
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS21756.roa
File: AS21756.roa (raw, json)
Hash identifier: x9x7SDYilTeaj2ahpoukIMdRa8K38i66yDSiaFjoQiY=
Subject key identifier: 68:5B:1D:CC:25:45:00:8F:0B:36:0D:66:DE:08:94:0C:BA:BE:C1:00
Certificate issuer: /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial: 23BF39E548AD2B9D7DD00A28E9650453852FE913
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS21756.roa
Signing time: Fri 27 Mar 2026 21:05:00 +0000
ROA not before: Fri 27 Mar 2026 21:00:00 +0000
ROA not after: Fri 26 Mar 2027 21:05:00 +0000
asID: 21756
IP address blocks: 201.234.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 22 Apr 2026 04:33:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:bf:39:e5:48:ad:2b:9d:7d:d0:0a:28:e9:65:04:53:85:2f:e9:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Validity
Not Before: Mar 27 21:00:00 2026 GMT
Not After : Mar 26 21:05:00 2027 GMT
Subject: CN=685B1DCC2545008F0B360D66DE08940CBABEC100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1b:2c:21:ec:4e:6c:39:68:66:4e:1d:37:14:
82:a4:25:4d:e1:c5:d7:22:5b:4e:e8:eb:a8:ec:3b:
f4:b1:41:ed:3f:8c:53:52:33:8d:f9:0f:16:f6:94:
86:13:85:19:d9:d7:b6:9a:5e:22:15:08:10:bb:e3:
b7:42:2e:4d:fd:1d:b1:af:3b:02:32:02:e5:2f:47:
ad:8e:fe:ff:78:ab:51:12:a7:5d:75:df:72:f0:53:
83:52:38:1a:6e:26:aa:26:f2:99:c3:31:c0:b0:fd:
1e:a0:1f:c3:a3:bf:3c:9b:51:cd:41:53:20:b1:75:
8a:21:b8:9f:8a:38:11:c9:35:38:30:83:3f:ab:b8:
7d:ed:e3:83:0f:fb:f9:d0:7a:1a:07:df:b9:ec:00:
3e:75:01:2a:1f:fe:93:e4:ba:6d:59:fb:2d:77:8b:
25:89:a7:27:35:ae:e8:88:cf:10:e8:49:09:04:f1:
cd:9e:2c:87:60:e2:6b:b5:52:a1:af:0a:c2:27:f8:
c0:38:ac:b8:22:5c:b7:7f:d9:7a:c6:48:06:f0:8c:
f4:8a:96:6f:f6:b5:87:c2:e4:c0:e6:2a:dc:fc:62:
41:9f:89:30:bb:0b:59:fa:72:9d:70:72:93:92:6d:
a6:c0:16:2d:ef:7a:67:94:31:60:0e:ac:e8:7a:a7:
a6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5B:1D:CC:25:45:00:8F:0B:36:0D:66:DE:08:94:0C:BA:BE:C1:00
X509v3 Authority Key Identifier:
keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS21756.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.234.38.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:29:12:c3:1c:65:30:4e:61:42:42:d0:70:22:bb:d0:ea:a7:
5c:eb:41:77:7f:51:ea:c1:19:97:8f:2c:e9:83:e2:a4:57:93:
16:81:0d:76:78:e2:ae:4e:5c:50:8a:e9:cd:55:0b:1f:8c:a4:
40:07:bc:34:41:c4:b8:40:15:7f:53:5b:cf:84:12:b5:8f:98:
42:12:1b:41:51:f2:05:50:a4:11:89:74:81:65:44:c9:32:a5:
3d:4c:36:ac:90:4d:3b:7a:5b:86:a2:53:6b:be:6f:83:12:ca:
f5:c5:80:5a:4a:b5:0a:3d:a1:51:a4:2f:f4:8b:fd:fd:57:53:
97:f5:e6:29:6f:99:e7:7e:63:fd:30:84:b6:f0:6f:98:6f:bf:
4d:8e:fb:97:99:29:3b:6d:fa:83:3a:24:05:40:4f:fd:4d:c1:
b9:88:8d:2b:be:99:14:3f:25:68:9d:f6:d4:94:20:f0:05:4b:
43:20:14:bd:09:19:72:e5:d2:4d:60:07:09:db:e3:24:7f:62:
5b:26:6a:fd:15:43:47:3f:d2:43:27:dd:a5:da:fb:77:2c:19:
e1:27:0f:24:e7:42:d6:41:e4:dc:1b:04:c8:62:ff:60:22:4f:
63:65:a1:ff:28:4b:34:41:9a:69:96:71:0c:ef:fe:9d:e5:46:
13:a1:dc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:29:25 2026 by rpki-client