
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/3135312e3135382e37342e302f32342d3234203d3e20313331343534.roa
File: 3135312e3135382e37342e302f32342d3234203d3e20313331343534.roa (raw, json)
Hash identifier: yLjPOFhKt4noRbzRL2MIGaluRq2L7M9f6uyh5pKU9Ec=
Subject key identifier: E6:27:62:A2:CB:4F:86:4F:F1:80:27:C9:47:89:C9:7F:C5:45:A0:84
Certificate issuer: /CN=A65A7370A28DA71B1C11B89E09D51753C498246D
Certificate serial: 24D98E18329B402E511B3C47B87C01C861862D04
Authority key identifier: A6:5A:73:70:A2:8D:A7:1B:1C:11:B8:9E:09:D5:17:53:C4:98:24:6D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/3135312e3135382e37342e302f32342d3234203d3e20313331343534.roa
Signing time: Sun 03 May 2026 02:23:21 +0000
ROA not before: Sun 03 May 2026 02:18:21 +0000
ROA not after: Sun 02 May 2027 02:23:21 +0000
asID: 131454
IP address blocks: 151.158.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.crl
rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 09:40:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:d9:8e:18:32:9b:40:2e:51:1b:3c:47:b8:7c:01:c8:61:86:2d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A65A7370A28DA71B1C11B89E09D51753C498246D
Validity
Not Before: May 3 02:18:21 2026 GMT
Not After : May 2 02:23:21 2027 GMT
Subject: CN=E62762A2CB4F864FF18027C94789C97FC545A084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b2:84:12:de:24:e1:9b:2e:41:fe:9a:43:97:
7c:23:ed:bb:e3:ec:e5:23:1d:53:3d:0a:1e:03:30:
88:ac:25:73:5a:9c:0c:d9:85:27:f2:c1:87:42:a8:
e4:7f:12:48:47:f7:1f:36:8f:d3:f9:3c:e1:44:4e:
2d:0e:65:cb:6e:86:5b:fd:e5:02:39:27:ce:c2:88:
6f:d4:75:52:90:04:09:31:c9:cb:21:00:bd:6d:29:
50:8d:5d:9d:e6:11:fb:fe:98:61:ee:1e:2b:ca:d1:
4e:26:c1:b3:02:4f:98:8d:c5:8e:75:29:2f:33:ce:
fa:ba:59:2a:a6:79:9d:cd:b3:9b:21:33:a6:36:13:
c0:92:d9:3c:06:1a:59:b7:8c:7b:35:73:fe:2e:d8:
c6:0b:6c:d3:8d:c2:af:a5:23:01:6e:e0:1a:4c:8d:
66:7a:be:40:f2:a9:7d:0f:4f:db:5c:9a:0c:a5:c1:
eb:c5:25:cd:b3:50:0c:2d:f7:a7:17:2f:12:fc:bd:
96:28:3c:0f:ee:7d:51:9b:ce:2f:3f:b5:60:9d:9e:
86:16:f7:18:7c:3f:d2:8c:a9:ad:ee:e9:3c:cf:a7:
37:fe:8b:56:a4:08:0a:21:85:d4:c7:cf:20:7f:0e:
1f:1c:a7:14:b1:0d:7c:23:8a:f0:2a:ca:cd:ba:14:
d2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:27:62:A2:CB:4F:86:4F:F1:80:27:C9:47:89:C9:7F:C5:45:A0:84
X509v3 Authority Key Identifier:
keyid:A6:5A:73:70:A2:8D:A7:1B:1C:11:B8:9E:09:D5:17:53:C4:98:24:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/3135312e3135382e37342e302f32342d3234203d3e20313331343534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.158.74.0/24
Signature Algorithm: sha256WithRSAEncryption
00:b0:be:22:3e:2c:0a:b8:2d:f2:a2:c6:75:d0:b1:e1:89:96:
b9:5f:1e:73:df:76:97:32:3f:32:2a:9d:69:38:3b:b7:01:0c:
9e:f8:b5:b5:34:e5:7d:d9:22:5b:cb:53:21:95:f5:c8:94:9c:
ed:92:51:d8:b7:ef:60:03:27:cd:88:89:e6:4d:f9:5c:db:ce:
b7:03:51:36:38:a4:ba:1b:c9:77:01:24:6e:c3:d1:29:5c:1f:
f7:d5:96:50:37:79:26:d2:3b:40:d0:7b:5e:55:29:72:24:d4:
5f:d6:08:8d:1a:dd:40:d4:1b:4c:61:f7:92:85:2a:fc:08:2c:
08:50:b3:ea:5f:28:a4:cb:70:4e:a5:6e:0c:03:3c:57:c3:34:
3f:1d:2b:02:c3:14:d3:87:32:2a:ca:95:b9:cc:e9:c0:c2:df:
4c:ab:9b:71:db:5f:20:cc:d6:66:3e:0d:93:2a:ce:c8:88:fb:
45:dc:58:9d:03:c0:f4:bf:18:77:44:0d:df:57:a0:66:f7:23:
ba:e2:c3:1d:98:ce:9d:55:b0:f0:b1:9d:83:71:4b:f3:e0:0d:
b2:ff:ab:0b:89:1e:fc:44:83:49:a1:ad:8e:c3:aa:e4:fb:ad:
5c:ba:02:43:25:14:0d:db:5a:8d:10:b9:66:92:2a:b4:a0:8f:
7d:5e:d6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 16:24:08 2026 by rpki-client