
$ rpki-client -vvf rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/3136302e32352e35302e302f32332d3234203d3e20313533303831.roa
File: 3136302e32352e35302e302f32332d3234203d3e20313533303831.roa (raw, json)
Hash identifier: A0PveJD1fWZi8ZLG9jSQDXLx0OXP4OJbe2qchugQ+9k=
Subject key identifier: 81:0A:02:77:32:BD:8E:A7:11:58:55:47:95:FB:BD:5E:AF:DB:44:A9
Certificate issuer: /CN=9C7034B698C7FF4F82CC082FF9330FF137728D54
Certificate serial: 35F7E96904846403797CDA350EA70F440E1DDFB9
Authority key identifier: 9C:70:34:B6:98:C7:FF:4F:82:CC:08:2F:F9:33:0F:F1:37:72:8D:54
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/3136302e32352e35302e302f32332d3234203d3e20313533303831.roa
Signing time: Sun 03 May 2026 02:31:06 +0000
ROA not before: Sun 03 May 2026 02:26:06 +0000
ROA not after: Sun 02 May 2027 02:31:06 +0000
asID: 153081
IP address blocks: 160.25.50.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.crl
rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:f7:e9:69:04:84:64:03:79:7c:da:35:0e:a7:0f:44:0e:1d:df:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C7034B698C7FF4F82CC082FF9330FF137728D54
Validity
Not Before: May 3 02:26:06 2026 GMT
Not After : May 2 02:31:06 2027 GMT
Subject: CN=810A027732BD8EA71158554795FBBD5EAFDB44A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a6:ad:1d:44:75:94:b4:14:12:15:0b:c6:2a:
de:77:d5:95:99:60:b1:c8:8b:4c:c2:86:73:e2:e1:
31:d2:b0:4a:65:ee:dd:d7:8d:29:6d:45:80:01:13:
6b:3b:7c:95:a0:27:54:f4:18:3f:15:2d:b3:91:43:
0c:09:62:f7:55:21:25:85:d5:3e:2c:cb:b3:33:5e:
87:8b:09:01:c4:b5:15:53:4e:ee:fa:6b:4c:fd:51:
10:55:45:2a:85:26:d1:21:d8:a1:0b:0c:db:ea:74:
d0:da:57:ee:e1:7d:01:3b:af:38:7b:d6:19:25:e2:
cd:1e:16:8e:f8:bb:5b:92:76:69:2d:55:af:b1:5d:
f3:5c:c2:32:c1:2e:2a:b5:99:10:7f:0c:3c:d7:e4:
5e:fc:d1:ba:22:e2:8c:ff:46:dc:f9:b6:5e:17:ad:
9d:7b:cd:5d:a7:fe:c9:5f:a4:9a:df:9f:10:84:22:
af:e9:b8:62:1b:7f:25:f8:fc:d0:35:53:38:b3:b9:
11:39:ae:1c:8e:28:02:0d:37:87:db:dc:17:85:30:
d1:aa:ec:ea:d0:c6:e3:0f:22:1f:3b:a7:c5:19:46:
2f:be:34:4c:43:bf:b1:8f:83:5e:19:b6:85:77:86:
68:19:8d:ef:b7:51:28:c8:8c:03:29:e7:94:31:5d:
3d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0A:02:77:32:BD:8E:A7:11:58:55:47:95:FB:BD:5E:AF:DB:44:A9
X509v3 Authority Key Identifier:
keyid:9C:70:34:B6:98:C7:FF:4F:82:CC:08:2F:F9:33:0F:F1:37:72:8D:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/3136302e32352e35302e302f32332d3234203d3e20313533303831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.50.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:a1:d4:b6:a8:61:a3:34:11:0f:35:5a:bd:06:87:ee:09:3c:
