
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/3135372e31352e34322e302f32332d3234203d3e20313532333635.roa
File: 3135372e31352e34322e302f32332d3234203d3e20313532333635.roa (raw, json)
Hash identifier: UAqu6KyWKv+F+VKwb+aoEkxaz1wPo1XXzxeV01CTrgA=
Subject key identifier: 1D:FC:D0:48:71:E3:22:60:88:4A:01:CE:14:D0:A6:BE:2C:C2:16:F2
Certificate issuer: /CN=EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E
Certificate serial: 2A923F25B78441450F7EB0FDD6DEA3EE16D8FD41
Authority key identifier: EE:FF:02:42:4D:8D:55:9C:41:36:A2:96:EB:DB:CF:6E:1A:6B:8D:0E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/3135372e31352e34322e302f32332d3234203d3e20313532333635.roa
Signing time: Sun 03 May 2026 03:13:51 +0000
ROA not before: Sun 03 May 2026 03:08:51 +0000
ROA not after: Sun 02 May 2027 03:13:51 +0000
asID: 152365
IP address blocks: 157.15.42.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.crl
rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:28:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:92:3f:25:b7:84:41:45:0f:7e:b0:fd:d6:de:a3:ee:16:d8:fd:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E
Validity
Not Before: May 3 03:08:51 2026 GMT
Not After : May 2 03:13:51 2027 GMT
Subject: CN=1DFCD04871E32260884A01CE14D0A6BE2CC216F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6b:fd:c1:c5:b9:3f:6e:1c:c5:a2:78:35:b5:
75:82:ca:12:03:6c:80:f8:05:1f:59:54:9b:fa:3f:
de:08:51:90:af:e3:38:25:a6:90:3c:97:06:9b:89:
6d:f3:23:a4:47:6f:fd:9d:34:83:b1:0a:3b:63:3e:
f9:9a:1a:ba:4d:08:38:73:f8:b5:83:87:c8:82:e9:
58:a9:9c:0d:5f:db:a6:6a:eb:b4:0d:c8:b7:b3:96:
f1:d8:a3:21:bb:30:f2:c3:52:e3:16:1f:c5:c4:f0:
2f:b8:14:9f:82:89:5c:b5:fc:a1:f6:40:10:b2:30:
eb:ac:38:5c:e7:b1:f2:3c:b3:4c:da:66:77:65:13:
9c:d0:f0:98:e8:31:f2:98:7c:79:d4:22:b1:68:dc:
3b:af:d4:92:de:e9:b5:47:8d:2a:06:6e:51:65:b6:
df:7f:30:16:0d:41:1b:56:6e:a3:87:d8:f4:0d:86:
8b:fa:00:69:3e:82:9e:8b:af:3d:a1:89:00:45:0d:
21:9f:5c:2a:c3:68:2b:70:9a:aa:ea:24:88:5c:0d:
51:f8:09:46:6e:48:1c:3b:fc:e4:15:04:07:00:fd:
37:41:10:5c:69:e9:c7:25:0f:63:35:c8:e7:e9:c5:
b8:d7:2b:e9:6e:62:a6:76:c6:ed:99:78:60:ea:3e:
77:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FC:D0:48:71:E3:22:60:88:4A:01:CE:14:D0:A6:BE:2C:C2:16:F2
X509v3 Authority Key Identifier:
keyid:EE:FF:02:42:4D:8D:55:9C:41:36:A2:96:EB:DB:CF:6E:1A:6B:8D:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/3135372e31352e34322e302f32332d3234203d3e20313532333635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.15.42.0/23
Signature Algorithm: sha256WithRSAEncryption
93:ad:06:09:c4:f6:14:95:79:02:eb:55:f3:77:75:f6:3a:4f:
10:68:55:83:e4:a7:b1:ed:d0:5f:ba:44:32:72:df:5c:fc:79:
f1:f2:30:8c:8d:53:30:69:fd:65:04:fb:ee:87:a1:e1:c5:a7:
7b:ef:85:9f:7a:f9:9d:55:5a:5a:b9:6e:c5:ca:f2:9a:80:57:
b6:64:93:bd:af:74:83:34:b3:18:fb:ac:4e:b8:76:42:12:3c:
3c:f1:7c:f4:f0:e6:e2:8d:ea:1f:60:a7:8c:62:d9:cb:62:6c:
77:25:b9:35:a9:fe:67:7c:e9:d3:62:a5:fe:83:15:75:a6:4e:
0c:f8:cf:e3:15:5f:9e:1f:cb:a5:28:61:70:25:6b:12:8f:e2:
3a:d4:17:1f:aa:4a:d0:74:eb:2e:c1:c2:1e:e3:05:d2:87:cf:
9f:4c:bb:4b:05:b9:7c:28:6d:0d:60:03:d1:36:f8:ac:c3:7c:
bb:b5:4f:51:a9:93:87:5a:a9:3d:7b:f7:f9:72:86:6c:08:2c:
69:ff:8b:06:59:82:cf:07:ff:6d:69:c4:24:89:a4:ee:c0:81:
8e:24:1d:16:97:f6:be:b0:47:33:18:2d:d9:f5:79:cd:27:2b:
9b:49:30:0a:e0:b3:27:03:0d:e5:36:56:49:f8:ec:86:68:01:
d2:10:fa:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:14:32 2026 by rpki-client