
$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/3/3135312e3135382e39322e302f32332d3234203d3e20313534343739.roa
File: 3135312e3135382e39322e302f32332d3234203d3e20313534343739.roa (raw, json)
Hash identifier: Fxu5dqOkHqf+nR+l4cQxih7nooPvZm2mFv9De2wjgqU=
Subject key identifier: 7D:C5:BE:6A:32:91:A9:CB:D8:6B:16:42:16:F4:16:ED:9D:73:8B:C5
Certificate issuer: /CN=A91862140000/serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53
Certificate serial: 7AFF581195F0320E695748E8CCCC61BA08C4D431
Authority key identifier: F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/3135312e3135382e39322e302f32332d3234203d3e20313534343739.roa
Signing time: Sat 02 May 2026 09:23:33 +0000
ROA not before: Sat 02 May 2026 09:18:33 +0000
ROA not after: Sat 01 May 2027 09:23:33 +0000
asID: 154479
IP address blocks: 151.158.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 14:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:ff:58:11:95:f0:32:0e:69:57:48:e8:cc:cc:61:ba:08:c4:d4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53
Validity
Not Before: May 2 09:18:33 2026 GMT
Not After : May 1 09:23:33 2027 GMT
Subject: CN=7DC5BE6A3291A9CBD86B164216F416ED9D738BC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0b:d5:24:a1:88:c1:c2:56:b7:4f:58:42:26:
40:47:69:0a:6f:31:26:97:b6:9c:b8:59:59:d6:a6:
d1:c9:23:a3:d6:09:df:3e:73:ab:b2:66:f3:51:67:
fb:49:99:18:74:50:87:1a:a1:f1:86:6e:7f:61:9a:
98:8a:f8:ec:72:b8:09:c8:13:19:26:8b:0a:4b:eb:
41:48:35:b0:59:3a:04:98:57:35:97:7b:14:b9:42:
bd:95:ba:74:8d:56:dc:ea:a9:d5:5f:c2:73:87:e5:
ad:a5:4c:56:4f:23:e6:e4:50:ce:b1:25:8f:bd:98:
69:e4:88:2d:23:3a:ab:48:83:80:65:31:0b:48:cd:
39:60:22:5a:1d:5e:24:b5:f4:90:9d:44:00:b9:20:
8f:82:56:30:8a:2d:4f:70:e9:57:bc:96:ea:9d:12:
4a:8a:02:ce:e2:96:cf:d7:b7:05:ec:fe:63:55:a1:
fb:e7:ad:6d:95:83:ce:78:de:e0:df:4a:2a:05:38:
f2:a2:f0:90:82:23:69:24:13:be:02:6d:9d:a2:85:
50:20:34:e4:9e:01:28:12:38:e1:60:40:9e:b7:97:
df:2b:de:01:19:2d:e7:a2:b5:32:ad:a9:43:db:71:
a9:ca:2a:6c:72:8f:ba:b7:0e:31:1e:93:cc:f3:8b:
65:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C5:BE:6A:32:91:A9:CB:D8:6B:16:42:16:F4:16:ED:9D:73:8B:C5
X509v3 Authority Key Identifier:
keyid:F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/3135312e3135382e39322e302f32332d3234203d3e20313534343739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.158.92.0/23
Signature Algorithm: sha256WithRSAEncryption
06:18:b2:c5:84:e7:1d:aa:1a:6f:ae:c7:50:c2:ba:8b:9a:ca:
7e:61:55:19:22:99:e1:be:d0:37:f7:ae:d8:13:93:25:ca:d4:
12:5b:c7:29:35:b7:1a:1c:ce:a3:36:7c:fa:48:86:f2:09:8b:
ff:a8:c6:71:b2:d7:8c:91:f1:31:44:bf:24:f4:b5:19:2e:fb:
fd:de:ef:8d:c0:7a:9a:23:38:cc:df:bc:85:72:00:73:a3:af:
7e:1d:38:ee:e3:8d:77:68:78:cc:80:6e:50:64:ef:7e:82:d9:
a5:85:0d:a4:5a:3d:5c:7e:13:45:17:ef:3a:76:b0:d2:08:e9:
a3:b9:78:40:58:d7:d7:74:5a:e0:85:39:c2:21:e2:d6:db:7c:
76:0b:5e:3f:1d:1b:b2:c8:51:a2:ff:a2:91:75:62:cf:a5:c6:
0a:0e:66:21:88:04:60:4a:80:93:d1:19:6f:08:67:61:ff:07:
69:27:55:4c:da:7e:9e:6f:50:fe:f3:16:a1:59:9c:a4:67:9a:
79:69:0e:ff:15:d8:e5:8f:9a:cb:c5:ea:ff:54:ef:ed:c3:a3:
63:1d:27:2d:52:9b:17:95:8d:23:83:95:38:31:f5:9e:2d:db:
bf:f3:b0:b2:0b:08:ad:0e:60:7a:cf:b1:97:6a:f8:32:7f:be:
bb:c8:a3:f7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue May 5 14:56:40 2026 by rpki-client