
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e3132382e302f31372d3137203d3e2033363430.roa
File: 3135382e39372e3132382e302f31372d3137203d3e2033363430.roa (raw, json)
Hash identifier: S6jN5XGJOvhzD4+8e8hppHHeO9P91rrCiu/yewjCDIY=
Subject key identifier: CC:FD:F3:38:70:A5:19:D2:B6:F0:49:AE:F4:0B:38:F9:B3:3A:55:4D
Certificate issuer: /CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
Certificate serial: 32D50E0A689FF6A62BC67DB4D53E9F8D5CDCD362
Authority key identifier: A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e3132382e302f31372d3137203d3e2033363430.roa
Signing time: Tue 06 Jan 2026 20:54:07 +0000
ROA not before: Tue 06 Jan 2026 20:49:07 +0000
ROA not after: Tue 05 Jan 2027 20:54:07 +0000
asID: 3640
IP address blocks: 158.97.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl
rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 22 Feb 2026 23:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:d5:0e:0a:68:9f:f6:a6:2b:c6:7d:b4:d5:3e:9f:8d:5c:dc:d3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419
Validity
Not Before: Jan 6 20:49:07 2026 GMT
Not After : Jan 5 20:54:07 2027 GMT
Subject: CN=CCFDF33870A519D2B6F049AEF40B38F9B33A554D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:89:0a:fc:93:28:49:2f:8e:8a:25:dd:af:
9a:22:f5:a9:1c:e6:4d:db:53:a6:f3:a3:7e:b9:1e:
05:77:c3:50:b6:c1:45:4b:2a:db:d1:c5:19:eb:47:
4b:02:d2:2d:f8:d0:5c:48:17:a6:53:c8:dd:78:6b:
ed:d3:ad:c2:a8:fe:3e:f5:89:58:36:83:ff:56:f6:
ba:de:fb:04:97:8d:ff:ee:04:5e:a1:4b:c4:ad:dc:
c0:b1:05:98:25:77:a6:32:26:91:01:48:5f:8c:58:
f5:aa:ad:31:eb:75:9b:c5:95:f0:4f:b0:0d:04:69:
d7:79:22:cf:03:09:cd:c2:26:7b:a9:74:77:56:41:
aa:73:2d:c8:15:8b:26:77:e5:ad:4f:4e:93:2a:6f:
1d:fb:6f:37:db:44:78:0e:40:b2:c5:1c:c4:5b:23:
5c:ab:e4:cb:ef:f9:00:bb:b8:ca:9f:46:85:27:96:
38:b1:f7:42:1b:96:e6:a8:04:08:8e:72:d4:d6:f2:
12:0d:c9:37:50:88:88:4a:06:fc:66:bd:90:72:ac:
84:84:4e:e0:40:50:cb:eb:1a:4b:10:69:7a:dc:bc:
ad:e7:4b:56:e4:62:7f:a1:2b:df:9a:17:50:28:93:
49:5e:0c:8b:97:65:a4:45:af:32:49:49:ef:8d:44:
60:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FD:F3:38:70:A5:19:D2:B6:F0:49:AE:F4:0B:38:F9:B3:3A:55:4D
X509v3 Authority Key Identifier:
keyid:A4:3F:1B:6C:CD:8E:C4:C0:5D:6D:9C:29:8D:CE:82:1A:2D:44:44:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43F1B6CCD8EC4C05D6D9C298DCE821A2D444419.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F05478C9C515385E94F82E3AB38543A78BC47CDEC6E505A291FBBD6024DB2335/0/3135382e39372e3132382e302f31372d3137203d3e2033363430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.97.128.0/17
Signature Algorithm: sha256WithRSAEncryption
56:0c:54:b4:18:fb:9c:6b:05:4d:de:98:56:c8:d5:3c:7d:b5:
1a:37:05:03:7f:8d:31:2b:75:e2:9f:53:2a:82:fa:0e:79:8f:
25:d1:aa:62:20:bb:62:9e:cb:85:81:f8:6a:b3:b8:95:fa:56:
18:9d:13:c5:ce:cf:1c:c2:8d:bd:e7:59:31:8d:29:75:55:42:
26:14:f3:3d:68:35:f7:5e:86:48:de:93:88:d5:85:c8:cb:2c:
1c:59:13:10:d2:1e:7e:b5:fc:21:49:fe:e6:fb:ba:3a:53:f6:
97:e9:8d:55:51:38:4a:96:94:1d:ff:66:23:9a:22:7a:72:60:
c1:98:cb:40:d9:3c:27:e4:b3:02:ae:18:9d:8a:eb:8b:d4:e2:
14:d4:36:af:5d:9b:87:52:ab:b6:85:94:db:d6:09:2f:f4:fe:
92:d2:f2:ff:e2:ca:9c:22:43:7c:a0:b8:24:e9:2b:9d:ff:1b:
aa:bb:21:00:e8:b6:83:31:bb:ae:81:a7:bb:79:0f:6d:2e:3d:
6e:4f:99:83:a7:13:91:48:d5:b0:d1:14:36:2a:f6:a8:e4:dc:
3e:f3:77:e9:c1:23:df:d1:aa:a2:8c:73:66:25:9d:08:0f:b0:
55:d4:73:bf:13:ea:4f:69:2c:d5:55:0b:12:6e:56:31:ee:a4:
7e:5e:e6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 00:07:55 2026 by rpki-client