
$ rpki-client -vvf rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/3135372e31352e3131382e302f32342d3234203d3e20313532343031.roa
File: 3135372e31352e3131382e302f32342d3234203d3e20313532343031.roa (raw, json)
Hash identifier: E+hRgGJJ8C/Srz5/ghgOOJ3QwYrgYhMnvxLJoD14unU=
Subject key identifier: B6:EB:BE:43:85:D0:CF:51:2C:7C:E3:0D:5D:77:54:06:2E:39:00:5E
Certificate issuer: /CN=6F3883134BAEC7C100C8B2A4937D53DE9E639ACD
Certificate serial: 6E0691060B5CA5303325E6C4F440B06BA22A61BA
Authority key identifier: 6F:38:83:13:4B:AE:C7:C1:00:C8:B2:A4:93:7D:53:DE:9E:63:9A:CD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/3135372e31352e3131382e302f32342d3234203d3e20313532343031.roa
Signing time: Sun 03 May 2026 03:02:58 +0000
ROA not before: Sun 03 May 2026 02:57:58 +0000
ROA not after: Sun 02 May 2027 03:02:58 +0000
asID: 152401
IP address blocks: 157.15.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.crl
rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 16:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:06:91:06:0b:5c:a5:30:33:25:e6:c4:f4:40:b0:6b:a2:2a:61:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F3883134BAEC7C100C8B2A4937D53DE9E639ACD
Validity
Not Before: May 3 02:57:58 2026 GMT
Not After : May 2 03:02:58 2027 GMT
Subject: CN=B6EBBE4385D0CF512C7CE30D5D7754062E39005E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1a:eb:92:d4:e2:f6:5a:a9:a8:bd:92:2a:2c:
c5:6f:d8:97:d2:03:28:1b:37:b6:fd:c6:06:3d:d4:
37:86:5d:71:2b:aa:6f:70:04:0a:1b:92:73:de:32:
74:81:b6:de:20:55:2f:5e:4c:bb:08:b7:da:7a:9e:
4e:17:0f:24:45:bd:f6:05:67:7d:d6:7e:6d:c9:5d:
27:5f:f8:9e:b6:aa:b2:54:9d:da:ec:75:a8:f1:9d:
09:34:d9:99:08:93:44:b2:1b:fa:06:48:0f:85:eb:
03:8c:6f:7f:50:77:62:3b:27:39:27:9d:6e:bf:30:
7d:70:da:78:27:03:12:02:cb:59:6c:4e:bb:bb:fb:
9a:63:77:06:9b:22:89:04:23:0d:37:78:73:4f:60:
ce:50:11:b3:cc:44:46:65:f1:3f:05:16:a4:e9:ba:
6b:72:0b:1e:c0:97:cd:0c:ff:71:07:ea:54:c9:b2:
58:ee:9f:99:fa:33:71:68:c0:4a:6b:cb:6c:d4:34:
17:a6:07:50:1d:77:12:9b:56:2c:83:b6:c8:2a:3e:
89:d6:fa:8d:7d:da:8f:25:c6:49:b6:2d:40:bc:09:
23:f9:28:6d:a6:49:87:cf:8e:6e:33:55:c2:4f:72:
6f:ce:69:de:aa:b0:07:20:83:bd:15:f4:c0:b9:b8:
50:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EB:BE:43:85:D0:CF:51:2C:7C:E3:0D:5D:77:54:06:2E:39:00:5E
X509v3 Authority Key Identifier:
keyid:6F:38:83:13:4B:AE:C7:C1:00:C8:B2:A4:93:7D:53:DE:9E:63:9A:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6F3883134BAEC7C100C8B2A4937D53DE9E639ACD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/3135372e31352e3131382e302f32342d3234203d3e20313532343031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.15.118.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:df:f2:59:7d:ff:d3:2d:9f:4c:88:76:60:de:3a:c7:3e:dc:
