
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/3135372e36362e342e302f32342d3234203d3e20313336383633.roa
File: 3135372e36362e342e302f32342d3234203d3e20313336383633.roa (raw, json)
Hash identifier: bN4+AtALc/9iyjNGa+tTVjtSTWUiYCkfUiJRmkaULIU=
Subject key identifier: B3:69:0F:6B:DE:6D:4E:A4:14:CA:08:6C:EC:A1:D3:3B:2B:AB:BA:B5
Certificate issuer: /CN=6788613027532DE8F60D043DF88AC63BAB03BBF8
Certificate serial: 09CB0B9E2C16BC92EBE2F0F1F6FB0D437B700CB3
Authority key identifier: 67:88:61:30:27:53:2D:E8:F6:0D:04:3D:F8:8A:C6:3B:AB:03:BB:F8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6788613027532DE8F60D043DF88AC63BAB03BBF8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/3135372e36362e342e302f32342d3234203d3e20313336383633.roa
Signing time: Sun 03 May 2026 03:00:35 +0000
ROA not before: Sun 03 May 2026 02:55:35 +0000
ROA not after: Sun 02 May 2027 03:00:35 +0000
asID: 136863
IP address blocks: 157.66.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/6788613027532DE8F60D043DF88AC63BAB03BBF8.crl
rsync://rpki-rsync.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/6788613027532DE8F60D043DF88AC63BAB03BBF8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6788613027532DE8F60D043DF88AC63BAB03BBF8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:cb:0b:9e:2c:16:bc:92:eb:e2:f0:f1:f6:fb:0d:43:7b:70:0c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6788613027532DE8F60D043DF88AC63BAB03BBF8
Validity
Not Before: May 3 02:55:35 2026 GMT
Not After : May 2 03:00:35 2027 GMT
Subject: CN=B3690F6BDE6D4EA414CA086CECA1D33B2BABBAB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:28:fb:42:16:f5:b4:57:43:3a:3e:f6:da:fe:
57:ce:e5:4d:f6:15:a6:f1:c5:7d:7e:90:6d:69:e8:
69:91:a0:c8:c4:c6:36:96:b4:95:cd:23:47:c2:bc:
eb:d6:f3:4f:54:1d:14:ee:27:cd:b1:b4:a2:e8:61:
a6:02:3e:ca:39:1f:97:ba:f4:37:3b:55:b8:dd:32:
a5:f0:ab:cf:9e:02:b4:d5:0b:3e:64:bd:ec:ba:55:
55:f0:21:46:57:2d:ca:1b:62:94:41:c2:c1:14:33:
71:4f:5d:4a:b6:ab:39:9f:45:1c:ce:c7:e5:fd:38:
e1:51:00:c6:48:e9:44:52:cb:04:f1:8e:c2:eb:a4:
b0:71:98:5b:1e:b8:03:19:65:ba:d4:f0:11:dc:d0:
79:43:20:35:14:22:69:02:e6:46:b8:6e:b3:ee:68:
bf:b7:c1:9a:40:ca:9d:1e:8a:6d:a7:5b:78:64:ec:
71:cf:5a:0f:f7:8d:fe:d6:66:4a:6f:4a:99:75:27:
b0:d1:32:b4:fb:c0:d6:f1:fa:62:20:04:cb:52:79:
91:91:e8:83:85:ee:09:71:42:c9:e2:ef:fb:cd:ad:
75:f7:05:d8:95:60:a4:ee:d9:f9:ae:d8:12:44:2d:
c2:51:23:88:99:08:e4:26:e3:e3:f5:a7:f0:2a:9f:
92:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:69:0F:6B:DE:6D:4E:A4:14:CA:08:6C:EC:A1:D3:3B:2B:AB:BA:B5
X509v3 Authority Key Identifier:
keyid:67:88:61:30:27:53:2D:E8:F6:0D:04:3D:F8:8A:C6:3B:AB:03:BB:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/6788613027532DE8F60D043DF88AC63BAB03BBF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6788613027532DE8F60D043DF88AC63BAB03BBF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b264bfb2-d41d-4317-b92d-bb9441fd0dcf/0/3135372e36362e342e302f32342d3234203d3e20313336383633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.4.0/24
Signature Algorithm: sha256WithRSAEncryption
61:f3:14:bb:9d:ed:7d:9a:21:5d:01:81:4b:51:8e:14:e8:23:
cd:34:55:f1:49:fa:7f:0b:88:93:99:f1:d4:53:5c:a5:c5:a6:
14:88:e9:f8:8a:39:04:aa:1c:1e:04:4f:8e:ed:75:92:64:b4:
90:08:07:d8:3f:e8:79:20:71:1d:f5:22:02:95:b7:ac:94:fc:
fc:a7:8f:21:3a:b8:9d:8b:dc:20:62:e2:97:c5:cf:95:ec:aa:
4d:d5:fc:0e:ab:1b:95:cc:66:d5:5f:10:cb:fb:b0:df:79:b0:
e1:65:ca:db:27:ee:6c:eb:4d:81:3d:fe:ef:f7:d1:52:a4:d0:
d4:e3:4c:de:87:e2:0b:d4:dd:82:55:d9:c9:92:f1:4c:d6:cc:
e2:ae:78:f3:57:b4:22:ca:d8:84:7f:3c:9a:49:65:ab:5b:de:
d4:c0:55:b5:fd:1a:4c:7c:be:d2:c5:70:92:37:b7:dc:43:f1:
91:35:c5:3d:fd:00:3e:e3:4b:33:87:fd:b7:51:9c:55:5e:bf:
ed:81:52:12:9b:5c:53:3b:3c:65:7d:f6:96:a5:6a:34:68:ac:
cb:9e:03:f5:6b:d1:a3:48:33:34:32:27:05:08:63:0d:1d:56:
ef:44:6e:1e:40:03:04:55:ca:55:cd:89:ae:b9:ae:5d:9b:ed:
7c:e4:5e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:21:27 2026 by rpki-client