
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3135302e3132392e3138382e302f32342d3234203d3e203338313439.roa
File: 3135302e3132392e3138382e302f32342d3234203d3e203338313439.roa (raw, json)
Hash identifier: w/PsVCApcUAa6104ArDi8nWFzKFMWrenwPIw7wDcwKQ=
Subject key identifier: CC:CB:F1:B2:EA:35:BF:3F:46:33:67:0B:78:3B:2B:F0:E4:09:21:5B
Certificate issuer: /CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4
Certificate serial: 2D1C7320C415DCA652FC3FE1630C4917A8609EFB
Authority key identifier: 9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3135302e3132392e3138382e302f32342d3234203d3e203338313439.roa
Signing time: Sun 03 May 2026 03:10:32 +0000
ROA not before: Sun 03 May 2026 03:05:32 +0000
ROA not after: Sun 02 May 2027 03:10:32 +0000
asID: 38149
IP address blocks: 150.129.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl
rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:12:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:1c:73:20:c4:15:dc:a6:52:fc:3f:e1:63:0c:49:17:a8:60:9e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4
Validity
Not Before: May 3 03:05:32 2026 GMT
Not After : May 2 03:10:32 2027 GMT
Subject: CN=CCCBF1B2EA35BF3F4633670B783B2BF0E409215B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:43:69:d1:c1:7b:fb:58:cd:5b:eb:b2:6e:41:
ac:84:73:7b:df:2c:34:8d:bc:a4:70:50:4e:d8:5a:
15:da:17:04:72:2f:9c:44:5f:e8:4b:d6:65:86:48:
6d:5a:3c:12:aa:da:49:85:69:69:fb:5b:aa:f3:66:
9f:dd:37:65:74:7d:60:32:8d:c0:b4:85:e9:1a:4f:
7a:a3:e9:51:1f:5b:ac:92:30:37:b6:e7:f6:93:b9:
5b:93:35:4a:4a:63:97:94:92:13:46:c9:1c:9a:b9:
6d:6c:16:f2:0a:53:9f:f4:72:91:16:68:25:3e:a1:
4e:88:e6:d1:39:8b:a8:e8:34:82:a1:8f:07:96:7c:
96:2c:4a:d1:bd:5f:30:54:8e:dc:da:78:41:0e:23:
c4:78:d5:c4:e0:ab:18:e8:58:4e:af:67:f8:16:86:
52:52:12:ac:a9:3a:58:d6:7a:e1:2e:55:85:55:e6:
4c:1f:47:e0:04:17:7a:8c:b8:6d:43:59:fd:05:5b:
f6:24:d2:36:6e:f7:99:40:b8:37:a4:c3:d2:11:3f:
9a:84:71:e1:6a:1e:06:ea:90:96:3e:69:45:21:e8:
78:0e:df:eb:89:76:46:a0:27:64:64:35:42:9e:89:
e7:c4:05:e1:f6:6f:5e:a0:fd:1b:56:8e:09:a9:47:
bf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CB:F1:B2:EA:35:BF:3F:46:33:67:0B:78:3B:2B:F0:E4:09:21:5B
X509v3 Authority Key Identifier:
keyid:9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3135302e3132392e3138382e302f32342d3234203d3e203338313439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.129.188.0/24
Signature Algorithm: sha256WithRSAEncryption
61:0d:fa:45:e5:51:bd:34:01:06:02:a6:54:a8:76:ee:c8:64:
1d:75:94:cb:19:10:5f:bb:6f:5b:1e:7d:29:9e:4c:1e:4c:c7:
e6:c8:5f:8c:18:19:53:aa:ac:d7:ab:97:3c:71:38:11:63:b7:
b7:38:19:16:62:d4:88:0d:b5:c4:e8:41:df:f2:67:7a:ab:6a:
a7:5b:6e:7e:53:fb:40:a3:88:fa:42:69:6d:b7:69:6c:c8:97:
67:d5:40:7e:0f:fc:c1:5e:7b:71:7d:30:a3:f7:54:a0:b9:3c:
15:91:80:81:22:44:8f:38:92:5e:31:ab:0f:6b:3b:32:67:92:
4d:0e:e7:de:91:e7:88:43:1c:73:58:1f:bb:c9:24:75:9d:36:
0d:dd:c7:54:9a:50:a2:d0:1f:53:5f:fa:ef:79:b9:f0:e2:a9:
e2:be:08:5d:3d:db:c3:29:a5:20:51:7b:bc:d8:1e:52:61:a4:
ad:35:12:b5:2c:cd:6e:1f:fa:31:59:4c:7d:4b:d3:b2:e3:bc:
63:7a:3d:a3:62:fb:bf:d6:5e:49:f4:c3:4b:a9:16:8f:b9:f1:
53:7c:be:e9:91:6d:52:bb:c9:f8:37:d3:29:a6:77:ba:cc:c9:
7f:68:ad:34:d8:1d:15:34:30:77:ab:9c:d6:27:41:e0:89:e8:
92:f7:f4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:26:08 2026 by rpki-client