
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/3136302e32352e3232332e302f32342d3234203d3e20313533303837.roa
File: 3136302e32352e3232332e302f32342d3234203d3e20313533303837.roa (raw, json)
Hash identifier: l0lLcFyKU5R3pxNmqVEUMZ5v6XNKujljaGE/o4pCYb8=
Subject key identifier: 11:4E:B2:70:89:0F:C8:95:2F:4D:1A:97:69:C6:5D:36:33:92:FC:EE
Certificate issuer: /CN=7192B96CAD2F513423F7D689B668C3C7840AC34F
Certificate serial: 7E4EBE271605285D0FD3CB78C076A07E8A784515
Authority key identifier: 71:92:B9:6C:AD:2F:51:34:23:F7:D6:89:B6:68:C3:C7:84:0A:C3:4F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/3136302e32352e3232332e302f32342d3234203d3e20313533303837.roa
Signing time: Sun 03 May 2026 02:17:42 +0000
ROA not before: Sun 03 May 2026 02:12:42 +0000
ROA not after: Sun 02 May 2027 02:17:42 +0000
asID: 153087
IP address blocks: 160.25.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.crl
rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:4e:be:27:16:05:28:5d:0f:d3:cb:78:c0:76:a0:7e:8a:78:45:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7192B96CAD2F513423F7D689B668C3C7840AC34F
Validity
Not Before: May 3 02:12:42 2026 GMT
Not After : May 2 02:17:42 2027 GMT
Subject: CN=114EB270890FC8952F4D1A9769C65D363392FCEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:39:f8:e7:fa:22:fd:96:61:e9:d6:6d:ba:2a:
f7:ae:fc:6c:ca:ce:fb:39:81:d6:18:0f:ee:56:01:
97:26:68:3b:87:ed:21:3e:4a:fd:83:b7:0e:8d:88:
7e:6a:34:c8:a6:c7:36:17:58:b8:b2:62:43:4d:e7:
d0:db:94:81:5b:fc:9e:8c:91:45:04:a9:bb:e7:35:
ea:61:97:6f:5b:8b:2d:c5:c8:21:61:23:1b:11:23:
60:0f:47:58:93:3f:92:8e:42:7d:3d:72:60:2e:b8:
37:44:0b:49:eb:3f:41:28:52:72:bb:21:ae:6e:45:
7f:54:79:c0:c0:40:6d:f9:67:4b:87:5c:0d:f0:a9:
e2:f9:0a:18:55:d4:72:7e:61:09:31:dd:3b:e7:23:
9c:08:21:75:95:c7:8b:df:49:b3:54:02:7a:21:79:
bd:4f:83:7c:7d:58:85:6b:a1:d7:b9:25:34:f5:b8:
d3:d9:59:3a:e3:6a:68:42:75:d4:9a:f9:ac:38:4e:
57:67:a4:d8:05:7c:8a:12:52:3f:bf:ad:4d:1f:c2:
39:64:a0:50:fd:cb:d9:43:45:71:a5:01:11:d6:49:
27:1a:9e:eb:3f:5c:2a:8d:48:98:b8:e8:2f:98:c2:
95:aa:b9:34:16:a8:c8:62:38:d2:50:c4:ff:36:7f:
14:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4E:B2:70:89:0F:C8:95:2F:4D:1A:97:69:C6:5D:36:33:92:FC:EE
X509v3 Authority Key Identifier:
keyid:71:92:B9:6C:AD:2F:51:34:23:F7:D6:89:B6:68:C3:C7:84:0A:C3:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/3136302e32352e3232332e302f32342d3234203d3e20313533303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.223.0/24
Signature Algorithm: sha256WithRSAEncryption
10:1d:97:a6:61:cc:d5:d8:54:54:70:40:1f:cb:b4:ab:7a:30:
