
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/3135372e31302e38392e302f32342d3234203d3e20313532303832.roa
File: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (raw, json)
Hash identifier: NoLVaaDOlsaGhgYap1uw6NFZLTQBT/IcZ3Ebg++K2jc=
Subject key identifier: 52:E3:67:DC:0A:90:78:31:41:FA:C1:3F:74:88:CE:36:25:F0:2A:85
Certificate issuer: /CN=62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79
Certificate serial: 4CED2E09F0CD19BD39D0C51C2FC4ABAF4AAADB8B
Authority key identifier: 62:CC:55:FF:7E:46:DD:8B:E3:BD:A9:CC:26:0F:D6:CB:5C:AE:7F:79
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/3135372e31302e38392e302f32342d3234203d3e20313532303832.roa
Signing time: Sun 03 May 2026 03:13:19 +0000
ROA not before: Sun 03 May 2026 03:08:19 +0000
ROA not after: Sun 02 May 2027 03:13:19 +0000
asID: 152082
IP address blocks: 157.10.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79.crl
rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:36:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:ed:2e:09:f0:cd:19:bd:39:d0:c5:1c:2f:c4:ab:af:4a:aa:db:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79
Validity
Not Before: May 3 03:08:19 2026 GMT
Not After : May 2 03:13:19 2027 GMT
Subject: CN=52E367DC0A90783141FAC13F7488CE3625F02A85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:11:a8:d4:05:cf:c6:66:8e:74:b4:11:f4:b9:
06:ae:69:16:ca:97:98:f7:f5:84:5c:e6:b0:1a:85:
8a:f5:6b:21:99:e0:e4:36:78:6a:17:ba:8f:d4:77:
70:c8:e8:d1:97:e3:ab:4e:b5:06:d6:1c:4f:59:bd:
f7:93:39:16:77:ef:32:cc:6e:69:5b:4f:66:f1:ca:
03:75:59:2d:57:6b:33:95:55:22:1b:9b:c8:43:53:
30:63:04:f0:58:d9:8a:c3:03:9f:23:ba:59:66:ff:
f2:19:16:e4:e1:f9:15:86:b2:1e:11:b7:5a:89:a8:
97:b9:30:43:e3:0b:9c:ea:99:5b:aa:01:4c:1f:c9:
64:62:d8:90:34:f7:4f:05:98:41:f4:96:6f:99:8e:
6d:3a:41:92:b6:0c:d7:96:ba:96:8b:df:43:07:e6:
0a:60:4d:ea:d3:6a:d4:e5:35:4b:81:81:30:6c:65:
2a:ec:21:f2:c2:c1:e3:d5:f6:e4:69:2e:92:c3:d5:
c0:ae:c5:fe:03:04:44:d7:c3:d1:80:57:dd:12:ca:
bc:ec:e9:c5:54:7c:ea:69:58:9d:61:6a:65:3d:9b:
35:f5:36:50:7f:8d:b6:65:95:c8:b4:03:65:fc:be:
29:61:90:73:ad:fc:fb:78:d7:8e:c8:fe:f2:fb:35:
17:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E3:67:DC:0A:90:78:31:41:FA:C1:3F:74:88:CE:36:25:F0:2A:85
X509v3 Authority Key Identifier:
keyid:62:CC:55:FF:7E:46:DD:8B:E3:BD:A9:CC:26:0F:D6:CB:5C:AE:7F:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/62CC55FF7E46DD8BE3BDA9CC260FD6CB5CAE7F79.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/3135372e31302e38392e302f32342d3234203d3e20313532303832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.10.89.0/24
Signature Algorithm: sha256WithRSAEncryption
