
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/3135372e32302e3132362e302f32332d3234203d3e20313532343130.roa
File: 3135372e32302e3132362e302f32332d3234203d3e20313532343130.roa (raw, json)
Hash identifier: g/f5oiN6iiOkoRtweFIMN236eVeurXuFpLSe3yBaq5U=
Subject key identifier: 72:0A:E4:C5:54:34:A9:BD:E1:F4:E7:50:EF:4C:F4:E3:9D:EE:53:94
Certificate issuer: /CN=82619591421B67CACDA4E6A0B166011B7E6D1D21
Certificate serial: 6D384F37D7CB4496DDC8471BEB66EB9DBA961004
Authority key identifier: 82:61:95:91:42:1B:67:CA:CD:A4:E6:A0:B1:66:01:1B:7E:6D:1D:21
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/3135372e32302e3132362e302f32332d3234203d3e20313532343130.roa
Signing time: Sun 03 May 2026 02:55:37 +0000
ROA not before: Sun 03 May 2026 02:50:37 +0000
ROA not after: Sun 02 May 2027 02:55:37 +0000
asID: 152410
IP address blocks: 157.20.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.crl
rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:38:4f:37:d7:cb:44:96:dd:c8:47:1b:eb:66:eb:9d:ba:96:10:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82619591421B67CACDA4E6A0B166011B7E6D1D21
Validity
Not Before: May 3 02:50:37 2026 GMT
Not After : May 2 02:55:37 2027 GMT
Subject: CN=720AE4C55434A9BDE1F4E750EF4CF4E39DEE5394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:99:b9:fe:1f:25:7d:25:45:4c:52:99:5e:72:
a7:e6:9c:42:15:4e:31:68:8e:f4:12:96:d2:5c:1b:
83:dc:f2:a3:15:d0:47:f9:9a:39:e1:aa:62:1b:92:
db:3f:c9:a7:12:5d:da:1b:f5:db:b8:e3:16:c3:2c:
d3:da:80:df:c7:c2:97:d6:fc:7a:6e:42:42:c1:eb:
d3:4a:76:e5:8a:7f:e4:5e:ee:50:57:79:15:be:7b:
44:b9:ec:c5:09:1b:a6:fe:5f:da:9e:3a:c0:42:7c:
ee:74:ea:1b:6d:88:d9:45:de:e5:37:91:23:31:ce:
61:24:c7:18:7e:6d:9e:b2:17:29:76:cf:52:6e:fd:
85:75:d8:77:31:23:ce:ff:75:79:92:b7:b4:0a:47:
c2:85:bf:34:f4:1e:5e:ab:73:5a:10:6a:b0:28:38:
28:ee:5c:68:06:34:c1:b1:d8:87:7a:8c:29:ec:f0:
de:d5:b2:2b:fc:9f:97:ea:55:19:55:27:74:96:03:
a7:8c:f1:81:ae:5c:e2:68:01:9b:b2:3d:b4:e7:6b:
9f:2b:74:30:89:5d:d2:ca:f7:80:e9:83:ba:2a:d3:
0f:36:f4:2f:ab:9c:51:c3:f8:9e:49:71:ab:a1:d1:
52:25:bf:25:ef:3f:b5:e8:49:e2:23:57:31:7f:c0:
a1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0A:E4:C5:54:34:A9:BD:E1:F4:E7:50:EF:4C:F4:E3:9D:EE:53:94
X509v3 Authority Key Identifier:
keyid:82:61:95:91:42:1B:67:CA:CD:A4:E6:A0:B1:66:01:1B:7E:6D:1D:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/82619591421B67CACDA4E6A0B166011B7E6D1D21.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a0f78bd4-c19b-4d40-aa54-ed8d7bc772ca/0/3135372e32302e3132362e302f32332d3234203d3e20313532343130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.20.126.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:80:52:a3:b1:91:cd:2e:c2:30:b1:f4:bb:eb:f1:8d:ee:a3:
cf:2e:98:88:44:26:13:34:18:93:f7:3b:62:6b:ae:e5:2a:dd:
37:36:8b:cf:ff:9b:09:d3:82:c8:46:ad:f9:e7:dd:90:6f:80:
d1:40:1a:a4:54:d9:eb:5e:55:54:5a:9e:9f:ba:a8:23:3e:f8:
a5:fc:ed:a3:7d:8b:13:31:c8:bd:7e:03:3a:8b:7d:be:4c:6e:
28:4d:43:5c:12:08:ab:49:7d:f7:5d:a9:11:d7:76:9c:98:5f:
31:bf:0a:c2:49:04:b8:57:28:b9:f4:52:b0:0a:7d:d6:b7:fe:
41:55:d8:73:75:a4:bc:0e:7e:ea:30:ff:43:5f:d9:84:b4:2d:
a7:93:31:99:ae:79:bf:fe:c0:a0:50:92:fa:3d:7b:d5:6b:81:
0e:cc:a1:76:71:01:26:23:56:22:fe:eb:00:fb:b6:52:7f:f8:
8f:7d:d7:db:6e:c2:24:47:55:16:b8:78:e1:43:2e:c4:1e:40:
71:9d:05:0e:04:a0:c7:df:0c:2d:fb:db:27:1d:4d:17:12:01:
e6:4b:5c:6b:c4:0e:9b:dc:83:33:8b:dc:5d:38:b0:39:e5:cb:
66:bc:93:35:f9:76:77:b5:11:06:57:0f:50:f8:b4:ba:53:97:
c9:26:9d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:13:58 2026 by rpki-client