
$ rpki-client -vvf rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/3136302e3139312e3233352e302f32342d3234203d3e20313534343130.roa
File: 3136302e3139312e3233352e302f32342d3234203d3e20313534343130.roa (raw, json)
Hash identifier: ymmdsCmMaq7HWg5BTKlN2Tj5x/5jdnU3tBcu+76+hJ4=
Subject key identifier: 60:7A:53:24:C7:5C:B5:79:7A:6B:FC:56:CB:C0:34:BA:53:50:02:38
Certificate issuer: /CN=778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA
Certificate serial: 2FC44B495B59F0038EDD5CCE9D2B5C3F3B814B
Authority key identifier: 77:8D:09:4F:59:A4:A4:DE:EF:A7:C8:AA:DB:CA:9B:EF:4F:A4:24:BA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/3136302e3139312e3233352e302f32342d3234203d3e20313534343130.roa
Signing time: Sun 03 May 2026 02:24:50 +0000
ROA not before: Sun 03 May 2026 02:19:50 +0000
ROA not after: Sun 02 May 2027 02:24:50 +0000
asID: 154410
IP address blocks: 160.191.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.crl
rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 19:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:c4:4b:49:5b:59:f0:03:8e:dd:5c:ce:9d:2b:5c:3f:3b:81:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA
Validity
Not Before: May 3 02:19:50 2026 GMT
Not After : May 2 02:24:50 2027 GMT
Subject: CN=607A5324C75CB5797A6BFC56CBC034BA53500238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:30:10:de:06:63:ca:dc:0b:81:1d:d0:d0:39:
25:d7:00:9e:5c:fa:1a:b9:ae:4d:ce:2b:30:f5:0c:
7e:46:15:57:6e:85:83:f0:94:80:9e:44:eb:35:58:
6d:a8:07:23:29:c1:3a:6b:3f:d3:cb:2b:e2:7b:4d:
ba:a6:0c:d0:6a:7b:2d:18:d1:12:c2:61:df:9e:93:
d1:11:38:bd:51:ac:6c:24:85:58:9c:45:fb:dc:9a:
0e:9c:96:c2:6e:c5:a9:37:0b:25:36:eb:90:b4:f5:
f4:83:0a:b3:3b:a5:df:98:8a:4d:96:66:12:20:56:
01:78:7e:2c:36:e0:79:f1:64:d0:b6:0e:07:d7:33:
e3:c3:4a:69:ef:ef:db:bd:e5:f0:9f:47:1d:d4:62:
99:d1:0e:ca:61:e8:e2:87:76:3d:5b:d5:b6:5c:4f:
18:6e:c8:b9:04:6f:46:2e:db:27:9c:60:b1:1b:5a:
03:48:5e:42:8d:cc:f6:38:8d:99:74:05:3e:f5:18:
4e:f2:38:60:ed:20:7b:c0:8f:63:d3:80:88:58:ad:
fc:83:d7:7b:54:b0:92:72:77:6d:d2:6f:dc:88:cd:
5e:04:26:98:96:5f:e0:c5:db:ea:3f:c5:53:c8:74:
40:a8:0f:0b:18:e2:57:a6:70:0d:8e:ec:ed:0b:6f:
08:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7A:53:24:C7:5C:B5:79:7A:6B:FC:56:CB:C0:34:BA:53:50:02:38
X509v3 Authority Key Identifier:
keyid:77:8D:09:4F:59:A4:A4:DE:EF:A7:C8:AA:DB:CA:9B:EF:4F:A4:24:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/3136302e3139312e3233352e302f32342d3234203d3e20313534343130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.191.235.0/24
Signature Algorithm: sha256WithRSAEncryption
53:db:af:fe:0b:1a:31:41:c7:d0:87:4e:70:9d:fc:f2:0f:63:
25:24:83:39:82:96:c5:27:d8:64:ea:fb:e0:78:df:c1:62:88:
0f:31:75:fa:94:5e:d3:af:c8:1a:ff:a7:13:51:8d:43:72:84:
34:02:9e:8a:63:33:24:6b:88:64:51:30:47:98:d0:1d:72:76:
8a:b0:f1:60:7d:98:86:25:a5:15:b1:52:ea:84:c3:4a:cc:b4:
ec:6d:1e:31:18:1c:0b:cc:26:a3:15:01:af:de:19:3e:89:21:
7c:b2:36:e2:5e:c8:76:47:32:c0:fa:66:bd:db:8b:a1:58:89:
58:2c:e5:e2:dc:84:68:8f:60:ef:bb:30:9b:24:0e:d5:fa:55:
65:87:16:ea:b3:41:18:c7:54:ba:bc:64:f4:29:4b:d1:36:6b:
dd:98:f7:00:6d:9f:2b:72:6b:cd:41:4e:e5:c5:cf:89:0f:2a:
e1:9e:a2:38:62:e3:73:72:b6:06:fe:ba:e0:37:66:15:c5:6d:
65:b3:95:52:25:6e:ee:11:3b:d6:8f:3d:ca:f4:b8:9a:1b:20:
6b:ce:15:f4:9d:d7:e5:4b:41:4f:9f:df:a8:b3:59:74:26:f8:
8d:d6:37:a1:d7:36:f4:a0:8a:30:b4:09:6d:38:e4:3d:8d:e3:
8b:7c:ae:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:17:03 2026 by rpki-client