da:1f:0e:c1:5a:f0:4e:74:71:33:a5:26:62:58:2b:51:10:cf:
b3:7b:4b:fe:d3:d7:77:19:f9:73:47:44:ae:c6:02:63:b6:4e:
3d:c9:0d:0b:76:da:d2:e1:23:26:22:a5:57:97:d3:79:81:98:
12:fd:59:fa:a5:53:fc:d7:a0:00:f7:95:93:b8:89:4b:d7:54:
e8:23:1b:68:3b:06:4f:64:d7:ee:13:bd:5c:f6:7c:02:6b:40:
2a:81:4b:31:4e:28:0b:b2:35:32:cd:8c:82:50:85:1d:57:1e:
9a:7c:28:ee:b7:c6:0e:52:63:c3:36:aa:e1:83:f8:20:fb:58:
33:b7:7f:0c:74:1a:38:44:2c:6e:6f:2c:14:22:cc:30:dc:d0:
e3:bf:e5:0d:89:7e:3e:eb:44:bd:93:ea:e9:ec:95:26:98:ae:
67:e6:1a:84:6a:f0:04:d3:b9:ad:92:2b:95:0c:29:e0:bc:9e:
6d:dc:1e:ea:a2:33:46:84:bb:e3:22:d1:1e:84:ee:f5:de:b0:
a1:6e:3f:8f:24:1f:71:98:8f:02:a3:de:50:1c:50:d1:51:8a:
7e:0d:e5:71:6f:7c:74:92:c7:fd:ff:01:f6:98:c1:d9:3f:12:
b0:2c:0a:ae
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUbgaRBgtcpTAzJebE9ECwa6IqYbowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkYzODgzMTM0QkFFQzdDMTAwQzhCMkE0OTM3RDUzREU5
RTYzOUFDRDAeFw0yNjA1MDMwMjU3NThaFw0yNzA1MDIwMzAyNThaMDMxMTAvBgNV
BAMTKEI2RUJCRTQzODVEMENGNTEyQzdDRTMwRDVENzc1NDA2MkUzOTAwNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7GuuS1OL2WqmovZIqLMVv2JfS
AygbN7b9xgY91DeGXXErqm9wBAobknPeMnSBtt4gVS9eTLsIt9p6nk4XDyRFvfYF
Z33Wfm3JXSdf+J62qrJUndrsdajxnQk02ZkIk0SyG/oGSA+F6wOMb39Qd2I7Jzkn
nW6/MH1w2ngnAxICy1lsTru7+5pjdwabIokEIw03eHNPYM5QEbPMREZl8T8FFqTp
umtyCx7Al80M/3EH6lTJsljun5n6M3FowEpry2zUNBemB1AddxKbViyDtsgqPonW
+o192o8lxkm2LUC8CSP5KG2mSYfPjm4zVcJPcm/Oad6qsAcgg70V9MC5uFABAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUtuu+Q4XQz1EsfOMNXXdUBi45AF4wHwYDVR0j
BBgwFoAUbziDE0uux8EAyLKkk31T3p5jms0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YmVkNzM2ZGMtZTVkYi00MzgxLTk3MWYtNjI0MzY3NDE4NTRiLzAvNkYzODgzMTM0
QkFFQzdDMTAwQzhCMkE0OTM3RDUzREU5RTYzOUFDRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC82RjM4ODMxMzRCQUVDN0MxMDBDOEIyQTQ5MzdENTNERTlFNjM5
QUNELmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2JlZDczNmRjLWU1ZGItNDM4MS05
NzFmLTYyNDM2NzQxODU0Yi8wLzMxMzUzNzJlMzEzNTJlMzEzMTM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzQzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQ92MA0GCSqG
SIb3DQEBCwUAA4IBAQBa3/JZff/TLZ9MiHZg3jrHPtzaHw7BWvBOdHEzpSZiWCtR
EM+ze0v+09d3GflzR0SuxgJjtk49yQ0LdtrS4SMmIqVXl9N5gZgS/Vn6pVP816AA
95WTuIlL11ToIxtoOwZPZNfuE71c9nwCa0AqgUsxTigLsjUyzYyCUIUdVx6afCju
t8YOUmPDNqrhg/gg+1gzt38MdBo4RCxubywUIsww3NDjv+UNiX4+60S9k+rp7JUm
mK5n5hqEavAE07mtkiuVDCngvJ5t3B7qojNGhLvjItEehO713rChbj+PJB9xmI8C
o95QHFDRUYp+DeVxb3x0ksf9/wH2mMHZPxKwLAqu
-----END CERTIFICATE-----
Generated at Wed May 13 04:48:22 2026 by rpki-client