
$ rpki-client -vvf rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/3136302e3138372e3231382e302f32332d3233203d3e20313533313332.roa
File: 3136302e3138372e3231382e302f32332d3233203d3e20313533313332.roa (raw, json)
Hash identifier: mTSHlFZAxZWWAKZzsiMuSqeFq/VKg23JR+BpuxRfCT8=
Subject key identifier: A9:9B:94:75:9C:F7:88:FE:CB:F8:60:C9:4D:B2:30:21:0C:6E:95:D8
Certificate issuer: /CN=A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F
Certificate serial: 1226524C8A8E5855B442C73D58C1781C52F42632
Authority key identifier: A9:E8:D2:C4:5D:82:0C:1F:C4:0B:CF:03:B9:B1:06:99:99:2D:8B:2F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/3136302e3138372e3231382e302f32332d3233203d3e20313533313332.roa
Signing time: Sun 03 May 2026 02:30:50 +0000
ROA not before: Sun 03 May 2026 02:25:50 +0000
ROA not after: Sun 02 May 2027 02:30:50 +0000
asID: 153132
IP address blocks: 160.187.218.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl
rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:50:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:26:52:4c:8a:8e:58:55:b4:42:c7:3d:58:c1:78:1c:52:f4:26:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F
Validity
Not Before: May 3 02:25:50 2026 GMT
Not After : May 2 02:30:50 2027 GMT
Subject: CN=A99B94759CF788FECBF860C94DB230210C6E95D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:64:50:e0:51:ed:f5:6b:66:48:c8:b0:82:3f:
4c:75:65:2a:2f:85:b7:8b:d3:e6:5c:77:80:96:f7:
20:32:36:80:20:c2:02:f4:b5:91:5b:e3:94:dc:bc:
23:82:5f:5c:f3:22:75:48:71:cd:f5:c8:59:73:24:
8f:5b:61:78:ba:29:38:fe:79:99:2b:40:ff:13:d7:
2b:b8:2c:2b:be:a4:08:0f:36:4c:10:21:f6:1b:8c:
ca:91:69:aa:b3:96:fc:aa:98:f5:83:cd:9a:58:ef:
01:5d:4c:06:75:ca:14:f3:05:6c:79:48:35:ab:07:
4b:83:2d:c1:9b:58:aa:a1:eb:dd:94:ab:50:75:0e:
b9:5d:32:81:a7:ee:12:af:24:56:a0:32:1a:01:d4:
0e:2c:d6:c3:f2:64:e4:6b:c0:49:e1:44:3c:55:17:
95:ce:01:42:35:17:82:41:24:19:70:99:f0:a9:36:
15:d4:13:f1:9f:b6:bc:b6:b5:17:9d:88:43:71:94:
fd:5c:5d:00:03:ce:c8:52:55:c2:a4:f0:7d:07:89:
c4:93:a2:81:f2:48:28:1f:1b:0f:d6:fb:1d:2f:b6:
bd:99:de:9a:eb:95:ee:77:cb:d0:9d:7f:c2:c9:4d:
89:79:c0:fa:6f:03:0d:36:55:d9:77:58:85:5f:5e:
86:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9B:94:75:9C:F7:88:FE:CB:F8:60:C9:4D:B2:30:21:0C:6E:95:D8
X509v3 Authority Key Identifier:
keyid:A9:E8:D2:C4:5D:82:0C:1F:C4:0B:CF:03:B9:B1:06:99:99:2D:8B:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/3136302e3138372e3231382e302f32332d3233203d3e20313533313332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.187.218.0/23
Signature Algorithm: sha256WithRSAEncryption
05:68:02:3f:d2:05:28:63:5c:49:1d:75:30:22:9d:eb:30:ad:
0f:0d:9c:0f:82:0c:57:cd:8f:5d:d9:69:18:00:9c:f2:2a:78:
5c:2e:97:82:9c:2c:05:2a:e0:a5:35:2c:f6:f1:ea:e3:5a:24:
f2:ec:f4:a4:17:79:35:5a:ce:33:b0:ec:7b:5b:d2:0f:de:d3:
3c:a1:cc:2d:1a:fc:1d:3a:39:ae:7b:21:8b:08:6c:d9:13:86:
aa:96:db:78:86:0f:c4:eb:d5:a5:a7:70:e7:5a:13:aa:fc:de:
6f:6a:27:b3:36:82:4e:72:f7:24:b8:1b:f2:02:42:f5:38:c3:
f9:b0:2b:08:4f:e1:6c:8a:18:a4:ef:c1:ef:9b:cf:4b:39:70:
1b:75:da:36:54:43:f5:80:22:85:15:85:c9:b5:f1:40:8b:65:
b7:4d:2c:89:a8:46:f3:9e:0d:26:9a:be:94:4c:9b:10:1d:d3:
46:4e:81:57:c6:0c:12:40:10:8d:0c:3d:de:bd:6a:74:63:2a:
df:48:02:06:10:c2:b6:87:06:d9:0b:11:e8:83:ff:15:7e:08:
c0:dd:7c:f9:99:e7:af:1f:b7:c1:98:5f:41:5b:4d:7f:17:ed:
51:24:f0:d7:a9:a6:54:e1:d3:9f:71:d6:47:b4:26:40:79:30:
8b:62:34:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:22:28 2026 by rpki-client