
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/3135372e31352e34352e302f32342d3234203d3e20313532333931.roa
File: 3135372e31352e34352e302f32342d3234203d3e20313532333931.roa (raw, json)
Hash identifier: NQj0jBui5SdBCaBtC25o6ECq/13rF1K5IZvhOhcCy5E=
Subject key identifier: 2A:58:66:6B:FE:94:FE:73:4B:87:C5:01:5C:05:0D:DA:AC:AD:4D:90
Certificate issuer: /CN=E03B468CD361142C585663CF9ECF8523C31B59E9
Certificate serial: 4878EB005F79D1BAD95794736A65DA5A0E89A0CC
Authority key identifier: E0:3B:46:8C:D3:61:14:2C:58:56:63:CF:9E:CF:85:23:C3:1B:59:E9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E03B468CD361142C585663CF9ECF8523C31B59E9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/3135372e31352e34352e302f32342d3234203d3e20313532333931.roa
Signing time: Sun 03 May 2026 02:55:10 +0000
ROA not before: Sun 03 May 2026 02:50:10 +0000
ROA not after: Sun 02 May 2027 02:55:10 +0000
asID: 152391
IP address blocks: 157.15.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/E03B468CD361142C585663CF9ECF8523C31B59E9.crl
rsync://rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/E03B468CD361142C585663CF9ECF8523C31B59E9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E03B468CD361142C585663CF9ECF8523C31B59E9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:78:eb:00:5f:79:d1:ba:d9:57:94:73:6a:65:da:5a:0e:89:a0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E03B468CD361142C585663CF9ECF8523C31B59E9
Validity
Not Before: May 3 02:50:10 2026 GMT
Not After : May 2 02:55:10 2027 GMT
Subject: CN=2A58666BFE94FE734B87C5015C050DDAACAD4D90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:31:d8:e3:19:f0:fe:08:9c:31:c6:ae:2c:66:
98:1d:e0:26:ac:25:d6:6f:cf:66:42:78:48:a4:97:
38:e3:61:63:6e:57:a8:69:e7:5b:68:15:a7:ed:b2:
82:4f:e2:0c:2f:1c:b9:53:97:0c:b1:16:73:fe:d9:
f1:6e:3a:e7:c3:7b:17:0d:ec:eb:51:41:fe:9e:e0:
61:49:36:4e:94:5a:67:b4:fb:0c:3e:cc:ad:8a:31:
22:d4:e4:39:89:b8:3f:31:9d:07:f7:e0:8a:4c:41:
c6:b3:05:a1:26:4a:a0:4b:cd:fc:25:0e:98:53:6f:
f3:10:a9:2f:09:aa:19:ed:53:ec:23:92:03:d1:2c:
17:07:6f:8a:d3:62:67:48:eb:a8:31:1b:32:aa:6e:
a4:23:6b:2d:3b:74:5d:10:4e:a7:b7:46:5e:77:d9:
eb:65:32:a1:f7:95:93:26:ca:37:0b:36:9e:0c:5c:
89:a2:f0:46:13:41:1a:d0:88:d6:11:64:aa:03:de:
43:5d:39:4d:80:a7:ac:aa:d5:fb:a1:e7:10:bf:2e:
9a:58:d3:a1:23:92:be:99:9c:98:0f:2a:4b:7a:74:
b4:04:6b:12:27:4a:a3:de:33:1b:50:0a:ea:91:bb:
2c:6e:9b:fa:69:1f:2c:1b:4a:20:e7:99:20:3a:f1:
ae:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:58:66:6B:FE:94:FE:73:4B:87:C5:01:5C:05:0D:DA:AC:AD:4D:90
X509v3 Authority Key Identifier:
keyid:E0:3B:46:8C:D3:61:14:2C:58:56:63:CF:9E:CF:85:23:C3:1B:59:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/E03B468CD361142C585663CF9ECF8523C31B59E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E03B468CD361142C585663CF9ECF8523C31B59E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/3135372e31352e34352e302f32342d3234203d3e20313532333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.15.45.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:43:7e:90:12:78:8e:5d:b5:d1:b8:06:62:a4:6e:13:8f:1d:
bf:96:51:15:53:97:d1:64:cf:64:9f:46:f5:42:a6:84:3e:7b:
80:6e:41:07:4b:90:31:94:a2:f8:b4:ac:90:5f:f6:cc:d8:82:
56:2b:51:69:5d:c0:32:ee:d9:16:71:c8:94:03:ba:35:0a:60:
28:05:10:d1:e7:be:13:3a:82:72:32:19:b6:71:78:86:f0:66:
c3:49:cd:43:d0:19:3b:e7:61:0f:03:61:28:67:07:eb:3a:83:
03:72:32:c7:07:66:c4:15:1b:a8:36:a3:6a:99:10:08:37:42:
6b:99:04:7f:01:44:c2:ca:4d:e3:39:e6:57:e0:4d:8d:80:25:
b4:4a:27:1b:1c:ec:cc:a4:f9:ac:23:c0:bb:32:dc:19:e9:0d:
c3:7b:c2:a2:cc:72:a0:b2:ac:50:c9:15:b9:bf:d7:73:e7:d6:
90:e8:ac:91:a2:5f:6f:8e:af:e9:7a:e8:8e:54:5f:1a:f5:d8:
d7:8e:bc:3a:40:4e:62:f7:f7:dd:b0:7f:18:b3:fe:20:6f:67:
34:e6:df:af:5a:bd:f0:13:48:8d:54:6f:e5:c9:bb:53:89:37:
72:2c:bd:bb:fe:62:fc:92:5b:24:57:9c:ee:77:f9:0f:1f:4b:
c2:37:60:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:44:28 2026 by rpki-client