
$ rpki-client -vvf rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/3136302e3139312e36352e302f32342d3234203d3e20313533313438.roa
File: 3136302e3139312e36352e302f32342d3234203d3e20313533313438.roa (raw, json)
Hash identifier: 1rPPrUPUYQqxaBIZqYAyAxfvcUpoRBq/uR7Dh5JxpYE=
Subject key identifier: BC:E8:9D:E7:47:5E:01:3A:34:8B:7D:92:CA:B7:C3:F3:58:7D:75:FB
Certificate issuer: /CN=A7FB244B07B590E887183B90A5F474AF8A740E0D
Certificate serial: 563BB0369E033F8B73302CD2FE62D54B6534777B
Authority key identifier: A7:FB:24:4B:07:B5:90:E8:87:18:3B:90:A5:F4:74:AF:8A:74:0E:0D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/3136302e3139312e36352e302f32342d3234203d3e20313533313438.roa
Signing time: Sun 03 May 2026 02:21:12 +0000
ROA not before: Sun 03 May 2026 02:16:12 +0000
ROA not after: Sun 02 May 2027 02:21:12 +0000
asID: 153148
IP address blocks: 160.191.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.crl
rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:27:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:3b:b0:36:9e:03:3f:8b:73:30:2c:d2:fe:62:d5:4b:65:34:77:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7FB244B07B590E887183B90A5F474AF8A740E0D
Validity
Not Before: May 3 02:16:12 2026 GMT
Not After : May 2 02:21:12 2027 GMT
Subject: CN=BCE89DE7475E013A348B7D92CAB7C3F3587D75FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:56:21:44:f0:06:8d:8e:cd:fe:06:18:bf:ed:
46:0e:59:34:bf:08:9d:be:2e:87:2c:bf:d1:2d:44:
70:f8:bc:72:c1:d5:d8:d1:bf:d0:e9:15:39:52:36:
bd:6c:86:b3:ee:30:bc:fe:7c:eb:6e:63:cf:e8:c6:
79:09:67:92:06:3d:07:b3:c1:2e:69:13:9d:f2:da:
b9:2c:1b:45:be:e7:42:bb:32:ff:9c:c5:51:30:37:
fd:11:da:d7:a3:4d:2a:c5:2c:75:0c:fd:dd:1a:17:
52:8f:20:5f:0e:4e:af:ff:1a:eb:85:a9:75:62:b4:
b1:69:6b:19:1c:23:f3:a9:67:e6:00:82:c0:20:98:
b3:c6:52:29:ca:e1:7b:8d:3c:74:d1:3d:c0:32:af:
a6:f9:fe:8c:96:05:d7:bc:65:9c:82:24:96:b0:38:
1d:26:07:18:00:7f:58:3d:b6:0f:fe:10:64:45:d5:
91:a7:76:6d:05:06:6c:61:8a:cb:00:9e:89:96:4b:
32:78:24:0d:7e:f1:36:2c:c0:66:15:5f:96:9d:64:
de:38:95:53:2d:9e:da:6f:4c:23:8e:3b:63:7b:ce:
88:09:07:c5:f6:ba:a4:61:3d:74:b6:16:21:00:e0:
55:79:97:21:0e:6e:67:52:de:b2:1c:d6:3c:8e:69:
01:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E8:9D:E7:47:5E:01:3A:34:8B:7D:92:CA:B7:C3:F3:58:7D:75:FB
X509v3 Authority Key Identifier:
keyid:A7:FB:24:4B:07:B5:90:E8:87:18:3B:90:A5:F4:74:AF:8A:74:0E:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A7FB244B07B590E887183B90A5F474AF8A740E0D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/3136302e3139312e36352e302f32342d3234203d3e20313533313438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.191.65.0/24
