
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa
File: 3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa (raw, json)
Hash identifier: 0ceXQBT7nQVIUPaueWzFLm7bmqkvnlmzpOPpIKUeokk=
Subject key identifier: 14:0B:55:66:41:BD:55:81:FC:D6:55:49:14:B8:E2:B5:38:45:19:A4
Certificate issuer: /CN=7F5CED197F7E8809448CD3168850A9ACABA35BCD
Certificate serial: 2BFD8897B916CBDB330E0164E5853BDAF4BD842C
Authority key identifier: 7F:5C:ED:19:7F:7E:88:09:44:8C:D3:16:88:50:A9:AC:AB:A3:5B:CD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa
Signing time: Sun 03 May 2026 03:00:18 +0000
ROA not before: Sun 03 May 2026 02:55:18 +0000
ROA not after: Sun 02 May 2027 03:00:18 +0000
asID: 152765
IP address blocks: 157.66.250.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl
rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:56:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:fd:88:97:b9:16:cb:db:33:0e:01:64:e5:85:3b:da:f4:bd:84:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F5CED197F7E8809448CD3168850A9ACABA35BCD
Validity
Not Before: May 3 02:55:18 2026 GMT
Not After : May 2 03:00:18 2027 GMT
Subject: CN=140B556641BD5581FCD6554914B8E2B5384519A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:66:e4:76:1a:b6:b8:75:30:aa:62:53:7d:b3:
1e:c3:ed:f2:d5:68:23:ec:34:f1:2c:c3:a9:2c:76:
13:98:85:71:21:4b:99:8d:84:94:58:3b:22:7b:d8:
f1:d6:43:49:d1:2a:63:5a:62:ac:89:e7:d5:ce:7c:
ea:30:44:13:ff:5f:52:86:e8:f7:f3:1e:29:f0:23:
86:0a:ad:96:8a:7a:51:a6:4d:c4:01:70:18:0c:80:
5a:0d:42:f3:ef:e0:9d:77:3f:a6:b5:d3:29:49:7d:
ba:ae:8b:1d:a9:39:fd:79:e9:2e:23:0e:2b:8d:b7:
e1:a4:f8:87:58:83:7b:f5:38:da:78:54:2e:ab:4b:
63:ed:df:b8:03:51:d3:d2:5c:f3:e9:82:90:32:86:
a7:9e:29:8a:b5:7e:58:b0:76:a3:50:51:c8:51:39:
86:58:11:01:ff:98:e0:7d:cd:8a:0f:c7:dd:c6:e4:
8a:95:74:c1:11:bf:d9:db:27:23:f1:cb:0b:7c:07:
3a:02:63:09:d2:a3:f8:4d:96:af:5a:c6:cd:d4:f3:
2a:c1:29:a6:08:31:76:76:62:bd:16:f1:b1:a9:38:
f3:35:48:2e:aa:74:d1:ef:f3:58:a0:56:f5:91:5d:
be:68:4d:ca:31:51:50:3d:7c:fa:f8:24:4b:aa:cc:
d6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0B:55:66:41:BD:55:81:FC:D6:55:49:14:B8:E2:B5:38:45:19:A4
X509v3 Authority Key Identifier:
keyid:7F:5C:ED:19:7F:7E:88:09:44:8C:D3:16:88:50:A9:AC:AB:A3:5B:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.250.0/23
Signature Algorithm: sha256WithRSAEncryption
55:a0:d7:01:30:1f:35:d1:f4:98:6c:04:d2:f5:45:9d:bb:32:
3b:6b:95:7b:05:78:83:1a:f4:1b:37:29:be:86:df:08:db:16:
d9:18:9d:e1:3a:c5:72:79:9f:6e:4e:aa:a8:50:41:1a:a1:df:
72:5d:12:49:95:29:c1:ce:a6:7c:6a:02:14:c4:ea:d7:d7:40:
00:b7:4c:b7:40:49:62:aa:ca:fe:23:8a:d4:fc:05:6c:d9:98:
5e:de:11:8e:72:af:43:8f:dd:89:b3:7a:4c:30:0d:2c:21:fb:
e6:31:f0:8c:d0:ff:5f:60:df:e9:86:3b:dc:eb:8a:d0:7d:f6:
7e:60:64:c8:3d:ef:2e:6a:c6:f9:1f:c9:f3:2e:b0:c9:cc:65:
b7:5d:bf:54:a0:0d:3d:47:93:a7:29:5b:15:0f:f8:73:40:34:
72:46:3f:45:6c:96:e7:07:f9:96:ab:13:c1:87:85:de:73:3a:
f6:a4:fb:97:06:59:29:ca:ce:d1:14:9c:5b:6c:75:04:ce:e2:
a3:17:80:2a:8b:29:e5:d7:ad:94:f8:1a:d6:08:00:9f:0a:08:
c8:c2:52:ba:e4:4f:bb:0d:d5:45:cb:4d:db:bf:bb:44:0c:38:
39:94:9e:9a:ca:42:26:b3:ad:0e:5c:6d:26:ff:31:54:c1:33:
df:35:c2:ad
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUK/2Il7kWy9szDgFk5YU72vS9hCwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Y1Q0VEMTk3RjdFODgwOTQ0OENEMzE2ODg1MEE5QUNB
QkEzNUJDRDAeFw0yNjA1MDMwMjU1MThaFw0yNzA1MDIwMzAwMThaMDMxMTAvBgNV
BAMTKDE0MEI1NTY2NDFCRDU1ODFGQ0Q2NTU0OTE0QjhFMkI1Mzg0NTE5QTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClZuR2Gra4dTCqYlN9sx7D7fLV
aCPsNPEsw6ksdhOYhXEhS5mNhJRYOyJ72PHWQ0nRKmNaYqyJ59XOfOowRBP/X1KG
6PfzHinwI4YKrZaKelGmTcQBcBgMgFoNQvPv4J13P6a10ylJfbquix2pOf156S4j
DiuNt+Gk+IdYg3v1ONp4VC6rS2Pt37gDUdPSXPPpgpAyhqeeKYq1fliwdqNQUchR
OYZYEQH/mOB9zYoPx93G5IqVdMERv9nbJyPxywt8BzoCYwnSo/hNlq9axs3U8yrB
KaYIMXZ2Yr0W8bGpOPM1SC6qdNHv81igVvWRXb5oTcoxUVA9fPr4JEuqzNYVAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUFAtVZkG9VYH81lVJFLjitThFGaQwHwYDVR0j
BBgwFoAUf1ztGX9+iAlEjNMWiFCprKujW80wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjEyYmY4NjMtYTFmMC00MmQwLTllM2EtM2Y5ZmY2OWEyZDE1LzAvN0Y1Q0VEMTk3
RjdFODgwOTQ0OENEMzE2ODg1MEE5QUNBQkEzNUJDRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC83RjVDRUQxOTdGN0U4ODA5NDQ4Q0QzMTY4ODUwQTlBQ0FCQTM1
QkNELmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2IxMmJmODYzLWExZjAtNDJkMC05
ZTNhLTNmOWZmNjlhMmQxNS8wLzMxMzUzNzJlMzYzNjJlMzIzNTMwMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNTMyMzczNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnUL6MA0GCSqG
SIb3DQEBCwUAA4IBAQBVoNcBMB810fSYbATS9UWduzI7a5V7BXiDGvQbNym+ht8I
2xbZGJ3hOsVyeZ9uTqqoUEEaod9yXRJJlSnBzqZ8agIUxOrX10AAt0y3QEliqsr+
I4rU/AVs2Zhe3hGOcq9Dj92Js3pMMA0sIfvmMfCM0P9fYN/phjvc64rQffZ+YGTI
Pe8uasb5H8nzLrDJzGW3Xb9UoA09R5OnKVsVD/hzQDRyRj9FbJbnB/mWqxPBh4Xe
czr2pPuXBlkpys7RFJxbbHUEzuKjF4Aqiynl162U+BrWCACfCgjIwlK65E+7DdVF
y03bv7tEDDg5lJ6aykIms60OXG0m/zFUwTPfNcKt
-----END CERTIFICATE-----
Generated at Wed May 13 04:15:58 2026 by rpki-client