
$ rpki-client -vvf rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/3136302e3139312e36342e302f32342d3234203d3e20313533313438.roa
File: 3136302e3139312e36342e302f32342d3234203d3e20313533313438.roa (raw, json)
Hash identifier: O4W7xGyLdg25nBLD06FHdWKOQMvZ4LJiQpV+BuyHkrg=
Subject key identifier: 6D:1C:51:6E:68:E7:33:75:57:B3:64:20:44:17:79:71:29:E0:C0:9A
Certificate issuer: /CN=A7FB244B07B590E887183B90A5F474AF8A740E0D
Certificate serial: 4768123AD60E5971F5392BBF0248D82A25556690
Authority key identifier: A7:FB:24:4B:07:B5:90:E8:87:18:3B:90:A5:F4:74:AF:8A:74:0E:0D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/3136302e3139312e36342e302f32342d3234203d3e20313533313438.roa
Signing time: Sun 03 May 2026 02:21:12 +0000
ROA not before: Sun 03 May 2026 02:16:12 +0000
ROA not after: Sun 02 May 2027 02:21:12 +0000
asID: 153148
IP address blocks: 160.191.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.crl
rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:27:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:68:12:3a:d6:0e:59:71:f5:39:2b:bf:02:48:d8:2a:25:55:66:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7FB244B07B590E887183B90A5F474AF8A740E0D
Validity
Not Before: May 3 02:16:12 2026 GMT
Not After : May 2 02:21:12 2027 GMT
Subject: CN=6D1C516E68E7337557B364204417797129E0C09A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:76:6c:54:0f:69:f1:a3:fa:04:3a:47:0c:db:
07:74:38:d9:cb:fb:39:c0:11:5c:1e:83:7c:d8:d0:
87:52:1a:26:e7:6c:2a:f4:ce:cf:3a:d9:82:4c:9e:
a6:d0:8b:b2:da:ee:05:e9:8b:1d:53:e1:86:02:ee:
51:66:fa:19:aa:1c:83:54:ce:5c:28:52:31:17:d3:
51:0c:ba:9a:1b:02:d7:ad:1f:b5:4a:10:79:45:62:
d7:07:0c:e3:64:4f:b3:0e:2b:f3:b1:df:63:2c:6f:
91:af:5a:91:22:da:e4:37:e3:44:b3:b6:73:35:9f:
d8:75:5f:49:3e:61:0c:84:0a:c6:e9:3e:04:5b:ee:
d4:9b:42:5e:16:19:3f:75:91:e0:0e:7b:33:29:12:
4d:9d:16:da:ea:74:f6:4a:0f:3f:0b:ce:6e:53:0d:
86:40:96:9b:19:a0:e2:2a:1b:f9:8e:63:7f:89:61:
0c:e5:71:c0:3d:19:de:2f:05:5b:e2:13:10:9d:14:
c8:54:9c:b2:9e:93:68:0f:eb:0c:79:6a:4e:d8:16:
ab:2f:87:67:6f:ec:cf:1c:a1:5a:20:0a:96:b9:eb:
58:1c:a0:19:ee:2b:c9:a6:b1:1a:97:35:6b:01:ef:
be:e8:3b:1d:4b:8b:c5:9f:a7:d1:7b:fa:a9:68:53:
b0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1C:51:6E:68:E7:33:75:57:B3:64:20:44:17:79:71:29:E0:C0:9A
X509v3 Authority Key Identifier:
keyid:A7:FB:24:4B:07:B5:90:E8:87:18:3B:90:A5:F4:74:AF:8A:74:0E:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/3136302e3139312e36342e302f32342d3234203d3e20313533313438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.191.64.0/24
Signature Algorithm: sha256WithRSAEncryption
81:02:fb:74:18:6e:8a:e8:5c:b3:56:34:a5:c2:65:19:d1:68:
99:cb:8b:28:49:54:97:ab:a3:ec:ef:75:56:43:b5:07:2d:b3:
a8:6c:00:8f:f8:36:c9:e6:54:90:77:4b:dc:3b:94:70:b3:af:
64:60:35:88:14:c1:6a:10:cf:94:fe:61:20:3c:4e:14:d0:25:
79:73:a2:e4:38:22:89:ea:d2:3b:27:5f:8b:a2:7b:41:1f:db:
91:d1:7a:80:ee:69:f3:99:93:2c:c6:66:2f:d8:79:9f:30:03:
96:b0:82:79:75:82:47:08:61:bb:32:af:8d:12:bc:24:b6:a0:
ed:67:61:e1:d7:25:5c:4b:e1:7d:23:d3:a0:00:4f:52:b0:1c:
ed:fd:7f:ec:a2:35:21:98:7d:8e:94:0e:23:da:b0:64:a8:f2:
bf:b6:52:99:34:f9:8a:9a:1c:93:e3:12:cc:a4:a0:a9:98:e8:
f2:0a:97:f5:ad:d1:ea:8d:76:8a:2e:9b:d1:79:b3:9d:35:1f:
28:d6:4a:f6:71:e0:1f:53:64:83:30:1d:89:0d:d8:51:b3:7e:
bd:71:4f:d1:3d:90:b9:1f:4e:46:68:be:44:1f:95:22:03:ca:
65:f2:19:04:49:d3:7a:e1:82:35:68:c3:da:af:b1:29:1a:c2:
01:c0:91:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:48:12 2026 by rpki-client