Signature Algorithm: sha256WithRSAEncryption
04:03:82:5b:da:00:ee:33:90:61:1d:a4:56:2f:f0:5d:ea:55:
60:e0:ed:9b:65:6b:56:d6:1b:cc:61:4f:e5:00:78:ef:42:2d:
67:f3:a4:67:86:c9:d7:60:6a:91:a0:dd:e3:42:0a:45:44:00:
6b:b7:7e:77:9e:c0:ae:a1:a2:db:27:fc:d7:18:89:bd:af:28:
a2:7c:2b:70:9b:ed:08:d0:aa:2d:ee:2f:ef:40:6b:94:40:2c:
72:aa:32:94:09:03:7f:70:51:b8:0d:16:c2:ec:04:88:90:aa:
25:a8:1d:e2:65:d4:bf:8e:5c:1c:b4:73:f3:2f:9a:6e:0e:b8:
43:3c:4d:44:4d:eb:2a:5a:30:a3:27:71:b6:98:42:82:bf:46:
e4:fe:e9:18:11:0e:ff:91:d0:c2:c3:a6:41:19:11:14:3e:02:
16:29:46:b9:1a:79:db:82:eb:e1:52:c9:3c:16:d2:1b:c7:b3:
ea:dc:84:ba:04:66:9d:a2:1c:e2:31:c7:8f:9a:8e:b9:6d:f9:
65:fc:75:97:08:9e:88:15:aa:3b:47:1e:18:b5:c1:6a:14:d0:
f9:69:03:37:d4:ed:b4:81:e4:cb:5b:24:d5:96:bb:5d:2e:cb:
68:d7:95:24:81:0d:78:35:76:6c:3a:62:ec:5e:43:bc:e4:32:
9e:6e:88:17
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUVjuwNp4DP4tzMCzS/mLVS2U0d3swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTdGQjI0NEIwN0I1OTBFODg3MTgzQjkwQTVGNDc0QUY4
QTc0MEUwRDAeFw0yNjA1MDMwMjE2MTJaFw0yNzA1MDIwMjIxMTJaMDMxMTAvBgNV
BAMTKEJDRTg5REU3NDc1RTAxM0EzNDhCN0Q5MkNBQjdDM0YzNTg3RDc1RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOViFE8AaNjs3+Bhi/7UYOWTS/
CJ2+Locsv9EtRHD4vHLB1djRv9DpFTlSNr1shrPuMLz+fOtuY8/oxnkJZ5IGPQez
wS5pE53y2rksG0W+50K7Mv+cxVEwN/0R2tejTSrFLHUM/d0aF1KPIF8OTq//GuuF
qXVitLFpaxkcI/OpZ+YAgsAgmLPGUinK4XuNPHTRPcAyr6b5/oyWBde8ZZyCJJaw
OB0mBxgAf1g9tg/+EGRF1ZGndm0FBmxhissAnomWSzJ4JA1+8TYswGYVX5adZN44
lVMtntpvTCOOO2N7zogJB8X2uqRhPXS2FiEA4FV5lyEObmdS3rIc1jyOaQHrAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUvOid50deATo0i32SyrfD81h9dfswHwYDVR0j
BBgwFoAUp/skSwe1kOiHGDuQpfR0r4p0Dg0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjgyYTliZDktMTY2Zi00NTNlLWIzYzAtZTZiM2VmOTJhNTQwLzAvQTdGQjI0NEIw
N0I1OTBFODg3MTgzQjkwQTVGNDc0QUY4QTc0MEUwRC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9BN0ZCMjQ0QjA3QjU5MEU4ODcxODNCOTBBNUY0NzRBRjhBNzQw
RTBELmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzI4MmE5YmQ5LTE2NmYtNDUzZS1i
M2MwLWU2YjNlZjkyYTU0MC8wLzMxMzYzMDJlMzEzOTMxMmUzNjM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzEzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoL9BMA0GCSqG
SIb3DQEBCwUAA4IBAQAEA4Jb2gDuM5BhHaRWL/Bd6lVg4O2bZWtW1hvMYU/lAHjv
Qi1n86RnhsnXYGqRoN3jQgpFRABrt353nsCuoaLbJ/zXGIm9ryiifCtwm+0I0Kot
7i/vQGuUQCxyqjKUCQN/cFG4DRbC7ASIkKolqB3iZdS/jlwctHPzL5puDrhDPE1E
TesqWjCjJ3G2mEKCv0bk/ukYEQ7/kdDCw6ZBGREUPgIWKUa5GnnbguvhUsk8FtIb
x7Pq3IS6BGadohziMcePmo65bfll/HWXCJ6IFao7Rx4YtcFqFND5aQM31O20geTL
WyTVlrtdLsto15UkgQ14NXZsOmLsXkO85DKebogX
-----END CERTIFICATE-----
Generated at Wed May 13 02:48:14 2026 by rpki-client