
$ rpki-client -vvf rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/3135372e31302e302e302f32332d3233203d3e20313532303739.roa
File: 3135372e31302e302e302f32332d3233203d3e20313532303739.roa (raw, json)
Hash identifier: L8w6kahZ2grS4kSAhgTEPOSgOOJA2842GakagbKlsJM=
Subject key identifier: 69:9A:72:53:66:9D:B7:76:31:27:87:46:38:3F:13:3D:3C:C7:EA:B0
Certificate issuer: /CN=219A09E5E307286A0EACA587C1B82AD67AAA76E3
Certificate serial: 10F45FAC6C0235621C78F7C9F86244FC4F97C211
Authority key identifier: 21:9A:09:E5:E3:07:28:6A:0E:AC:A5:87:C1:B8:2A:D6:7A:AA:76:E3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/3135372e31302e302e302f32332d3233203d3e20313532303739.roa
Signing time: Sun 03 May 2026 02:53:46 +0000
ROA not before: Sun 03 May 2026 02:48:46 +0000
ROA not after: Sun 02 May 2027 02:53:46 +0000
asID: 152079
IP address blocks: 157.10.0.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.crl
rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:28:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:f4:5f:ac:6c:02:35:62:1c:78:f7:c9:f8:62:44:fc:4f:97:c2:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219A09E5E307286A0EACA587C1B82AD67AAA76E3
Validity
Not Before: May 3 02:48:46 2026 GMT
Not After : May 2 02:53:46 2027 GMT
Subject: CN=699A7253669DB77631278746383F133D3CC7EAB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5c:e1:8e:82:02:b9:fd:35:dd:47:e2:c1:3d:
ba:ab:78:2e:0e:48:6e:12:f3:0e:e0:39:cc:25:e2:
bc:16:43:72:5e:9b:0a:f2:e9:b8:14:6d:de:d6:f7:
ff:43:6f:12:53:16:2d:2d:b1:d9:51:e3:fa:fa:39:
c7:81:00:82:d9:18:d1:58:10:7e:a1:56:de:d9:e1:
b6:56:88:cb:0c:a3:43:60:43:7d:37:f5:0f:9a:ca:
39:fa:8e:b2:60:7d:38:a3:be:c1:fa:ff:76:ba:43:
2b:f4:89:5f:a2:33:2b:ce:05:b5:41:f6:93:a2:33:
c1:e0:45:e9:29:06:c3:00:69:ca:1b:05:4d:ad:67:
9c:66:75:1a:65:ff:fa:8a:65:51:e1:4a:c4:8c:c1:
de:a8:81:70:c5:af:b9:a4:bd:5c:cd:4c:19:ee:9d:
4c:88:ee:91:8c:c8:27:b7:f1:63:91:03:cc:da:cf:
ac:49:66:01:d0:e9:0d:08:3e:23:8e:d0:12:76:37:
82:3e:05:aa:43:11:c3:aa:a6:58:94:5f:c9:89:73:
44:7b:0b:9e:3f:f6:02:49:52:83:fe:24:66:96:fe:
c4:bb:87:dc:c5:c3:8d:aa:c4:e0:e8:c4:20:ff:c1:
e7:f3:e8:ef:3a:70:37:80:e8:f5:c4:cd:9d:5b:85:
fd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9A:72:53:66:9D:B7:76:31:27:87:46:38:3F:13:3D:3C:C7:EA:B0
X509v3 Authority Key Identifier:
keyid:21:9A:09:E5:E3:07:28:6A:0E:AC:A5:87:C1:B8:2A:D6:7A:AA:76:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/219A09E5E307286A0EACA587C1B82AD67AAA76E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/3135372e31302e302e302f32332d3233203d3e20313532303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.10.0.0/23
Signature Algorithm: sha256WithRSAEncryption
59:d0:db:b6:dd:fa:b1:a8:f5:ec:72:0d:b2:af:e4:11:5c:23:
0b:b2:9d:f5:44:a0:4b:14:52:32:cf:5b:8a:a9:90:c8:cb:1e:
79:bd:46:8a:02:8e:7a:ec:43:5d:64:49:eb:78:5e:af:af:96:
5d:77:41:16:27:91:c2:15:02:6c:d9:a1:58:54:af:9a:02:25:
94:7e:68:a1:bc:55:7d:88:77:98:79:5c:f3:d3:25:d1:46:e5:
d5:e5:35:d2:f7:73:85:61:31:c5:41:39:d9:be:95:0e:79:10:
17:7e:c4:ca:e6:d8:2a:d7:18:26:86:97:ff:ba:14:66:6f:13:
34:6b:30:a8:43:2f:4d:2d:ec:71:59:15:ef:5f:71:bf:8a:20:
dc:c6:0b:20:31:e4:7c:56:43:c0:b7:25:77:67:3b:8f:d5:1a:
6f:58:81:4c:e7:75:00:9b:36:0a:d4:02:03:a0:d0:9e:88:ad:
1f:dc:39:bd:37:31:03:86:91:93:4b:d2:cf:d8:20:d0:11:e2:
5a:fa:2f:6c:84:ea:5d:3d:df:7e:e7:7c:55:02:bd:58:c3:bd:
ca:5f:97:24:da:cb:ee:49:64:cf:41:ae:1d:1b:80:7c:91:5a:
be:1c:2d:3b:4d:9c:3e:61:b7:a6:11:db:e0:a4:c9:d6:c5:92:
8c:e9:c5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:28 2026 by rpki-client