
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/3135372e31352e34322e302f32342d3234203d3e20313532333635.roa
File: 3135372e31352e34322e302f32342d3234203d3e20313532333635.roa (raw, json)
Hash identifier: UkjYiLhxh0IWQ4FGEGIczENrBNKbcYu0qHwPzgbhKDA=
Subject key identifier: 09:04:1D:2E:3D:66:76:A6:A0:F6:73:8B:95:13:C6:76:47:EC:67:83
Certificate issuer: /CN=EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E
Certificate serial: 6C31E0A7C9814BC03DE161BD9189C7404E38F39B
Authority key identifier: EE:FF:02:42:4D:8D:55:9C:41:36:A2:96:EB:DB:CF:6E:1A:6B:8D:0E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/3135372e31352e34322e302f32342d3234203d3e20313532333635.roa
Signing time: Sun 03 May 2026 03:13:51 +0000
ROA not before: Sun 03 May 2026 03:08:51 +0000
ROA not after: Sun 02 May 2027 03:13:51 +0000
asID: 152365
IP address blocks: 157.15.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.crl
rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:09:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:31:e0:a7:c9:81:4b:c0:3d:e1:61:bd:91:89:c7:40:4e:38:f3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E
Validity
Not Before: May 3 03:08:51 2026 GMT
Not After : May 2 03:13:51 2027 GMT
Subject: CN=09041D2E3D6676A6A0F6738B9513C67647EC6783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:9e:b3:43:4e:11:e8:b0:1c:96:b0:b0:f1:1b:
af:6a:f8:9e:f8:36:e8:d7:f0:78:f8:2e:63:71:e0:
e0:52:7c:71:16:3c:0e:7a:fa:17:ad:28:21:46:ea:
e5:0d:35:02:14:21:7b:70:66:01:c9:42:a2:05:39:
fd:c1:1c:00:3b:67:18:ba:bf:14:dd:fd:e9:65:87:
67:b2:e3:a0:13:4f:92:1e:1c:74:e0:7d:c0:87:3d:
b1:f2:3f:4c:d0:6b:40:1b:f2:48:03:6d:5e:ea:b8:
c3:46:da:6e:a0:6b:82:b2:54:c6:48:5a:25:ab:4c:
ff:0e:e2:42:1c:85:d5:0f:5d:04:5c:01:96:f5:4d:
1f:5b:67:cb:01:51:c9:ac:78:48:00:be:99:aa:8d:
3b:14:ae:4c:68:8a:e5:50:04:62:11:f1:bc:1d:8b:
f8:49:40:6b:32:c7:18:b7:2a:ec:c8:bd:f5:2f:d1:
97:89:c3:fa:86:3d:10:d0:c9:c9:c7:59:ee:d3:d0:
0e:ab:7d:89:27:29:21:91:c1:d9:9a:d0:ec:29:47:
d0:00:64:da:fa:ae:71:f0:d6:99:61:82:1c:96:96:
f3:d7:14:3f:ce:af:d3:b5:09:02:33:56:4b:1d:5a:
0d:53:ed:42:ce:f6:0d:de:a2:70:46:c2:5d:6f:a0:
52:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:04:1D:2E:3D:66:76:A6:A0:F6:73:8B:95:13:C6:76:47:EC:67:83
X509v3 Authority Key Identifier:
keyid:EE:FF:02:42:4D:8D:55:9C:41:36:A2:96:EB:DB:CF:6E:1A:6B:8D:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/3135372e31352e34322e302f32342d3234203d3e20313532333635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.15.42.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:f2:d6:a0:33:04:e7:3d:a7:1e:36:c8:44:4c:02:db:df:f3:
eb:f1:d6:ff:aa:3c:d7:c6:ab:60:df:0b:c3:9c:01:33:ed:2d:
a1:06:13:d4:31:bd:5e:5f:a3:f6:32:9b:91:b1:61:8e:54:a6:
7e:e0:e5:f6:3f:19:44:6b:90:3f:b8:9f:7a:12:4f:98:0a:25:
d3:aa:3f:d9:c2:88:21:86:1a:bd:7d:bb:17:c0:4b:da:0d:b6:
70:bf:23:df:24:eb:58:9f:6f:6d:cb:8c:93:37:f9:0c:4b:4a:
2a:db:de:c1:28:ec:a0:0e:e9:fb:12:be:c9:a3:50:c4:01:04:
31:e1:0c:76:22:11:6b:a5:e0:a7:66:e8:84:15:ce:d5:d4:1b:
8c:42:9e:2d:33:6e:3f:dc:3d:ab:05:10:b5:4c:3f:34:6a:5d:
43:33:6f:c2:02:10:ef:bd:e4:7f:87:5c:3c:51:44:2a:3b:26:
cd:5a:3f:41:f4:79:bd:5e:c3:6d:e8:6a:a1:98:1c:23:a0:b9:
03:28:f2:43:e2:30:31:69:c4:9b:97:11:53:bb:6e:5c:89:1b:
aa:28:7a:c4:48:37:58:4b:bd:d3:06:dd:e9:28:5f:be:07:58:
96:04:86:2b:57:7d:d0:0e:90:3c:46:63:41:5f:03:77:78:7f:
6e:7f:ae:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:54:46 2026 by rpki-client