
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/3135372e31352e32372e302f32342d3234203d3e20313532333835.roa
File: 3135372e31352e32372e302f32342d3234203d3e20313532333835.roa (raw, json)
Hash identifier: AIYdaIbMpam2H+bkm3BZmX9wAdJuWZLGtRtTWiUJB3w=
Subject key identifier: 3C:AD:B7:92:04:C2:49:71:C3:10:84:DE:AB:AD:6B:7C:0F:5B:E2:A6
Certificate issuer: /CN=7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB
Certificate serial: 59D5831440B7828B7C6290D102774B1D3018F6F4
Authority key identifier: 7E:8C:E7:F4:E7:EF:A3:68:18:11:ED:C2:5E:EF:D1:FD:3F:C4:1F:FB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/3135372e31352e32372e302f32342d3234203d3e20313532333835.roa
Signing time: Sun 03 May 2026 03:16:09 +0000
ROA not before: Sun 03 May 2026 03:11:09 +0000
ROA not after: Sun 02 May 2027 03:16:09 +0000
asID: 152385
IP address blocks: 157.15.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.crl
rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:26:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:d5:83:14:40:b7:82:8b:7c:62:90:d1:02:77:4b:1d:30:18:f6:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB
Validity
Not Before: May 3 03:11:09 2026 GMT
Not After : May 2 03:16:09 2027 GMT
Subject: CN=3CADB79204C24971C31084DEABAD6B7C0F5BE2A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:24:00:2b:f0:b6:72:7c:9f:72:5d:5e:1e:09:
02:39:42:9c:4a:32:3f:ab:24:c7:58:e8:03:13:73:
93:05:df:97:bc:bf:43:41:4c:15:f7:a4:22:68:f9:
5e:26:9d:fc:8c:d0:48:35:4f:d1:96:53:5d:4e:a4:
1d:22:a6:e5:e9:64:92:75:ee:0a:03:63:45:dd:cb:
a2:b8:b4:9c:bb:d9:26:1b:ae:e3:80:f2:1e:c3:d7:
eb:b2:83:aa:fb:77:99:a4:93:72:f3:1d:2a:86:e0:
2e:2e:bc:00:e8:f2:b8:09:62:8b:40:22:d7:7f:77:
69:d4:f0:aa:ab:03:3b:11:17:92:b6:ce:60:2e:ee:
63:47:fd:62:33:f5:1e:a6:d6:d2:d7:82:86:a1:6b:
c6:9c:92:26:7f:91:2e:22:a3:53:83:09:04:b1:fc:
e5:e1:e3:44:c7:62:e8:09:99:ff:be:cb:58:83:3b:
e1:99:e6:e6:dd:28:e7:3c:65:9e:b4:f7:a8:0d:60:
21:94:31:5a:8d:78:7d:48:eb:23:b1:29:5b:b1:53:
f8:bd:8b:f0:3e:25:c5:1f:6f:b7:de:94:c5:e2:4c:
99:db:c7:49:f8:e2:a9:64:36:3f:23:84:ba:ac:1a:
ef:43:62:d5:71:09:9a:de:28:c8:0e:ad:9c:0d:3e:
6b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AD:B7:92:04:C2:49:71:C3:10:84:DE:AB:AD:6B:7C:0F:5B:E2:A6
X509v3 Authority Key Identifier:
keyid:7E:8C:E7:F4:E7:EF:A3:68:18:11:ED:C2:5E:EF:D1:FD:3F:C4:1F:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7E8CE7F4E7EFA3681811EDC25EEFD1FD3FC41FFB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ee7257bb-2195-4fd7-bcc5-9019ab49dba5/0/3135372e31352e32372e302f32342d3234203d3e20313532333835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.15.27.0/24
