID: 139994
IP address blocks: 157.85.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.crl
rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:50:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:75:e8:3f:fb:83:0f:df:83:94:65:20:4b:98:28:56:69:0a:88:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E51553190D79639AC8B731759BCAF93A9BA75390
Validity
Not Before: May 3 02:48:31 2026 GMT
Not After : May 2 02:53:31 2027 GMT
Subject: CN=592E9577D91C03EFBC283DE7AA3222AC56616493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:69:0e:d1:22:af:4b:37:ae:1e:69:eb:6d:d1:
05:c2:f0:ff:70:32:f2:a7:b5:c6:a8:e6:1c:6c:54:
91:1d:cc:94:0f:f8:df:0b:49:25:b6:26:1e:75:db:
80:51:b1:9a:a2:98:4d:a2:d3:42:43:b9:95:b1:98:
aa:67:15:84:0e:8e:bb:05:93:b9:53:03:f6:8b:d7:
87:d7:e2:dd:ad:79:26:db:a2:fa:fe:d9:b4:30:b8:
4b:d8:af:bd:21:a2:63:c8:ee:33:47:a4:fa:eb:7e:
f3:4a:23:88:f4:4a:cc:e4:b7:21:8d:74:f2:83:3b:
76:3a:8c:dc:e0:dc:c2:eb:37:a4:ab:0d:7f:e9:f7:
81:dc:4e:3b:ed:e9:a2:0b:0a:d2:d0:b3:0f:1a:99:
8d:04:3f:e7:71:e6:64:10:7d:2e:e7:36:2c:d7:c0:
b3:a2:1c:c7:3b:b0:e8:dd:60:c8:d9:be:6f:a6:6e:
ec:ae:d4:9e:5a:66:0d:c0:9d:f8:e6:cc:fd:62:c9:
c0:0e:38:49:c3:65:b9:6c:3b:54:6b:3b:0e:11:71:
84:c7:68:ea:0d:8b:53:d4:2b:00:5a:be:ff:05:3a:
90:57:7b:6a:d8:bb:14:67:3c:62:8e:86:74:4a:91:
8e:89:f2:a5:b1:52:10:ff:a5:b7:29:33:3c:68:30:
f3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2E:95:77:D9:1C:03:EF:BC:28:3D:E7:AA:32:22:AC:56:61:64:93
X509v3 Authority Key Identifier:
keyid:E5:15:53:19:0D:79:63:9A:C8:B7:31:75:9B:CA:F9:3A:9B:A7:53:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/E51553190D79639AC8B731759BCAF93A9BA75390.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E51553190D79639AC8B731759BCAF93A9BA75390.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/0/3135372e38352e3232302e302f32342d3234203d3e20313339393934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.85.220.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:fe:7d:3f:8c:45:27:50:a9:19:54:62:55:1d:2a:8d:b0:da:
41:a8:ca:70:dd:9d:5e:3a:ef:1b:7a:4c:09:ac:83:b7:32:cd:
4a:88:35:0a:b9:63:a2:71:f6:0e:52:dd:2f:7b:fc:e7:90:0a:
74:44:4f:97:e5:65:02:b5:9c:d2:ab:3f:15:d6:dc:8c:ce:f0:
0e:88:fb:b7:65:f4:0e:41:65:49:63:16:74:e5:ed:3b:3d:51:
e2:9b:6f:da:2e:20:a7:75:80:eb:bd:e1:49:37:de:6b:97:30:
0e:c3:56:cd:d7:51:c2:84:1c:80:ea:17:7e:f5:9d:3d:eb:eb:
42:f4:85:5c:57:a5:72:05:90:3b:8f:5c:d0:ec:87:94:a9:61:
eb:61:e3:74:1d:04:3a:4f:c2:1c:6b:78:f8:fa:03:f4:6b:e9:
f2:cf:b9:a2:27:68:74:d7:15:49:8b:0b:e8:a3:b6:e9:8c:24:
4a:4f:b3:30:cb:b1:ae:ee:82:89:0a:96:a6:6b:7d:a0:e9:70:
a7:de:70:71:73:39:1b:04:f5:6d:7c:7f:86:1f:61:f5:a0:9f:
07:63:e4:1f:b5:d0:2a:39:af:68:f6:34:ca:7b:ca:6c:93:49:
26:15:17:a2:3b:1d:62:8f:ae:32:a2:9c:31:3b:a6:cb:56:ff:
26:2b:ba:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:12:23 2026 by rpki-client