
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3135372e36362e3134312e302f32342d3234203d3e20313532373539.roa
File: 3135372e36362e3134312e302f32342d3234203d3e20313532373539.roa (raw, json)
Hash identifier: C4nE65Bmt4vsoADCvXJtdLeHcH0r1PmaQ5qo7rMWJUM=
Subject key identifier: 93:CE:45:26:6F:59:FC:06:D1:84:B6:84:CF:EF:EA:38:AE:33:50:67
Certificate issuer: /CN=3722F57F36FC6DF64F0F6638C89CF2B35E53A611
Certificate serial: 691B7306238E42193DD379A853413D4B89EE4341
Authority key identifier: 37:22:F5:7F:36:FC:6D:F6:4F:0F:66:38:C8:9C:F2:B3:5E:53:A6:11
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3135372e36362e3134312e302f32342d3234203d3e20313532373539.roa
Signing time: Sun 03 May 2026 03:11:15 +0000
ROA not before: Sun 03 May 2026 03:06:15 +0000
ROA not after: Sun 02 May 2027 03:11:15 +0000
asID: 152759
IP address blocks: 157.66.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.crl
rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:1b:73:06:23:8e:42:19:3d:d3:79:a8:53:41:3d:4b:89:ee:43:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722F57F36FC6DF64F0F6638C89CF2B35E53A611
Validity
Not Before: May 3 03:06:15 2026 GMT
Not After : May 2 03:11:15 2027 GMT
Subject: CN=93CE45266F59FC06D184B684CFEFEA38AE335067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:13:bd:9b:60:8f:de:ca:62:c0:a0:09:3c:4e:
61:f0:5a:d7:96:70:72:76:49:b4:c2:34:67:98:5e:
b5:f9:c3:22:cb:30:59:72:02:b6:68:54:ec:95:fa:
24:0a:eb:a5:2e:76:f0:1d:a9:70:d0:e8:9b:54:4e:
1d:80:74:a6:49:58:e6:b2:86:07:48:ba:1e:ca:43:
38:64:fa:ab:6d:61:6e:de:62:f5:f8:e9:ea:ac:0a:
d7:8e:fb:79:59:09:ba:64:3d:42:43:e7:08:21:7f:
3e:6d:fd:e7:7a:43:a4:b3:cf:7a:61:10:9f:31:94:
c2:45:d1:4d:6f:41:8a:b3:75:dc:47:10:a9:ee:4f:
ab:12:91:4a:5f:d0:cd:2d:d9:54:c9:b4:e4:50:3f:
cb:12:92:e2:82:f2:d2:b3:8f:a4:d9:5c:3e:97:1d:
54:64:47:9f:ff:a8:34:5b:28:84:68:c0:90:da:1a:
3c:d9:d5:33:dc:c3:54:62:b5:3e:35:de:36:de:97:
10:6f:ea:57:54:19:8a:e2:1a:ca:28:79:12:f5:8e:
80:10:a0:ae:0f:1b:1e:a6:94:73:f7:f1:2b:35:0e:
0e:63:1f:7d:82:37:28:98:41:98:b6:93:f0:51:5c:
0b:b4:db:9d:83:11:a9:0a:49:c3:01:eb:fe:75:26:
1a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CE:45:26:6F:59:FC:06:D1:84:B6:84:CF:EF:EA:38:AE:33:50:67
X509v3 Authority Key Identifier:
keyid:37:22:F5:7F:36:FC:6D:F6:4F:0F:66:38:C8:9C:F2:B3:5E:53:A6:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3722F57F36FC6DF64F0F6638C89CF2B35E53A611.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/3135372e36362e3134312e302f32342d3234203d3e20313532373539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.141.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:42:33:9b:a0:4d:11:86:38:6a:4a:70:ae:e9:42:07:1f:7e:
66:db:3a:6d:77:44:81:19:75:ea:1c:93:ab:b6:c0:90:7e:9e:
0f:b5:70:d9:a6:2c:cf:81:6c:4c:10:4b:0d:69:52:46:e9:82:
61:2d:7a:f5:9f:0a:fd:8e:4f:1f:a4:6f:d5:90:37:2f:ab:dd:
35:ee:8f:e0:36:3f:fd:8e:b4:ff:e2:04:bd:36:e2:64:b1:23:
09:29:05:69:62:bd:47:5f:e0:eb:40:65:0f:16:13:dc:56:44:
62:1c:1a:55:a8:59:6e:5a:96:59:7b:8b:d4:40:43:0f:68:b4:
51:c8:02:01:ae:28:9c:ef:e1:06:c3:f4:22:75:7f:10:7f:30:
05:ed:8d:64:d0:ea:43:1d:bb:7d:91:e2:5d:9f:db:9f:ff:4c:
d9:ba:32:3e:da:26:b1:6f:de:0a:e1:de:8f:be:08:af:84:ab:
1a:75:32:11:d1:8b:a2:3e:45:e8:6d:f4:bb:cb:68:e4:5d:73:
53:f1:54:cb:96:5e:3c:2d:01:b8:21:a3:b9:13:cc:d5:da:41:
cf:dc:27:04:a9:b5:7c:39:b5:26:ac:cb:e2:24:6c:32:2f:dd:
cb:e8:55:37:6f:7c:33:ee:c4:ea:eb:c0:ab:6f:2c:93:ab:cc:
01:e1:8a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:50:05 2026 by rpki-client