Signature Algorithm: sha256WithRSAEncryption
52:92:1c:ce:19:0a:79:a5:a0:e1:ac:d2:15:a8:3c:d2:5f:e8:
81:9c:94:5a:85:77:c5:a3:a6:04:07:39:d2:e9:e5:8e:aa:42:
d6:0e:84:cf:6a:db:27:05:fb:8a:2b:b5:2a:55:4e:7e:09:32:
0b:9c:08:22:4e:3d:fb:b0:d7:05:8e:b9:67:93:0c:38:44:e8:
b5:8c:77:b9:5c:03:24:d7:c8:17:20:89:29:c0:67:9f:32:6d:
bd:60:6a:82:03:61:de:79:75:de:c1:72:29:05:3c:d3:83:01:
0e:dc:0f:db:33:ff:16:3e:a6:d2:c6:4c:fb:36:7c:9c:28:e0:
54:35:b5:59:aa:2b:a6:43:36:8d:c5:2e:d2:76:52:5e:9d:5b:
84:57:49:40:eb:10:a8:16:a8:97:69:34:2a:d3:39:25:7b:86:
e9:d4:a2:85:e2:d0:ea:35:a5:46:d4:39:1d:ad:73:8f:24:dc:
1f:e3:ab:13:fd:18:80:b1:9d:17:7e:70:9c:79:ea:5e:f7:1c:
37:f3:cf:26:1b:c3:3b:17:8f:ba:40:0e:7e:cf:d4:6d:e5:28:
b2:e8:7d:09:ad:f0:4c:51:e9:86:93:f7:d9:97:95:f3:1b:a3:
3c:34:28:e5:66:8f:9d:a3:77:c3:eb:5f:11:8b:d6:c0:dc:dd:
9a:c2:fd:d6
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUWdWDFEC3got8YpDRAndLHTAY9vQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0U4Q0U3RjRFN0VGQTM2ODE4MTFFREMyNUVFRkQxRkQz
RkM0MUZGQjAeFw0yNjA1MDMwMzExMDlaFw0yNzA1MDIwMzE2MDlaMDMxMTAvBgNV
BAMTKDNDQURCNzkyMDRDMjQ5NzFDMzEwODRERUFCQUQ2QjdDMEY1QkUyQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4JAAr8LZyfJ9yXV4eCQI5QpxK
Mj+rJMdY6AMTc5MF35e8v0NBTBX3pCJo+V4mnfyM0Eg1T9GWU11OpB0ipuXpZJJ1
7goDY0Xdy6K4tJy72SYbruOA8h7D1+uyg6r7d5mkk3LzHSqG4C4uvADo8rgJYotA
Itd/d2nU8KqrAzsRF5K2zmAu7mNH/WIz9R6m1tLXgoaha8ackiZ/kS4io1ODCQSx
/OXh40THYugJmf++y1iDO+GZ5ubdKOc8ZZ6096gNYCGUMVqNeH1I6yOxKVuxU/i9
i/A+JcUfb7felMXiTJnbx0n44qlkNj8jhLqsGu9DYtVxCZreKMgOrZwNPmtZAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUPK23kgTCSXHDEITeq61rfA9b4qYwHwYDVR0j
BBgwFoAUfozn9Ofvo2gYEe3CXu/R/T/EH/swDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZWU3MjU3YmItMjE5NS00ZmQ3LWJjYzUtOTAxOWFiNDlkYmE1LzAvN0U4Q0U3RjRF
N0VGQTM2ODE4MTFFREMyNUVFRkQxRkQzRkM0MUZGQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC83RThDRTdGNEU3RUZBMzY4MTgxMUVEQzI1RUVGRDFGRDNGQzQx
RkZCLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2VlNzI1N2JiLTIxOTUtNGZkNy1i
Y2M1LTkwMTlhYjQ5ZGJhNS8wLzMxMzUzNzJlMzEzNTJlMzIzNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0PGzANBgkqhkiG
9w0BAQsFAAOCAQEAUpIczhkKeaWg4azSFag80l/ogZyUWoV3xaOmBAc50unljqpC
1g6Ez2rbJwX7iiu1KlVOfgkyC5wIIk49+7DXBY65Z5MMOETotYx3uVwDJNfIFyCJ
KcBnnzJtvWBqggNh3nl13sFyKQU804MBDtwP2zP/Fj6m0sZM+zZ8nCjgVDW1Waor
pkM2jcUu0nZSXp1bhFdJQOsQqBaol2k0KtM5JXuG6dSiheLQ6jWlRtQ5Ha1zjyTc
H+OrE/0YgLGdF35wnHnqXvccN/PPJhvDOxePukAOfs/UbeUosuh9Ca3wTFHphpP3
2ZeV8xujPDQo5WaPnaN3w+tfEYvWwNzdmsL91g==
-----END CERTIFICATE-----
Generated at Wed May 13 04:09:44 2026 by rpki-client