
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/3135372e36362e3235312e302f32342d3234203d3e20313532373635.roa
File: 3135372e36362e3235312e302f32342d3234203d3e20313532373635.roa (raw, json)
Hash identifier: 67rdoMV01a3IGZ3053/VOVG/uiaYoOQVt0FRgDL8wn8=
Subject key identifier: 78:6C:D9:37:DB:4D:10:09:1D:38:81:79:23:06:7E:18:87:47:98:2A
Certificate issuer: /CN=7F5CED197F7E8809448CD3168850A9ACABA35BCD
Certificate serial: 1A3971525F91DDB95D2E56E2B3EAF9250B10C8F2
Authority key identifier: 7F:5C:ED:19:7F:7E:88:09:44:8C:D3:16:88:50:A9:AC:AB:A3:5B:CD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/3135372e36362e3235312e302f32342d3234203d3e20313532373635.roa
Signing time: Sun 03 May 2026 03:00:18 +0000
ROA not before: Sun 03 May 2026 02:55:18 +0000
ROA not after: Sun 02 May 2027 03:00:18 +0000
asID: 152765
IP address blocks: 157.66.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl
rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:56:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:39:71:52:5f:91:dd:b9:5d:2e:56:e2:b3:ea:f9:25:0b:10:c8:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F5CED197F7E8809448CD3168850A9ACABA35BCD
Validity
Not Before: May 3 02:55:18 2026 GMT
Not After : May 2 03:00:18 2027 GMT
Subject: CN=786CD937DB4D10091D38817923067E188747982A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:33:65:19:39:fe:1e:44:79:40:48:fc:10:a2:
19:1a:62:33:04:1b:5b:88:af:7b:45:08:89:d9:64:
ae:13:9f:71:45:19:db:f2:63:64:79:3e:13:7e:e5:
a0:97:db:39:1e:96:3e:e4:22:8d:4e:18:ab:f3:d9:
71:a8:0b:fd:4a:4f:0c:70:05:b7:92:21:fa:fe:61:
79:7c:48:ad:b2:09:6d:47:0d:db:7f:72:2d:be:01:
4e:b3:60:07:2d:f8:cb:64:cb:5a:2d:b7:9f:2d:a5:
3b:3f:b5:1b:d6:f7:fc:ff:07:70:0a:44:d9:8c:56:
30:12:6c:3a:1e:48:0c:55:7c:17:19:2b:91:b5:03:
08:cb:55:fc:4d:c7:b4:c3:dc:27:70:a7:00:49:24:
cb:8f:a3:a7:09:2c:f8:18:9f:8a:0c:91:78:10:ec:
78:32:bb:c7:98:92:87:1a:7b:7f:4a:5e:14:ed:1b:
4e:59:6d:3e:df:a9:40:c3:4e:11:98:33:4d:dd:05:
04:db:1f:a2:a2:53:7a:7b:18:f6:59:20:4b:3d:b7:
72:d9:68:c7:b7:c9:fb:91:a9:90:f1:52:b8:74:4b:
e7:da:e8:3f:12:6e:98:d7:82:dc:2d:08:7c:93:0b:
24:5e:80:e7:0d:81:59:13:e1:e7:58:39:43:57:93:
16:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6C:D9:37:DB:4D:10:09:1D:38:81:79:23:06:7E:18:87:47:98:2A
X509v3 Authority Key Identifier:
keyid:7F:5C:ED:19:7F:7E:88:09:44:8C:D3:16:88:50:A9:AC:AB:A3:5B:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7F5CED197F7E8809448CD3168850A9ACABA35BCD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/3135372e36362e3235312e302f32342d3234203d3e20313532373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.251.0/24
