
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/3136302e32322e32362e302f32332d3233203d3e20313532383036.roa
File: 3136302e32322e32362e302f32332d3233203d3e20313532383036.roa (raw, json)
Hash identifier: ZJsLINR6yrZpMV0P3OWS3tNwIUQ4L1mzkeCbn9j9AAk=
Subject key identifier: BC:B6:F1:1F:BB:BA:D5:7D:2B:48:BE:63:53:0F:66:48:4A:DF:92:70
Certificate issuer: /CN=40843A77AEE521660751DBF1A013A810ECDA68CB
Certificate serial: 0AF5BB3D557F8052A92918B1EB1056610BE40D70
Authority key identifier: 40:84:3A:77:AE:E5:21:66:07:51:DB:F1:A0:13:A8:10:EC:DA:68:CB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/3136302e32322e32362e302f32332d3233203d3e20313532383036.roa
Signing time: Sun 03 May 2026 02:17:19 +0000
ROA not before: Sun 03 May 2026 02:12:19 +0000
ROA not after: Sun 02 May 2027 02:17:19 +0000
asID: 152806
IP address blocks: 160.22.26.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.crl
rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:f5:bb:3d:55:7f:80:52:a9:29:18:b1:eb:10:56:61:0b:e4:0d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40843A77AEE521660751DBF1A013A810ECDA68CB
Validity
Not Before: May 3 02:12:19 2026 GMT
Not After : May 2 02:17:19 2027 GMT
Subject: CN=BCB6F11FBBBAD57D2B48BE63530F66484ADF9270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4c:b2:ad:ec:e2:09:a6:86:90:5a:86:b8:5e:
01:6a:53:fa:8c:8f:99:43:91:a7:1e:55:42:73:1f:
68:34:02:6e:0f:5b:0c:d8:1f:6b:fe:ec:19:56:36:
1f:19:4e:f6:8e:c0:4b:d6:56:cf:66:7a:c6:16:06:
81:a1:52:09:a1:4a:64:54:ba:bd:2b:0e:14:92:56:
12:74:e4:72:6a:b3:63:55:d3:f9:22:56:eb:43:36:
a9:d0:a5:db:5a:b2:60:d2:af:f4:c7:ae:b5:03:63:
5d:9a:13:17:82:c7:6a:7c:48:f4:71:de:30:bb:5a:
56:a4:ea:50:9e:81:fb:92:b5:fd:30:ae:4f:89:29:
47:c4:4a:49:50:a1:ce:ff:90:ca:06:18:ac:69:90:
fd:e2:2d:9a:d4:d7:a9:eb:b5:aa:c5:4e:ac:e2:06:
e2:f0:ef:93:c8:98:a4:91:e7:68:d5:88:0d:73:e1:
1a:e7:74:4e:bd:a7:b3:a0:58:0d:1d:bc:a2:43:68:
de:32:5c:21:d7:d0:15:7d:9f:ad:2c:4e:3d:0e:03:
1f:53:40:e3:0e:27:7e:dd:06:cb:c7:22:be:58:16:
94:1e:1c:d0:c2:c2:a3:17:5e:b9:4c:41:56:21:f4:
99:6f:9e:d1:7f:80:bc:58:47:c4:69:0a:e4:0c:29:
14:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B6:F1:1F:BB:BA:D5:7D:2B:48:BE:63:53:0F:66:48:4A:DF:92:70
X509v3 Authority Key Identifier:
keyid:40:84:3A:77:AE:E5:21:66:07:51:DB:F1:A0:13:A8:10:EC:DA:68:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/3136302e32322e32362e302f32332d3233203d3e20313532383036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.26.0/23
Signature Algorithm: sha256WithRSAEncryption
01:11:7c:cc:12:20:24:1c:52:27:c4:a1:c6:eb:e3:27:92:d3:
ae:c2:50:4b:06:a7:eb:99:e0:6e:01:95:b0:9e:82:75:50:25:
4d:f7:2c:1d:c5:b8:77:78:18:73:63:3b:a3:08:55:ef:38:b7:
1b:c5:e9:01:46:ee:70:90:98:98:04:13:92:63:d0:24:07:3c:
28:5a:81:38:aa:71:db:8e:03:f8:44:cb:c9:f9:46:39:e5:c4:
9f:39:31:64:6e:7b:80:34:de:a6:80:3c:be:4c:09:3b:2a:b1:
09:3e:82:03:9f:e4:40:cf:f3:79:7a:59:2a:f0:e0:e6:1b:65:
a6:af:c8:c4:1f:c4:49:a9:52:5b:b0:6c:d6:62:35:c0:61:92:
78:22:cb:18:39:49:7e:9a:1d:6d:76:d8:c7:df:25:aa:67:8d:
92:af:be:08:93:df:31:77:51:80:8b:a9:f6:9f:9a:2a:e3:27:
f6:cb:d6:e0:83:56:dd:34:20:3b:00:b6:dd:16:e6:85:dd:f8:
61:14:33:42:60:34:48:c1:f4:61:17:69:3e:e1:ce:8a:12:03:
12:cb:a7:3b:4f:4d:cd:5b:c5:b3:7b:6f:fd:f3:7f:f6:fe:d6:
9f:56:21:86:81:9a:b3:ae:39:d7:b7:ff:32:48:a4:36:ac:34:
50:26:8e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:45:13 2026 by rpki-client