
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3137392e302f32342d3234203d3e203633383539.roa
File: 3135382e3134302e3137392e302f32342d3234203d3e203633383539.roa (raw, json)
Hash identifier: txoedPttvMQlNctC1MXvyJ5aXw06wgKSMdukg0qgTgI=
Subject key identifier: 53:33:82:75:3F:86:05:77:32:D8:E4:DD:C7:D2:CA:AE:78:E0:23:F5
Certificate issuer: /CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97
Certificate serial: A1BCB490DDDAFCEDDF58CD4BB875C12E779CA3
Authority key identifier: 57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3137392e302f32342d3234203d3e203633383539.roa
Signing time: Sun 03 May 2026 02:27:29 +0000
ROA not before: Sun 03 May 2026 02:22:29 +0000
ROA not after: Sun 02 May 2027 02:27:29 +0000
asID: 63859
IP address blocks: 158.140.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl
rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
a1:bc:b4:90:dd:da:fc:ed:df:58:cd:4b:b8:75:c1:2e:77:9c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97
Validity
Not Before: May 3 02:22:29 2026 GMT
Not After : May 2 02:27:29 2027 GMT
Subject: CN=533382753F86057732D8E4DDC7D2CAAE78E023F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:19:43:5d:c7:f1:bc:94:01:01:da:11:ea:c8:
6c:50:71:8c:83:7c:81:ce:09:96:0e:a8:2e:83:8d:
87:0b:a4:06:0f:42:a1:ba:5c:72:e7:19:6f:db:5c:
df:f4:a0:32:fb:3b:5d:78:7c:4b:e4:a0:d2:ad:f8:
11:2d:8d:96:fd:a9:5d:0a:4d:9a:94:fe:6c:be:9a:
ac:a9:7a:64:80:83:d6:45:27:3a:14:d7:8b:72:9d:
39:b4:e1:a9:f5:43:86:ad:90:e3:87:10:7e:11:2d:
42:2f:0d:cc:19:4e:17:a3:b7:20:62:e1:35:83:09:
cb:7f:39:9b:6f:47:6e:7a:e9:c3:c5:88:e2:af:d9:
7d:ea:ae:14:15:5f:4c:27:23:84:fa:95:da:32:b2:
6a:bf:70:e0:f8:48:70:da:51:20:03:c0:f6:cc:67:
71:13:b5:ad:fc:b8:22:bf:4d:7c:34:95:4b:ca:73:
c6:e3:0c:51:ea:76:95:88:8e:cd:f4:8d:af:ca:0d:
68:bc:b5:89:5f:c7:25:2b:9f:8f:b9:d0:9c:20:10:
26:99:a2:3b:db:ab:61:3a:f0:69:5d:e5:44:10:f4:
96:c1:17:84:13:15:d4:42:82:fc:70:c5:e9:cc:06:
97:45:e8:87:4a:4b:55:40:fc:aa:39:df:40:fd:ca:
78:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:33:82:75:3F:86:05:77:32:D8:E4:DD:C7:D2:CA:AE:78:E0:23:F5
X509v3 Authority Key Identifier:
keyid:57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3137392e302f32342d3234203d3e203633383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.140.179.0/24
Signature Algorithm: sha256WithRSAEncryption
47:6b:20:e2:27:18:08:d1:86:9e:b5:32:93:5a:2a:0e:86:3c:
89:3a:1f:7f:c0:16:13:db:39:cc:be:2d:83:6a:db:47:4d:a2:
44:e9:59:9c:d5:2e:6b:43:97:05:ee:5c:33:fe:d6:cd:5f:7b:
3a:49:5b:f1:ab:3c:50:ee:37:34:9d:62:f2:ee:1d:35:30:8f:
aa:cd:e8:7c:a3:c0:69:40:84:8b:5d:d7:48:43:15:4d:8f:a4:
8d:dc:7f:b8:70:4b:e4:44:2a:a6:96:b6:ad:43:53:3e:5e:49:
8f:29:9f:6e:1a:33:9d:75:49:fc:e3:8b:13:51:96:42:f9:f5:
e2:5d:de:da:15:47:1b:21:fa:f1:e8:6c:2b:60:00:0d:a9:bf:
90:b2:e1:38:af:54:2b:00:af:71:45:55:5b:28:ac:03:a5:10:
be:4f:91:e5:71:25:a3:d5:43:fb:5a:76:3b:80:ac:72:ef:ce:
5d:16:02:76:25:3d:65:fd:0e:37:ce:7b:84:df:b9:c3:5c:f0:
0a:3d:22:25:a9:d4:36:3d:4c:52:e2:f9:65:b6:0c:ed:24:d1:
8a:a9:01:ad:1e:96:1a:0c:59:85:d5:af:b9:85:d1:cd:e2:b7:
be:71:59:12:9b:cf:75:58:52:54:59:4f:5a:b1:ca:53:69:5b:
36:1c:81:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 23:07:31 2026 by rpki-client