32:12:04:d8:04:39:b6:c3:f0:80:6e:41:d4:53:8e:82:a5:4e:
90:65:8f:94:23:00:d0:11:2c:9d:2f:9c:2f:39:bf:07:72:48:
ee:28:33:f1:50:8f:b8:06:07:d3:9a:eb:22:37:df:ed:48:63:
6e:2b:b4:98:df:a7:d9:47:4e:60:fb:49:fe:b3:45:5a:86:bd:
cc:ee:98:15:4f:c9:65:7c:9e:e5:4f:cb:54:5f:76:dd:8c:e4:
96:19:86:fc:f9:6d:ed:50:de:f7:dc:f2:22:a8:eb:0c:a5:dd:
c5:a6:7f:72:ff:47:c0:62:b9:3c:61:1b:ed:54:fe:e8:28:b4:
12:a7:98:3c:76:bb:e9:fb:01:e5:c5:c1:6e:c8:85:9e:71:df:
2e:f8:bb:22:f3:d3:9d:93:ff:45:1d:d1:2d:73:70:09:51:66:
9b:71:de:d6:1c:b9:04:6f:fb:c6:d7:3f:f7:a0:46:38:32:6b:
90:28:bd:13:19:97:9d:dd:8f:b1:49:c2:a1:2b:45:48:e3:6c:
55:89:ef:5c:9f:8f:bc:dd:94:f1:2e:98:6c:f6:d1:df:43:9d:
db:1d:9a:02:6a:c6:33:0d:e8:26:13:a7:f7:f3:8c:85:0a:55:
df:ba:ef:35
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUfk6+JxYFKF0P08t4wHagfop4RRUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE5MkI5NkNBRDJGNTEzNDIzRjdENjg5QjY2OEMzQzc4
NDBBQzM0RjAeFw0yNjA1MDMwMjEyNDJaFw0yNzA1MDIwMjE3NDJaMDMxMTAvBgNV
BAMTKDExNEVCMjcwODkwRkM4OTUyRjREMUE5NzY5QzY1RDM2MzM5MkZDRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTOfjn+iL9lmHp1m26Kveu/GzK
zvs5gdYYD+5WAZcmaDuH7SE+Sv2Dtw6NiH5qNMimxzYXWLiyYkNN59DblIFb/J6M
kUUEqbvnNephl29biy3FyCFhIxsRI2APR1iTP5KOQn09cmAuuDdEC0nrP0EoUnK7
Ia5uRX9UecDAQG35Z0uHXA3wqeL5ChhV1HJ+YQkx3TvnI5wIIXWVx4vfSbNUAnoh
eb1Pg3x9WIVrode5JTT1uNPZWTrjamhCddSa+aw4TldnpNgFfIoSUj+/rU0fwjlk
oFD9y9lDRXGlARHWSScanus/XCqNSJi46C+YwpWquTQWqMhiONJQxP82fxRrAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUEU6ycIkPyJUvTRqXacZdNjOS/O4wHwYDVR0j
BBgwFoAUcZK5bK0vUTQj99aJtmjDx4QKw08wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MWRlZDU4MTEtYmU1MC00Y2FhLTlmOTYtNjNkMzcyMDMxMWRlLzAvNzE5MkI5NkNB
RDJGNTEzNDIzRjdENjg5QjY2OEMzQzc4NDBBQzM0Ri5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC83MTkyQjk2Q0FEMkY1MTM0MjNGN0Q2ODlCNjY4QzNDNzg0MEFD
MzRGLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODExLWJlNTAtNGNhYS05
Zjk2LTYzZDM3MjAzMTFkZS8wLzMxMzYzMDJlMzIzNTJlMzIzMjMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzAzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBnfMA0GCSqG
SIb3DQEBCwUAA4IBAQAQHZemYczV2FRUcEAfy7SrejAyEgTYBDm2w/CAbkHUU46C
pU6QZY+UIwDQESydL5wvOb8HckjuKDPxUI+4BgfTmusiN9/tSGNuK7SY36fZR05g
+0n+s0Vahr3M7pgVT8llfJ7lT8tUX3bdjOSWGYb8+W3tUN733PIiqOsMpd3Fpn9y
/0fAYrk8YRvtVP7oKLQSp5g8drvp+wHlxcFuyIWecd8u+Lsi89Odk/9FHdEtc3AJ
UWabcd7WHLkEb/vG1z/3oEY4MmuQKL0TGZed3Y+xScKhK0VI42xVie9cn4+83ZTx
Lphs9tHfQ53bHZoCasYzDegmE6f384yFClXfuu81
-----END CERTIFICATE-----
Generated at Wed May 13 08:24:55 2026 by rpki-client