Signature Algorithm: sha256WithRSAEncryption
50:e9:af:51:19:76:61:9a:bb:b3:bb:b3:c8:b3:5c:9a:41:85:
5c:85:d8:b5:d6:42:7e:84:16:5e:53:96:34:7f:8c:d0:3f:4f:
c3:fa:24:ca:b1:a6:77:a6:45:da:4b:c2:26:18:ba:0e:65:52:
4c:46:1d:d4:8c:0e:5a:f1:c2:9e:5d:87:8c:c5:8e:77:1d:95:
b4:0a:6e:cf:2b:2a:02:83:c6:ff:d5:61:cd:75:be:72:4a:6f:
89:c1:4a:dd:18:5a:0a:2c:cd:bb:02:6f:82:fc:7a:97:74:3a:
53:a6:2c:17:aa:d2:d4:9a:61:78:2c:be:5f:fe:46:e7:40:5f:
a3:5c:60:0a:00:59:a8:09:a5:c9:91:a7:99:fa:44:c2:aa:63:
1a:60:51:2a:52:00:a1:4e:70:7b:8e:71:f2:b7:81:2d:8e:8a:
43:55:bd:f6:37:53:a2:86:93:b4:42:25:a4:13:9a:e5:bc:85:
c7:52:6f:e8:52:87:30:6a:b3:80:4e:e3:ac:b0:f7:0c:15:9c:
3c:6b:db:c2:0c:34:fe:13:57:76:5d:eb:75:9d:58:5c:72:cc:
65:a2:f0:ac:6e:86:8d:e6:5a:24:d6:c7:37:b3:ee:01:ab:b8:
52:9c:c6:ba:ff:6c:a9:87:a5:58:45:fb:3b:93:84:fb:b6:5d:
17:44:a8:a0
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUGjlxUl+R3bldLlbis+r5JQsQyPIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Y1Q0VEMTk3RjdFODgwOTQ0OENEMzE2ODg1MEE5QUNB
QkEzNUJDRDAeFw0yNjA1MDMwMjU1MThaFw0yNzA1MDIwMzAwMThaMDMxMTAvBgNV
BAMTKDc4NkNEOTM3REI0RDEwMDkxRDM4ODE3OTIzMDY3RTE4ODc0Nzk4MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhM2UZOf4eRHlASPwQohkaYjME
G1uIr3tFCInZZK4Tn3FFGdvyY2R5PhN+5aCX2zkelj7kIo1OGKvz2XGoC/1KTwxw
BbeSIfr+YXl8SK2yCW1HDdt/ci2+AU6zYAct+Mtky1ott58tpTs/tRvW9/z/B3AK
RNmMVjASbDoeSAxVfBcZK5G1AwjLVfxNx7TD3CdwpwBJJMuPo6cJLPgYn4oMkXgQ
7Hgyu8eYkocae39KXhTtG05ZbT7fqUDDThGYM03dBQTbH6KiU3p7GPZZIEs9t3LZ
aMe3yfuRqZDxUrh0S+fa6D8SbpjXgtwtCHyTCyRegOcNgVkT4edYOUNXkxYdAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUeGzZN9tNEAkdOIF5IwZ+GIdHmCowHwYDVR0j
BBgwFoAUf1ztGX9+iAlEjNMWiFCprKujW80wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjEyYmY4NjMtYTFmMC00MmQwLTllM2EtM2Y5ZmY2OWEyZDE1LzAvN0Y1Q0VEMTk3
RjdFODgwOTQ0OENEMzE2ODg1MEE5QUNBQkEzNUJDRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC83RjVDRUQxOTdGN0U4ODA5NDQ4Q0QzMTY4ODUwQTlBQ0FCQTM1
QkNELmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2IxMmJmODYzLWExZjAtNDJkMC05
ZTNhLTNmOWZmNjlhMmQxNS8wLzMxMzUzNzJlMzYzNjJlMzIzNTMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzczNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnUL7MA0GCSqG
SIb3DQEBCwUAA4IBAQBQ6a9RGXZhmruzu7PIs1yaQYVchdi11kJ+hBZeU5Y0f4zQ
P0/D+iTKsaZ3pkXaS8ImGLoOZVJMRh3UjA5a8cKeXYeMxY53HZW0Cm7PKyoCg8b/
1WHNdb5ySm+JwUrdGFoKLM27Am+C/HqXdDpTpiwXqtLUmmF4LL5f/kbnQF+jXGAK
AFmoCaXJkaeZ+kTCqmMaYFEqUgChTnB7jnHyt4EtjopDVb32N1OihpO0QiWkE5rl
vIXHUm/oUocwarOATuOssPcMFZw8a9vCDDT+E1d2Xet1nVhccsxlovCsboaN5lok
1sc3s+4Bq7hSnMa6/2yph6VYRfs7k4T7tl0XRKig
-----END CERTIFICATE-----
Generated at Wed May 13 03:55:21 2026 by rpki-client