
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/3136302e32352e33342e302f32332d3234203d3e20313532383331.roa
File: 3136302e32352e33342e302f32332d3234203d3e20313532383331.roa (raw, json)
Hash identifier: DV5xP9KKXw2JGIOZkVu4l07kGEcfMEeFUMZOJEEBLc0=
Subject key identifier: 26:86:8D:41:03:1D:9D:04:D5:7A:86:49:34:B7:7C:05:58:B2:ED:2B
Certificate issuer: /CN=72B17A79879EF6757A1AF958307849AC03D91209
Certificate serial: 19559696228FAC2D34DA929061F4ACF39E7AB956
Authority key identifier: 72:B1:7A:79:87:9E:F6:75:7A:1A:F9:58:30:78:49:AC:03:D9:12:09
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/72B17A79879EF6757A1AF958307849AC03D91209.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/3136302e32352e33342e302f32332d3234203d3e20313532383331.roa
Signing time: Sun 03 May 2026 02:22:43 +0000
ROA not before: Sun 03 May 2026 02:17:43 +0000
ROA not after: Sun 02 May 2027 02:22:43 +0000
asID: 152831
IP address blocks: 160.25.34.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.crl
rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/72B17A79879EF6757A1AF958307849AC03D91209.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:11:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:55:96:96:22:8f:ac:2d:34:da:92:90:61:f4:ac:f3:9e:7a:b9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72B17A79879EF6757A1AF958307849AC03D91209
Validity
Not Before: May 3 02:17:43 2026 GMT
Not After : May 2 02:22:43 2027 GMT
Subject: CN=26868D41031D9D04D57A864934B77C0558B2ED2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fb:86:e2:18:44:11:7c:48:f3:6b:1f:c3:af:
38:ba:f6:df:2e:7b:90:4c:76:5f:63:f1:65:e4:d1:
f0:66:08:00:d6:8f:68:0e:b0:7f:45:29:9e:2d:b0:
ee:b2:e6:37:f9:ec:e7:91:46:7e:fe:d3:aa:2b:55:
0b:77:e9:04:fb:b4:75:fa:26:68:0d:ad:d9:e4:cb:
22:eb:f2:be:8a:5c:44:5c:45:a8:d7:15:d0:08:4e:
60:a7:15:08:15:fd:4c:ad:0e:2e:75:67:78:a9:16:
90:7c:c7:b2:d3:3c:41:88:20:78:09:9c:f9:97:b5:
0d:54:34:70:ae:29:f5:6c:0d:2d:35:64:44:ba:e7:
04:dc:73:24:c4:90:cf:d4:bf:b7:42:75:a4:bc:ac:
9c:89:e0:a3:13:b3:ba:ad:15:0e:15:19:bb:0e:cc:
fb:c6:14:d3:b5:3e:26:06:c0:07:ab:2d:16:14:b9:
7e:bd:ab:0c:20:92:cd:d2:d3:42:78:82:82:13:0b:
84:91:d2:66:21:8d:dc:73:af:50:e5:25:98:cc:81:
c2:16:08:7e:3e:ae:53:65:a7:cf:e1:1e:8f:98:8f:
90:95:c8:01:da:c9:4d:4d:7d:f6:8f:8f:c1:de:96:
71:49:ee:3c:ef:3a:51:66:37:dc:6a:3d:d0:a9:3d:
78:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:86:8D:41:03:1D:9D:04:D5:7A:86:49:34:B7:7C:05:58:B2:ED:2B
X509v3 Authority Key Identifier:
keyid:72:B1:7A:79:87:9E:F6:75:7A:1A:F9:58:30:78:49:AC:03:D9:12:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/72B17A79879EF6757A1AF958307849AC03D91209.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/3136302e32352e33342e302f32332d3234203d3e20313532383331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.34.0/23
Signature Algorithm: sha256WithRSAEncryption
44:e1:29:9f:26:4d:0b:64:6c:4f:5b:ae:fd:39:f3:ae:2e:f8:
e1:77:9a:a7:39:95:94:d1:71:69:b9:a0:8e:d5:68:5d:bf:73:
0b:2a:85:ba:fe:d9:ce:92:0c:3f:a0:4e:b4:7e:5f:44:43:99:
fb:fa:0f:04:6f:25:32:ce:02:3f:83:a3:9f:bf:f2:88:9a:9d:
31:99:76:63:35:91:fb:21:e6:ef:89:1e:af:df:49:71:2f:27:
1d:c0:ca:c8:f7:18:24:fd:74:0b:26:c2:58:c1:b6:b5:79:dd:
18:85:f3:12:fe:ab:89:35:a7:62:dc:c2:68:c6:f4:55:8b:4f:
66:78:51:fc:6a:01:5e:29:17:76:6f:99:91:db:50:14:32:23:
b9:37:f8:d2:e4:d0:d6:8e:0d:b8:b9:d5:7a:d4:b0:65:5c:f4:
7d:df:8a:13:d2:0b:07:6f:bc:9a:e8:00:91:06:0a:73:49:df:
c5:cb:44:2e:b7:65:77:78:d4:da:d1:69:d9:65:67:61:6a:d8:
10:24:55:9a:8f:f4:a9:5c:0d:5c:b6:b3:38:10:ea:16:be:0e:
c3:4f:56:c5:80:79:a3:c2:d2:ea:f9:df:1c:39:ea:cc:26:9f:
be:34:0e:bb:2d:bb:2c:2b:c4:da:04:30:6d:b8:69:b4:9b:71:
4a:1c:03:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:29:12 2026 by rpki-client