
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/3135372e31352e34342e302f32342d3234203d3e20313532333931.roa
File: 3135372e31352e34342e302f32342d3234203d3e20313532333931.roa (raw, json)
Hash identifier: YVVFf3w1oI5cN9GhWV4EQ/srdvKn64MAVk6XgK0Qog8=
Subject key identifier: 9E:17:42:C0:09:C4:9D:DE:CC:D9:4F:00:F9:33:18:29:F7:14:A0:51
Certificate issuer: /CN=E03B468CD361142C585663CF9ECF8523C31B59E9
Certificate serial: 21D4DCCF9E14079C9730DAF12995CDC1894DB742
Authority key identifier: E0:3B:46:8C:D3:61:14:2C:58:56:63:CF:9E:CF:85:23:C3:1B:59:E9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E03B468CD361142C585663CF9ECF8523C31B59E9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/3135372e31352e34342e302f32342d3234203d3e20313532333931.roa
Signing time: Sun 03 May 2026 02:55:10 +0000
ROA not before: Sun 03 May 2026 02:50:10 +0000
ROA not after: Sun 02 May 2027 02:55:10 +0000
asID: 152391
IP address blocks: 157.15.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/E03B468CD361142C585663CF9ECF8523C31B59E9.crl
rsync://rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/E03B468CD361142C585663CF9ECF8523C31B59E9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E03B468CD361142C585663CF9ECF8523C31B59E9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:d4:dc:cf:9e:14:07:9c:97:30:da:f1:29:95:cd:c1:89:4d:b7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E03B468CD361142C585663CF9ECF8523C31B59E9
Validity
Not Before: May 3 02:50:10 2026 GMT
Not After : May 2 02:55:10 2027 GMT
Subject: CN=9E1742C009C49DDECCD94F00F9331829F714A051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ad:c9:aa:9f:cf:97:b4:2b:8e:c9:23:02:65:
5b:2b:d7:d5:01:85:9e:47:a3:72:68:9f:ed:58:1b:
26:ce:47:e9:b5:0d:71:9a:ff:01:3c:6f:70:cc:24:
1d:b0:4e:fd:0f:83:61:87:18:67:7c:fa:de:c2:3b:
8c:69:65:56:60:78:40:e2:ff:bd:2c:f5:33:b2:59:
dc:0c:a5:71:c9:40:4d:38:8e:71:f4:b9:80:4a:2d:
01:af:f3:95:cf:5a:5e:6f:ec:92:f5:9f:0f:50:5b:
77:99:4a:24:d3:c5:72:ba:7f:2e:32:06:8d:d6:e9:
9f:33:99:e3:85:dc:a6:71:42:17:e7:f9:44:c2:80:
9b:79:5f:2b:bd:4b:2f:79:7c:5d:65:51:53:4f:ae:
f7:1d:78:0c:a7:75:5e:7b:c3:c7:06:9f:f0:7c:fa:
9d:64:f3:63:01:74:8e:0a:dd:86:5d:54:7e:9b:9a:
a1:cd:12:c2:34:c6:bf:48:27:e0:e7:f4:a1:e2:0d:
e4:f6:1c:69:97:6d:f7:15:f6:8d:40:da:b7:d1:f5:
1b:bc:ee:21:59:d3:c1:f6:37:2c:ea:cf:af:5d:10:
3b:c4:a1:84:fc:33:3b:94:17:25:85:f6:bd:5f:be:
cd:e3:fa:ed:b6:43:ce:ea:a9:e5:0e:f1:44:0d:35:
42:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:17:42:C0:09:C4:9D:DE:CC:D9:4F:00:F9:33:18:29:F7:14:A0:51
X509v3 Authority Key Identifier:
keyid:E0:3B:46:8C:D3:61:14:2C:58:56:63:CF:9E:CF:85:23:C3:1B:59:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/E03B468CD361142C585663CF9ECF8523C31B59E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E03B468CD361142C585663CF9ECF8523C31B59E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/3135372e31352e34342e302f32342d3234203d3e20313532333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.15.44.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:ff:aa:5f:28:92:63:86:72:0e:42:8e:12:93:71:b9:24:de:
b1:29:ca:7b:14:44:a0:a4:17:7d:b9:4b:ca:b5:bd:c6:a0:f6:
a7:32:ec:c7:8d:5a:48:e4:b6:55:03:af:bb:ba:a7:25:2f:cc:
83:30:49:09:21:96:87:1c:c2:67:51:44:3d:0d:b5:a6:c5:eb:
52:b9:75:a8:ed:1a:4a:a8:1e:b7:1b:19:9b:83:6d:39:5e:04:
a5:ca:39:cb:55:54:60:1f:14:51:80:09:14:76:e8:6a:69:9d:
5e:12:0c:c5:a5:13:2f:1c:70:64:46:75:5d:4d:5a:4c:56:04:
f2:98:bb:53:1f:50:6f:49:9d:10:82:55:1f:0f:fe:e3:b6:30:
db:84:d2:e1:4a:4c:79:99:e1:b5:48:b3:38:6f:bc:8e:b6:bb:
f5:a9:d1:21:a0:ef:bb:57:bf:fd:b5:a6:cb:9b:f7:a2:d3:f8:
15:0a:73:99:df:18:7a:50:e6:89:b1:1c:c8:d4:6f:be:3b:b4:
f9:89:72:ad:f1:74:e6:f2:32:18:49:0b:ec:3b:01:38:7a:e9:
5b:f6:0c:f7:bb:a4:1c:51:eb:13:a2:37:09:74:26:fa:50:eb:
7b:a1:4a:ad:5d:c1:4a:df:c0:26:a8:44:14:08:1f:81:fe:4c:
e8:07:cd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:39:59 2026 by rpki-client