
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa
File: 3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa (raw, json)
Hash identifier: vTNwoFQSRd6UXwDXhePDtYRySxnP7vYZs8QtGgvL7F8=
Subject key identifier: 13:CD:64:95:1E:52:A4:4F:10:E4:EB:EC:99:A2:51:81:E9:D3:44:2D
Certificate issuer: /CN=267E9A66F7A7C78F7CC7C04986D61B87DEBF5123
Certificate serial: 09A381D57E86B6EBCB5B5C74409B97B2ED0AA088
Authority key identifier: 26:7E:9A:66:F7:A7:C7:8F:7C:C7:C0:49:86:D6:1B:87:DE:BF:51:23
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa
Signing time: Sun 03 May 2026 02:55:38 +0000
ROA not before: Sun 03 May 2026 02:50:38 +0000
ROA not after: Sun 02 May 2027 02:55:38 +0000
asID: 152389
IP address blocks: 157.15.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.crl
rsync://rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:a3:81:d5:7e:86:b6:eb:cb:5b:5c:74:40:9b:97:b2:ed:0a:a0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267E9A66F7A7C78F7CC7C04986D61B87DEBF5123
Validity
Not Before: May 3 02:50:38 2026 GMT
Not After : May 2 02:55:38 2027 GMT
Subject: CN=13CD64951E52A44F10E4EBEC99A25181E9D3442D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:92:c1:1a:91:f2:88:63:a9:f3:c8:20:36:5e:
fc:aa:5d:20:ed:d2:9f:09:0a:9c:ed:bb:41:50:76:
26:c8:9b:64:97:b3:21:3b:30:48:3d:ec:40:43:59:
5b:87:aa:bb:a4:be:fb:33:f4:9a:d5:8f:90:9b:3d:
ef:4c:5f:5c:80:ff:f1:eb:16:c9:f3:65:73:17:e8:
7c:18:12:1f:f9:57:5b:c2:22:40:2c:65:38:aa:5e:
68:7e:f8:31:4c:eb:f9:29:1b:51:cc:be:48:54:31:
27:d2:2a:e5:e4:1f:d2:3f:56:99:8f:ab:20:c0:c8:
9d:40:75:8a:55:e5:90:cd:13:e1:f3:dd:c4:8f:0d:
14:79:0d:b6:c6:66:a1:2c:79:a1:91:37:c2:c1:d1:
14:e8:7f:27:71:6c:79:0d:70:6c:e1:fa:24:c0:39:
dc:f0:2b:ea:5f:1d:2b:10:79:68:a5:04:d1:5c:aa:
0f:8d:ad:c6:98:6b:80:d0:9d:83:50:92:f8:54:3f:
7f:64:31:d9:0d:53:3f:16:10:c0:0b:76:bb:23:26:
71:bf:6b:d3:bf:2d:e2:70:08:71:cc:c0:75:44:d4:
a4:4f:75:ea:b0:1c:58:05:28:07:e1:ac:e4:96:ce:
a5:cf:ab:29:2b:e5:96:b5:a8:de:23:36:c1:3c:86:
78:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CD:64:95:1E:52:A4:4F:10:E4:EB:EC:99:A2:51:81:E9:D3:44:2D
X509v3 Authority Key Identifier:
keyid:26:7E:9A:66:F7:A7:C7:8F:7C:C7:C0:49:86:D6:1B:87:DE:BF:51:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/267E9A66F7A7C78F7CC7C04986D61B87DEBF5123.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.15.216.0/23
Signature Algorithm: sha256WithRSAEncryption
80:f2:cd:3f:77:94:f1:c4:8e:83:ff:7b:14:01:a0:86:e5:44:
0d:de:89:62:59:d8:10:30:c4:26:71:e7:96:60:49:b9:d6:32:
c5:04:2d:89:23:a9:29:b6:0f:a6:2c:b3:01:f1:c5:b9:f9:6a:
fa:6d:fb:21:44:d5:98:ca:a4:ec:c8:5b:21:51:d7:be:fb:24:
03:e7:77:70:a8:91:97:4f:19:b8:a9:1d:5b:64:d1:96:d0:28:
e2:5f:1b:e9:15:d3:3e:aa:d5:4e:1e:68:13:ab:b5:ee:3a:12:
e0:9c:f7:08:8d:2b:41:5e:27:20:b7:d3:ec:36:f2:1c:a1:2c:
fb:60:d0:17:a4:af:35:ac:44:0e:2a:fe:49:d8:6a:53:6e:a2:
21:ff:48:bf:26:d0:43:e8:d2:ba:89:3e:3a:9b:61:bb:ae:f6:
fa:b3:96:67:d7:09:74:e9:6c:c2:3b:d2:b6:2f:42:d2:e7:e7:
c8:bb:5f:4b:d7:d8:cc:b9:26:1b:ce:a8:65:06:d4:79:b8:e6:
19:88:50:ac:e4:39:05:6b:de:92:2a:10:21:9d:88:3f:ef:25:
5f:4a:e6:ff:2c:d1:5d:f2:4b:34:4b:23:8f:70:d6:6a:5b:0d:
0c:82:84:3a:fd:7c:80:ff:2e:2d:f2:53:0f:47:e7:2f:01:31:
6e:87:da:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:59:42 2026 by rpki-client