12:3c:35:82:d6:7a:8d:76:96:88:98:f5:17:e3:77:2c:ab:2d:
de:f0:ab:08:64:3c:9d:3e:b5:0b:6c:34:16:4c:fe:01:03:88:
03:ac:12:d3:09:e3:0b:39:be:a5:e1:99:09:1b:ff:27:54:64:
58:70:eb:32:80:84:74:73:32:26:62:6c:55:c8:e9:80:a5:81:
9a:ed:20:34:92:ad:25:98:f1:f4:b9:2c:8a:82:42:b0:7c:9f:
fe:8a:3b:3c:6e:65:0f:3f:8e:bb:f6:a2:d6:97:7b:00:a6:80:
7b:de:c1:6e:8a:0f:7f:82:ec:f3:b4:f0:41:7c:50:e6:6e:d4:
8a:64:0a:93:6c:56:94:db:18:10:69:b7:80:42:cb:ad:9f:50:
be:5a:34:88:83:e6:e8:4a:93:6d:7c:bb:df:24:8a:b7:62:5e:
86:2c:1a:15:db:5f:6a:bc:63:df:8f:5f:29:51:ba:f5:f3:ad:
b6:aa:ce:d6:c6:bc:8b:c1:4f:21:22:55:19:c0:7b:76:08:53:
70:95:29:a9:e7:94:36:a1:d4:9c:55:cf:9a:1a:da:d2:3f:7f:
5d:81:0c:7b:7b:e0:f1:ea:1c:6f:fe:56:30:fc:c2:23:9c:0f:
37:c1:f1:30:af:cf:c4:3c:ff:eb:0d:a7:13:25:45:c1:a3:17:
80:56:32:ea
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUTO0uCfDNGb050MUcL8Srr0qq24swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJDQzU1RkY3RTQ2REQ4QkUzQkRBOUNDMjYwRkQ2Q0I1
Q0FFN0Y3OTAeFw0yNjA1MDMwMzA4MTlaFw0yNzA1MDIwMzEzMTlaMDMxMTAvBgNV
BAMTKDUyRTM2N0RDMEE5MDc4MzE0MUZBQzEzRjc0ODhDRTM2MjVGMDJBODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeEajUBc/GZo50tBH0uQauaRbK
l5j39YRc5rAahYr1ayGZ4OQ2eGoXuo/Ud3DI6NGX46tOtQbWHE9ZvfeTORZ37zLM
bmlbT2bxygN1WS1XazOVVSIbm8hDUzBjBPBY2YrDA58jullm//IZFuTh+RWGsh4R
t1qJqJe5MEPjC5zqmVuqAUwfyWRi2JA0908FmEH0lm+Zjm06QZK2DNeWupaL30MH
5gpgTerTatTlNUuBgTBsZSrsIfLCwePV9uRpLpLD1cCuxf4DBETXw9GAV90Syrzs
6cVUfOppWJ1hamU9mzX1NlB/jbZllci0A2X8vilhkHOt/Pt4147I/vL7NRd1AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUUuNn3AqQeDFB+sE/dIjONiXwKoUwHwYDVR0j
BBgwFoAUYsxV/35G3YvjvanMJg/Wy1yuf3kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTQ3Y2Q1YTItYTc0Mi00NTBjLWIxOTAtNTAwZTc1NDUyMGRlLzAvNjJDQzU1RkY3
RTQ2REQ4QkUzQkRBOUNDMjYwRkQ2Q0I1Q0FFN0Y3OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC82MkNDNTVGRjdFNDZERDhCRTNCREE5Q0MyNjBGRDZDQjVDQUU3
Rjc5LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U0N2NkNWEyLWE3NDItNDUwYy1i
MTkwLTUwMGU3NTQ1MjBkZS8wLzMxMzUzNzJlMzEzMDJlMzgzOTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMjMwMzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0KWTANBgkqhkiG
9w0BAQsFAAOCAQEAEjw1gtZ6jXaWiJj1F+N3LKst3vCrCGQ8nT61C2w0Fkz+AQOI
A6wS0wnjCzm+peGZCRv/J1RkWHDrMoCEdHMyJmJsVcjpgKWBmu0gNJKtJZjx9Lks
ioJCsHyf/oo7PG5lDz+Ou/ai1pd7AKaAe97BbooPf4Ls87TwQXxQ5m7UimQKk2xW
lNsYEGm3gELLrZ9Qvlo0iIPm6EqTbXy73ySKt2JehiwaFdtfarxj349fKVG69fOt
tqrO1sa8i8FPISJVGcB7dghTcJUpqeeUNqHUnFXPmhra0j9/XYEMe3vg8eocb/5W
MPzCI5wPN8HxMK/PxDz/6w2nEyVFwaMXgFYy6g==
-----END CERTIFICATE-----
Generated at Wed May 13 03:58:54 2026 by rpki-client