
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/3135372e36362e3233392e302f32342d3234203d3e20313532373538.roa
File: 3135372e36362e3233392e302f32342d3234203d3e20313532373538.roa (raw, json)
Hash identifier: tmjFjqEkGuahidtuLOdd3vjYKqdvzowGWZPOwb/+IMI=
Subject key identifier: 04:B2:16:14:35:C4:2D:2B:FA:B0:9A:BA:83:B5:E1:FA:67:2A:2A:F1
Certificate issuer: /CN=08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB
Certificate serial: 2BDC26FAB84BD755938F8EA9F83F8BF476FF2712
Authority key identifier: 08:15:1F:D6:2F:A1:8C:9E:C2:F5:B9:DB:5D:4A:03:11:DF:50:90:BB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/3135372e36362e3233392e302f32342d3234203d3e20313532373538.roa
Signing time: Sun 03 May 2026 03:10:17 +0000
ROA not before: Sun 03 May 2026 03:05:17 +0000
ROA not after: Sun 02 May 2027 03:10:17 +0000
asID: 152758
IP address blocks: 157.66.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.crl
rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:24:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:dc:26:fa:b8:4b:d7:55:93:8f:8e:a9:f8:3f:8b:f4:76:ff:27:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB
Validity
Not Before: May 3 03:05:17 2026 GMT
Not After : May 2 03:10:17 2027 GMT
Subject: CN=04B2161435C42D2BFAB09ABA83B5E1FA672A2AF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0f:6f:13:a5:bc:91:41:ae:6c:e4:12:76:34:
ca:48:86:56:5b:b6:88:02:48:f6:ac:24:3d:9d:bf:
21:0d:0a:6b:fb:24:04:74:1f:06:22:8a:5f:6b:83:
01:7b:e4:06:9e:cf:45:e6:7c:89:5f:d7:30:6a:e4:
c4:ec:29:fc:95:ca:4b:49:aa:48:2a:46:d3:6f:1c:
4b:75:85:17:0a:77:53:1c:69:d7:86:c2:5b:e8:8b:
cc:d5:2e:e2:4f:9e:6b:5d:63:b6:92:7c:28:0d:2a:
5e:12:2d:56:6c:9d:03:e5:98:9b:1f:0f:72:71:c8:
58:cd:0f:38:b8:a7:79:68:be:f3:01:9c:6a:69:9b:
c7:84:c7:fe:da:a0:b2:57:35:6a:ac:d6:fa:7a:5c:
c0:07:2f:73:38:a5:4a:cd:48:70:19:45:54:09:48:
7a:bb:c7:84:9f:51:9f:e9:fd:72:44:d4:9b:63:38:
f2:e8:2f:a0:aa:ef:f2:c0:5f:05:6b:42:7e:32:f0:
49:63:06:4c:43:a3:6b:eb:7b:06:4c:65:f3:31:05:
11:fb:7c:87:7d:59:f5:f0:f7:a5:f8:b2:c8:60:1a:
25:26:18:d1:82:57:f3:08:97:f0:d3:7e:87:8f:c4:
83:58:3e:d7:93:39:99:22:f7:e5:8b:aa:ed:a6:67:
b9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B2:16:14:35:C4:2D:2B:FA:B0:9A:BA:83:B5:E1:FA:67:2A:2A:F1
X509v3 Authority Key Identifier:
keyid:08:15:1F:D6:2F:A1:8C:9E:C2:F5:B9:DB:5D:4A:03:11:DF:50:90:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/08151FD62FA18C9EC2F5B9DB5D4A0311DF5090BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/0/3135372e36362e3233392e302f32342d3234203d3e20313532373538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.239.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:cd:7c:a6:1d:c4:2a:04:46:7b:b6:5b:92:76:7c:da:4a:6b:
46:9e:d2:9d:88:1f:e7:fe:dd:ed:4d:a5:88:5d:e0:45:e6:5b:
a3:e1:21:3e:aa:3e:62:63:a2:76:82:f7:47:6a:81:c0:3e:be:
81:c6:10:6f:1c:a0:c9:88:a1:27:61:5d:b9:c7:fc:2a:63:8c:
98:10:b5:fd:69:80:43:b4:80:57:72:a2:10:7a:68:36:5b:87:
8f:fd:7f:52:81:0f:b9:05:a2:c2:07:a6:83:91:6b:50:bf:e9:
40:56:86:a1:ca:c5:95:55:9b:59:c5:14:e8:e6:f3:f3:cb:60:
f9:7b:ac:a2:ee:80:65:9a:47:e7:9b:3f:80:fd:77:ee:e3:75:
08:1d:78:9a:56:f5:58:86:ea:a9:01:bc:45:59:2c:90:6e:c2:
ea:ad:72:2b:53:9d:27:96:94:f9:8e:ba:35:fc:2c:5a:e1:04:
b5:0d:6c:6f:f0:55:fd:18:e2:9e:83:d2:96:8b:2b:78:dc:e4:
c9:33:16:24:8c:8c:cc:8c:fa:1d:9d:75:be:91:fa:8b:69:49:
66:31:5d:25:78:38:50:17:af:00:9f:82:c3:e8:d9:ff:be:29:
34:49:3b:6f:ae:4d:7d:f5:2c:f0:de:13:66:80:98:fb:72:ec:
f3:b3:c3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:08 2026 by rpki-client