98:bc:4e:1d:da:b2:68:0a:4d:91:64:4b:a8:98:e9:44:d9:c3:
f4:28:c1:c8:9f:61:4a:9f:05:66:f4:7d:7d:bb:c0:5e:3f:d0:
4d:37:84:91:ed:b8:16:6e:a0:e1:5e:2d:26:80:51:6b:21:96:
ec:06:57:3d:55:5a:f2:e3:d0:c8:be:ec:f4:eb:e8:4b:9a:88:
78:e5:0c:33:1e:c1:82:77:cd:ec:0b:01:31:87:8f:b1:80:61:
22:7b:a1:71:c1:0d:7b:3a:4a:ae:0a:2b:d0:b6:82:2e:3e:80:
ba:ea:0a:0f:7c:55:19:55:9a:19:b5:3a:20:03:d6:7f:67:d2:
d0:0e:9d:cd:33:24:3c:c2:9d:e8:ad:38:dd:be:87:0d:ac:bc:
82:d8:a4:8f:cd:41:83:20:9d:9d:3d:ed:3a:b6:f8:70:2a:9a:
3b:d5:5d:b5:27:59:b3:2a:ac:aa:e8:41:9a:73:5b:80:53:c2:
06:89:54:42:3a:8a:52:b8:38:8a:ee:5a:43:fb:19:dc:7e:af:
2e:8a:61:8d:6c:78:0f:cf:b6:87:e1:00:24:01:2f:9a:35:2f:
01:54:e6:e6:f2:86:aa:e7:76:ee:bc:d8:bf:4f:37:16:bd:96:
9b:a7:83:32
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUNffpaQSEZAN5fNo1DqcPRA4d37kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM3MDM0QjY5OEM3RkY0RjgyQ0MwODJGRjkzMzBGRjEz
NzcyOEQ1NDAeFw0yNjA1MDMwMjI2MDZaFw0yNzA1MDIwMjMxMDZaMDMxMTAvBgNV
BAMTKDgxMEEwMjc3MzJCRDhFQTcxMTU4NTU0Nzk1RkJCRDVFQUZEQjQ0QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnpq0dRHWUtBQSFQvGKt531ZWZ
YLHIi0zChnPi4THSsEpl7t3XjSltRYABE2s7fJWgJ1T0GD8VLbORQwwJYvdVISWF
1T4sy7MzXoeLCQHEtRVTTu76a0z9URBVRSqFJtEh2KELDNvqdNDaV+7hfQE7rzh7
1hkl4s0eFo74u1uSdmktVa+xXfNcwjLBLiq1mRB/DDzX5F780boi4oz/Rtz5tl4X
rZ17zV2n/slfpJrfnxCEIq/puGIbfyX4/NA1UzizuRE5rhyOKAINN4fb3BeFMNGq
7OrQxuMPIh87p8UZRi++NExDv7GPg14ZtoV3hmgZje+3USjIjAMp55QxXT3RAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUgQoCdzK9jqcRWFVHlfu9Xq/bRKkwHwYDVR0j
BBgwFoAUnHA0tpjH/0+CzAgv+TMP8TdyjVQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDllY2E1MGItNTcyMi00OTE4LTgzMTQtODU5ZDNjMWY1NWEyLzAvOUM3MDM0QjY5
OEM3RkY0RjgyQ0MwODJGRjkzMzBGRjEzNzcyOEQ1NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC85QzcwMzRCNjk4QzdGRjRGODJDQzA4MkZGOTMzMEZGMTM3NzI4
RDU0LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQ5ZWNhNTBiLTU3MjItNDkxOC04
MzE0LTg1OWQzYzFmNTVhMi8wLzMxMzYzMDJlMzIzNTJlMzUzMDJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzUzMzMwMzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaAZMjANBgkqhkiG
9w0BAQsFAAOCAQEAXaHUtqhhozQRDzVavQaH7gk8mLxOHdqyaApNkWRLqJjpRNnD
9CjByJ9hSp8FZvR9fbvAXj/QTTeEke24Fm6g4V4tJoBRayGW7AZXPVVa8uPQyL7s
9OvoS5qIeOUMMx7BgnfN7AsBMYePsYBhInuhccENezpKrgor0LaCLj6AuuoKD3xV
GVWaGbU6IAPWf2fS0A6dzTMkPMKd6K043b6HDay8gtikj81BgyCdnT3tOrb4cCqa
O9VdtSdZsyqsquhBmnNbgFPCBolUQjqKUrg4iu5aQ/sZ3H6vLophjWx4D8+2h+EA
JAEvmjUvAVTm5vKGqud27rzYv083Fr2Wm6eDMg==
-----END CERTIFICATE-----
Generated at Wed May 13 10:20:17 2026 by rpki-client