
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/3136302e31392e38362e302f32342d3234203d3e20313431363030.roa
File: 3136302e31392e38362e302f32342d3234203d3e20313431363030.roa (raw, json)
Hash identifier: 04gnRp5NdkCVsfCRhM0EkwATPsm78cD7B2V1btMyUtQ=
Subject key identifier: C7:65:98:4C:0A:37:E3:93:1F:07:E2:B5:A1:29:0C:49:1D:E1:E8:2A
Certificate issuer: /CN=B75F76DDA35ABFBDBA3203BECB4D08AA52800D28
Certificate serial: 2E00B957B6C8F75C4A2C414BA35EC75D823E8E32
Authority key identifier: B7:5F:76:DD:A3:5A:BF:BD:BA:32:03:BE:CB:4D:08:AA:52:80:0D:28
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/3136302e31392e38362e302f32342d3234203d3e20313431363030.roa
Signing time: Sun 03 May 2026 02:23:51 +0000
ROA not before: Sun 03 May 2026 02:18:51 +0000
ROA not after: Sun 02 May 2027 02:23:51 +0000
asID: 141600
IP address blocks: 160.19.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.crl
rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 10:31:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:00:b9:57:b6:c8:f7:5c:4a:2c:41:4b:a3:5e:c7:5d:82:3e:8e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B75F76DDA35ABFBDBA3203BECB4D08AA52800D28
Validity
Not Before: May 3 02:18:51 2026 GMT
Not After : May 2 02:23:51 2027 GMT
Subject: CN=C765984C0A37E3931F07E2B5A1290C491DE1E82A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:79:cb:f7:bc:97:4c:3b:6f:a3:e7:0b:aa:fa:
4e:87:8b:00:45:0b:ae:28:a7:b6:ef:0c:db:30:9a:
de:b3:65:7e:2f:f1:f4:61:77:47:cf:57:04:90:06:
dd:3e:2e:a1:ae:5e:3c:26:8a:30:72:7c:25:61:c0:
ca:0d:b3:9b:ac:cd:00:b1:1c:a0:cc:cc:52:a9:49:
53:73:79:72:d3:d1:ab:b5:bc:9f:28:17:dc:b3:b3:
e6:92:87:3a:e5:66:32:5d:32:5e:f7:f6:73:9a:1c:
f6:77:f4:fc:4d:e6:34:01:12:68:02:a6:0d:ef:c4:
bc:29:a2:95:09:89:60:4a:fb:e7:3c:1b:63:dc:60:
82:e0:9f:cc:9b:69:9f:11:1a:74:c5:54:76:c6:f7:
7e:c6:87:45:62:45:29:be:82:c7:0a:2d:19:8a:1b:
de:8f:21:7f:92:40:a3:41:ea:8a:11:3b:40:72:da:
f4:36:27:30:1a:02:16:3a:80:a3:ce:b2:fa:40:08:
77:1a:61:bb:c3:61:cc:8b:61:0b:0d:e8:6d:34:18:
da:d4:63:89:73:2d:b0:a2:7d:36:11:2b:90:56:43:
ec:0e:3a:80:f1:e8:f3:a2:97:ef:af:90:50:60:9c:
f9:88:9f:fa:02:9a:11:51:41:20:a5:59:85:9e:33:
f5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:65:98:4C:0A:37:E3:93:1F:07:E2:B5:A1:29:0C:49:1D:E1:E8:2A
X509v3 Authority Key Identifier:
keyid:B7:5F:76:DD:A3:5A:BF:BD:BA:32:03:BE:CB:4D:08:AA:52:80:0D:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/3136302e31392e38362e302f32342d3234203d3e20313431363030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.19.86.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:2e:5e:da:68:9e:db:5e:58:37:2e:c8:3e:c3:ba:85:7f:77:
46:f6:27:4d:45:54:51:0e:c8:ac:dd:f5:7b:81:ae:15:7b:99:
39:ed:f7:22:e8:73:9c:e1:a3:36:6b:41:6c:16:19:78:14:c0:
b4:3c:fa:2d:f4:1d:86:99:d8:c2:86:cc:2e:d6:e1:f9:b1:bf:
68:00:c7:47:c9:6a:ed:bf:ac:8c:fd:63:16:f1:93:38:f7:0a:
7c:ab:3b:a3:7b:99:8f:b7:b7:92:a2:1f:8a:74:71:7b:1b:5b:
96:3f:06:0e:81:09:d0:dc:5b:5a:6b:0f:88:ef:fa:c3:27:bf:
1e:31:d7:d3:5c:4e:91:f4:54:ff:81:f6:1f:5a:02:1a:87:ec:
58:82:f3:c5:c2:9e:07:c8:9e:37:61:45:3e:89:7d:6e:08:66:
6b:56:cd:f4:3f:7f:b1:a4:54:2b:90:fb:ac:a4:8a:06:40:85:
2b:f9:c6:4b:68:c9:2b:45:a3:09:d7:94:21:25:98:f2:17:4f:
83:58:02:66:bf:25:fe:14:06:c7:08:47:49:9a:95:06:de:45:
6d:b4:0e:f5:a0:eb:f8:43:de:f4:e2:a0:d6:78:77:20:17:f8:
4b:7b:23:3d:7c:f3:39:db:a3:59:ab:b3:e9:a1:ad:0d:c1:21:
69:20:83:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:22 2026 by rpki-client