
$ rpki-client -vvf rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/3136302e32322e3230362e302f32342d3234203d3e20313532383235.roa
File: 3136302e32322e3230362e302f32342d3234203d3e20313532383235.roa (raw, json)
Hash identifier: 7nwXZ7uwqWfwg9TH3c9pYLZKmQEunRTq0qvrKzAXkHk=
Subject key identifier: B8:8E:FC:07:F9:17:1F:B8:64:BD:87:DC:BB:F8:39:8D:BC:24:56:F5
Certificate issuer: /CN=55D907AA084BF86C0469D2486DE04CD28BD9F17B
Certificate serial: 3280DA8C807F75A6E09FF3262FB2A1B11059BF94
Authority key identifier: 55:D9:07:AA:08:4B:F8:6C:04:69:D2:48:6D:E0:4C:D2:8B:D9:F1:7B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/3136302e32322e3230362e302f32342d3234203d3e20313532383235.roa
Signing time: Sun 03 May 2026 02:25:18 +0000
ROA not before: Sun 03 May 2026 02:20:18 +0000
ROA not after: Sun 02 May 2027 02:25:18 +0000
asID: 152825
IP address blocks: 160.22.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.crl
rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:80:da:8c:80:7f:75:a6:e0:9f:f3:26:2f:b2:a1:b1:10:59:bf:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55D907AA084BF86C0469D2486DE04CD28BD9F17B
Validity
Not Before: May 3 02:20:18 2026 GMT
Not After : May 2 02:25:18 2027 GMT
Subject: CN=B88EFC07F9171FB864BD87DCBBF8398DBC2456F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0d:a4:e2:ea:c1:1c:8a:e0:69:3f:5d:56:80:
c0:5f:57:08:48:b1:ef:88:56:6a:34:f6:27:83:08:
a3:70:03:e3:f9:df:b0:4e:03:3b:50:14:2a:c9:29:
47:d7:8e:14:14:9b:8c:c8:3a:d2:45:c6:0a:05:20:
95:3a:e9:83:42:f8:cb:5e:1d:37:07:7b:b7:73:86:
a5:64:d0:bb:c3:a9:c2:54:04:86:4a:e8:75:5b:66:
1e:80:fe:e5:00:3f:02:9a:5b:0e:97:6a:5a:c9:60:
78:9e:fb:a0:fd:cb:e1:80:06:62:35:dd:3a:1a:5d:
4b:f2:e5:4d:27:6f:84:15:bd:85:4d:17:83:4f:65:
fc:7b:ff:fa:0f:2f:49:63:76:fe:eb:3b:a6:63:e8:
83:ef:95:33:1a:cd:14:59:cb:6e:31:3e:29:50:37:
26:6b:1d:91:e3:57:c8:03:3e:0d:39:0d:bb:2f:87:
66:fe:26:d9:0c:ee:d4:67:8d:ed:ee:89:4a:77:b3:
e8:54:e0:79:e2:1e:b5:af:6c:cd:2c:36:99:e3:d9:
d9:9e:68:3a:a1:16:a4:86:9a:e2:b3:63:00:8a:1b:
b0:63:63:6d:8f:71:5c:4f:a3:80:2c:04:c7:0a:39:
5c:c4:37:77:a9:2e:c6:ef:b7:62:70:a0:e3:f3:21:
76:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8E:FC:07:F9:17:1F:B8:64:BD:87:DC:BB:F8:39:8D:BC:24:56:F5
X509v3 Authority Key Identifier:
keyid:55:D9:07:AA:08:4B:F8:6C:04:69:D2:48:6D:E0:4C:D2:8B:D9:F1:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/55D907AA084BF86C0469D2486DE04CD28BD9F17B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/3136302e32322e3230362e302f32342d3234203d3e20313532383235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.206.0/24
Signature Algorithm: sha256WithRSAEncryption
24:14:c5:c2:d2:66:7e:08:28:c1:3f:a7:63:04:78:4c:7a:fa:
62:68:a3:2d:36:4e:ba:d1:73:45:d0:f9:f6:2d:79:bb:95:ef:
83:d1:c4:33:96:1b:fc:61:6d:b3:ec:aa:18:f2:28:f7:5a:5d:
da:15:68:d9:5c:47:7d:a9:cc:9d:54:f8:a3:cf:f8:86:cf:a5:
26:28:0a:c4:5b:b1:54:dc:a4:46:2f:fc:11:0b:4a:2f:6e:8e:
be:e6:30:93:98:c6:20:34:92:c9:ca:d3:fb:c3:a1:10:a2:85:
01:a6:32:26:50:75:41:db:28:e0:a3:1f:dd:09:25:dc:c6:56:
93:9a:f8:79:27:8a:87:33:bc:b5:de:d1:39:96:19:a2:54:9c:
65:63:47:3a:c5:16:12:f6:05:d6:98:9d:7b:fa:c4:9d:b8:3f:
eb:36:b0:fa:2f:3b:20:12:82:46:46:5b:5e:18:ef:f1:eb:7f:
84:5d:5b:34:1b:29:31:0a:de:a9:05:09:26:0e:37:85:59:43:
3e:5e:9c:7d:27:01:49:7d:69:36:9a:b0:59:20:bd:15:95:9b:
66:b0:3d:53:79:b9:74:aa:09:bf:d8:c4:09:50:9a:99:8e:bf:
5c:8e:b8:14:3d:e2:76:f1:14:65:fa:8a:57:49:a7:7d:c8:ec:
65:1f:a9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:43:55 2026 by rpki-client