
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3135302e3130372e3131302e302f32342d3234203d3e203138303539.roa
File: 3135302e3130372e3131302e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier: ZTERNrEsbV80dDwK10sWFEmeJQ8HlTFr+MKU+H7T3+0=
Subject key identifier: AB:C6:FB:53:7A:95:D2:72:A8:D2:01:8C:03:EA:C5:8B:CE:D9:C4:2F
Certificate issuer: /CN=67239F5E47D123019D26807163E6542441401507
Certificate serial: 2BEDE389DFBE6D8F9B9AB0F7E0077841F53BB41C
Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3135302e3130372e3131302e302f32342d3234203d3e203138303539.roa
Signing time: Sun 03 May 2026 03:03:49 +0000
ROA not before: Sun 03 May 2026 02:58:49 +0000
ROA not after: Sun 02 May 2027 03:03:49 +0000
asID: 18059
IP address blocks: 150.107.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:10:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:ed:e3:89:df:be:6d:8f:9b:9a:b0:f7:e0:07:78:41:f5:3b:b4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67239F5E47D123019D26807163E6542441401507
Validity
Not Before: May 3 02:58:49 2026 GMT
Not After : May 2 03:03:49 2027 GMT
Subject: CN=ABC6FB537A95D272A8D2018C03EAC58BCED9C42F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d0:4b:06:d7:6c:b3:66:ef:a9:61:9c:3c:1f:
7b:73:15:fe:a3:4b:6f:cd:ad:ac:92:1f:ed:b2:95:
31:94:d0:55:b2:73:79:7e:a4:03:04:fd:45:96:ae:
c8:e8:46:9a:27:95:ad:a9:2e:99:17:19:2f:a8:4d:
08:2f:6e:8b:fc:70:b6:20:e9:28:a4:02:d8:55:22:
4f:43:99:ee:6a:42:d6:b0:0d:ac:30:52:3a:8f:89:
02:63:31:7a:b1:a6:95:11:55:fe:9f:ab:27:51:ba:
a5:c2:5b:1f:c9:ac:98:65:e7:7d:c6:fd:ad:2a:71:
41:62:0c:dd:3b:e4:b6:59:84:a3:41:17:d0:58:d9:
d6:ab:2a:c1:80:1f:e9:ae:b2:fb:38:24:17:d6:79:
b1:ac:c6:78:5d:a9:31:67:15:f2:14:5c:a8:23:b1:
92:3f:e6:93:d9:5b:15:60:5c:19:bb:5d:17:70:6c:
45:34:95:64:68:f7:b1:b8:1f:75:0a:d2:99:77:ac:
0f:8f:30:1b:3f:42:fa:c9:e8:c6:a1:6a:82:1a:c9:
87:a6:e6:83:67:e5:58:b5:2e:fe:0b:be:ce:79:ef:
64:24:a3:fd:64:89:d6:f1:c9:19:a5:1c:99:4e:6b:
cf:ac:4c:8b:4c:57:b5:a6:e7:25:c7:b0:79:c1:1f:
7e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C6:FB:53:7A:95:D2:72:A8:D2:01:8C:03:EA:C5:8B:CE:D9:C4:2F
X509v3 Authority Key Identifier:
keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3135302e3130372e3131302e302f32342d3234203d3e203138303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.107.110.0/24
Signature Algorithm: sha256WithRSAEncryption
51:4c:e4:43:b6:1d:04:7d:c7:a1:3b:c5:9a:50:0c:19:4d:4d:
5a:cc:81:89:e0:74:b6:83:fc:80:79:d7:7d:43:30:f4:fa:a4:
da:d7:a8:76:92:62:48:02:d7:94:19:84:26:46:5e:6a:40:dc:
dd:40:d0:3c:bc:3a:fe:ee:ff:35:c2:89:b8:1a:5d:14:8c:c9:
78:e2:67:e7:7d:86:7d:51:8a:ca:2a:70:e7:71:7a:df:0c:7e:
f1:ed:d2:7c:e5:02:1a:e2:0d:8c:80:00:f4:28:b9:c8:65:d0:
34:96:39:f5:78:7c:69:d7:d4:ae:1b:82:a7:b2:2d:97:5a:a1:
8f:eb:9b:85:dc:f5:bb:d4:39:06:6b:e2:fa:13:75:ea:41:d8:
5d:0c:ed:0a:57:4b:d8:94:2d:a7:b4:50:4d:3c:1f:e6:2c:04:
a7:3b:cb:4c:c3:fd:58:58:01:0f:e3:cd:61:57:1e:0c:2e:49:
c2:11:67:77:4d:df:ec:b4:57:f2:b8:37:c1:cb:8d:f7:68:02:
27:8b:c7:d5:1c:89:e3:4d:35:99:69:4b:4b:5b:2d:16:83:03:
73:21:a9:45:95:87:9f:3b:18:76:73:9f:e1:91:ba:3a:cf:b2:
c7:92:20:a9:04:7e:b7:ac:91:31:1b:47:f8:9b:f6:fc:0d:78:
4c:03:d0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:59:41 2026 by rpki-client