
$ rpki-client -vvf rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa
File: 3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa (raw, json)
Hash identifier: Il2995+O34HRt5QUYak7wmOSE/xt1UwsadzXH7aEOYo=
Subject key identifier: 58:91:4A:68:9C:4B:20:E7:26:7A:CB:49:CD:45:6A:20:BD:B5:84:D4
Certificate issuer: /CN=A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F
Certificate serial: 39A0861532C9FBC0AFD3DC4B8BAE61F1036403F3
Authority key identifier: A9:E8:D2:C4:5D:82:0C:1F:C4:0B:CF:03:B9:B1:06:99:99:2D:8B:2F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa
Signing time: Sun 03 May 2026 02:30:50 +0000
ROA not before: Sun 03 May 2026 02:25:50 +0000
ROA not after: Sun 02 May 2027 02:30:50 +0000
asID: 153132
IP address blocks: 160.187.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl
rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:50:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:a0:86:15:32:c9:fb:c0:af:d3:dc:4b:8b:ae:61:f1:03:64:03:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F
Validity
Not Before: May 3 02:25:50 2026 GMT
Not After : May 2 02:30:50 2027 GMT
Subject: CN=58914A689C4B20E7267ACB49CD456A20BDB584D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:78:cf:a9:be:49:29:09:90:8d:aa:8b:aa:25:
b6:45:72:cd:aa:ee:56:a5:1b:35:6c:b6:aa:2a:c4:
f0:cd:4c:52:a4:96:48:e9:0e:ba:94:9b:e0:23:83:
5c:e6:82:4c:6f:5b:7e:d3:d6:fc:56:31:e6:04:a1:
9c:f7:13:60:69:3d:72:46:6c:8d:d0:65:f5:3f:8b:
1c:04:05:c3:d9:26:d4:17:30:08:04:3d:45:76:6d:
c0:0d:73:2c:b1:7a:64:44:12:dc:a7:17:d6:b6:36:
1f:47:89:14:ff:0a:70:f9:7d:06:48:92:af:29:e8:
d5:23:a5:4f:39:be:9d:a6:8e:7c:f2:0d:db:af:93:
dc:76:8b:f3:1b:12:f9:46:c0:d8:b5:b4:59:87:7a:
3d:29:c8:f0:5e:08:f2:06:89:d9:ed:87:b7:9e:d5:
78:c3:b3:84:05:77:12:c1:cd:87:b3:a9:90:9e:63:
50:6d:1c:68:43:ec:8a:1c:b8:0c:b3:e4:1a:cc:4f:
f4:7e:ff:9e:64:86:5d:ab:e1:8b:6b:f6:91:22:20:
d5:d1:30:ea:35:c3:74:bc:32:e2:0b:d6:70:9f:08:
6d:26:60:51:ca:f3:91:da:f2:45:e0:76:0e:e0:2f:
7d:43:89:7c:bb:9b:52:bd:96:52:ae:df:26:ba:fc:
a6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:91:4A:68:9C:4B:20:E7:26:7A:CB:49:CD:45:6A:20:BD:B5:84:D4
X509v3 Authority Key Identifier:
keyid:A9:E8:D2:C4:5D:82:0C:1F:C4:0B:CF:03:B9:B1:06:99:99:2D:8B:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A9E8D2C45D820C1FC40BCF03B9B10699992D8B2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.187.218.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:be:90:36:16:a0:a3:d3:e0:f1:c6:a6:12:bb:b2:2c:c4:1e:
94:f8:9b:95:1f:6e:77:26:b0:8a:10:3c:d0:26:77:dd:b4:ba:
f5:8a:53:98:1d:90:6d:6e:87:0c:03:61:36:a5:02:44:df:a3:
73:95:ca:f7:f7:45:c6:56:15:1e:38:52:55:c3:84:e6:3f:c3:
16:36:3a:83:93:bb:a2:c6:60:96:d7:05:6f:45:b7:12:5e:4b:
91:9c:a9:e4:06:a1:39:fd:12:c6:51:13:85:02:c2:de:b7:a8:
03:76:86:15:9e:b3:f8:22:c0:3f:dd:38:d2:b3:1b:c0:6f:48:
42:e2:ea:f9:8a:c2:e7:d2:a4:9b:a9:85:3a:20:bc:4b:c3:c2:
86:79:a3:61:43:8d:e0:c4:06:c1:e6:2a:80:32:09:91:d6:19:
2e:90:40:b1:0c:19:0c:43:af:52:74:ac:77:94:0f:85:70:d2:
74:8a:5f:0b:90:35:3c:a1:b2:b5:9c:0d:46:bb:40:d4:bf:b6:
8b:18:cb:93:24:e9:a4:5b:ba:22:31:5e:6e:b9:34:2b:3b:d2:
29:28:f6:b7:39:a4:ce:51:c8:7c:88:c8:18:fe:50:ad:65:dd:
74:6f:9e:51:62:90:f5:8b:b8:8b:69:1b:4a:d1:cc:81:6a:6e:
17:e6:7e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:17:38 2026 by rpki-client