
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/3135372e36362e35342e302f32332d3233203d3e20313431383932.roa
File: 3135372e36362e35342e302f32332d3233203d3e20313431383932.roa (raw, json)
Hash identifier: /OlYgkp/JUv7mWTKG1jRIEEEMwF4cVrVtCICjMapFuQ=
Subject key identifier: 4F:EE:41:EC:52:C5:AD:65:C0:3E:43:37:E8:28:97:80:76:BC:84:87
Certificate issuer: /CN=C09B0826A8950269AAA9592F3B0B65A3232333C5
Certificate serial: 6EDE8AFF3202CCCE81B8C25FA7519F9771812FCE
Authority key identifier: C0:9B:08:26:A8:95:02:69:AA:A9:59:2F:3B:0B:65:A3:23:23:33:C5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/3135372e36362e35342e302f32332d3233203d3e20313431383932.roa
Signing time: Sun 03 May 2026 03:18:29 +0000
ROA not before: Sun 03 May 2026 03:13:29 +0000
ROA not after: Sun 02 May 2027 03:18:29 +0000
asID: 141892
IP address blocks: 157.66.54.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.crl
rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:de:8a:ff:32:02:cc:ce:81:b8:c2:5f:a7:51:9f:97:71:81:2f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C09B0826A8950269AAA9592F3B0B65A3232333C5
Validity
Not Before: May 3 03:13:29 2026 GMT
Not After : May 2 03:18:29 2027 GMT
Subject: CN=4FEE41EC52C5AD65C03E4337E828978076BC8487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:50:92:0a:64:58:c7:24:59:e5:5b:f7:23:da:
72:9c:37:2f:31:13:7c:a8:ee:67:55:af:32:d4:76:
4a:dc:b9:68:e3:24:a2:3a:eb:a5:f8:12:81:2d:30:
32:90:3d:21:12:34:5c:79:7e:52:d7:30:ce:4a:fa:
f8:f0:78:2e:a3:57:f0:1f:6b:60:93:d6:e3:bc:a6:
b2:3b:9e:cd:76:c3:64:db:66:37:c7:94:e3:6a:aa:
4e:e2:10:65:84:20:35:c0:82:a1:d4:92:8a:70:04:
3a:52:3c:47:da:65:87:ce:f5:16:a4:b8:8c:a9:31:
df:e9:25:23:ba:91:1f:6f:d5:1f:b2:bb:77:47:e5:
0a:14:f1:72:e9:96:39:ea:1b:5f:a1:25:d1:3d:c9:
0e:d1:ac:44:ec:34:2e:2d:a1:8a:87:60:fe:e4:a3:
40:db:73:67:94:b0:34:8d:40:0b:ed:87:fd:5d:db:
b4:75:2b:2f:63:50:79:fa:e7:cf:b8:6e:19:e4:ca:
ae:89:e8:33:85:72:2b:9b:b1:f0:7e:36:c7:be:56:
f8:69:64:97:82:eb:7b:7d:cd:18:00:39:d7:9c:02:
76:aa:2d:c4:d9:7e:b2:56:a7:bc:9a:90:fe:3d:df:
85:8b:1d:8a:3d:16:0e:68:3a:0b:00:c3:c1:2a:30:
18:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EE:41:EC:52:C5:AD:65:C0:3E:43:37:E8:28:97:80:76:BC:84:87
X509v3 Authority Key Identifier:
keyid:C0:9B:08:26:A8:95:02:69:AA:A9:59:2F:3B:0B:65:A3:23:23:33:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C09B0826A8950269AAA9592F3B0B65A3232333C5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/3135372e36362e35342e302f32332d3233203d3e20313431383932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.54.0/23
Signature Algorithm: sha256WithRSAEncryption
58:a6:95:cc:df:89:97:dd:8a:14:81:87:69:8d:b0:a2:9b:2b:
66:fa:83:21:bb:dc:d2:68:37:dc:79:1c:b7:7f:4f:58:86:ef:
de:20:21:38:e0:c6:01:47:12:bc:a0:bb:92:22:70:9e:a3:ae:
17:65:a7:45:a6:0b:58:c8:b6:5b:6f:73:8f:a7:75:ed:6d:c6:
5b:6d:6f:99:85:6a:b2:74:4d:11:24:30:c7:33:f5:fc:35:9f:
87:b5:bc:a5:db:d0:d9:70:2b:04:c5:f7:ab:7b:ea:33:7f:59:
7a:35:39:da:18:7e:31:c1:68:96:7b:32:fe:86:b1:53:f6:74:
fd:ac:a9:23:0e:e3:09:a9:e8:01:72:bf:75:8f:c0:17:76:d9:
ae:5b:b6:b4:2d:1a:b6:0a:5c:e0:9f:55:23:a4:d8:da:7d:26:
7d:47:66:68:56:34:67:c1:86:7d:ea:6b:14:05:fa:25:39:7a:
2b:6b:60:1a:9e:a7:c3:b0:e3:45:8b:51:3a:15:ab:80:6e:a6:
bb:61:45:bf:af:1d:df:62:bb:fe:1c:95:f0:11:55:27:0d:8c:
70:53:22:47:9f:66:34:19:6d:54:5a:dc:30:38:ba:9e:04:0a:
64:eb:9e:0c:74:07:a4:94:a9:ea:4c:e5:65:50:1f:b2:4b:99:
d0:9d:03:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:40 2026 by rpki-client