
$ rpki-client -vvf rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/3136302e32352e35302e302f32342d3234203d3e20313439373436.roa
File: 3136302e32352e35302e302f32342d3234203d3e20313439373436.roa (raw, json)
Hash identifier: bxedlCP85y9hLJaoDhEB2yAE5TUTBHMZLlN+XLPSDLU=
Subject key identifier: 13:66:C7:D4:ED:90:C9:D5:67:91:E7:31:5D:22:91:BC:2D:EE:34:94
Certificate issuer: /CN=9C7034B698C7FF4F82CC082FF9330FF137728D54
Certificate serial: 5DFD6BE4860D4C6A42A2BA28B8A261E3FD612C34
Authority key identifier: 9C:70:34:B6:98:C7:FF:4F:82:CC:08:2F:F9:33:0F:F1:37:72:8D:54
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/3136302e32352e35302e302f32342d3234203d3e20313439373436.roa
Signing time: Sun 03 May 2026 02:31:07 +0000
ROA not before: Sun 03 May 2026 02:26:07 +0000
ROA not after: Sun 02 May 2027 02:31:07 +0000
asID: 149746
IP address blocks: 160.25.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.crl
rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:fd:6b:e4:86:0d:4c:6a:42:a2:ba:28:b8:a2:61:e3:fd:61:2c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C7034B698C7FF4F82CC082FF9330FF137728D54
Validity
Not Before: May 3 02:26:07 2026 GMT
Not After : May 2 02:31:07 2027 GMT
Subject: CN=1366C7D4ED90C9D56791E7315D2291BC2DEE3494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4f:fc:2b:5f:cd:cc:2e:de:e0:d3:11:1b:2a:
06:40:7a:61:67:4a:8f:3e:4c:a0:5b:16:32:dc:35:
25:04:05:6e:86:47:dc:6a:a1:33:6a:d4:09:e0:a9:
7b:80:2e:28:e2:59:84:01:11:52:b3:7a:00:46:8b:
0c:18:cd:18:3b:1f:04:2d:54:e2:66:96:a9:02:2f:
14:3b:0d:f7:94:37:9d:29:9e:3b:5e:13:13:32:02:
14:b1:fc:f3:ee:0f:04:0e:89:25:74:23:70:08:cc:
95:be:86:91:87:f4:e2:60:b3:75:1e:1d:bd:58:fa:
61:35:a2:a6:60:f2:2a:33:25:05:63:9b:ea:15:b2:
ce:76:96:54:99:c8:cb:29:5c:dc:29:ee:3f:d8:24:
4d:e9:c5:7d:dd:19:75:27:ad:73:d3:25:aa:6e:56:
c0:cc:a0:fe:dc:cd:33:65:39:1d:ce:8e:d3:cb:59:
31:c6:49:4f:19:9e:3e:47:a5:47:b2:6f:b3:f7:49:
88:cf:8d:69:c7:aa:5d:af:5a:cc:aa:95:09:3b:86:
ca:5e:a3:3d:ca:e5:ad:67:e4:ea:5c:fe:34:3a:a7:
2c:a3:22:e5:ca:bc:ac:2c:2a:ec:e3:7c:14:16:d9:
e8:2f:bb:eb:54:e1:61:85:6d:62:fb:6d:0d:84:e6:
e0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:66:C7:D4:ED:90:C9:D5:67:91:E7:31:5D:22:91:BC:2D:EE:34:94
X509v3 Authority Key Identifier:
keyid:9C:70:34:B6:98:C7:FF:4F:82:CC:08:2F:F9:33:0F:F1:37:72:8D:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/3136302e32352e35302e302f32342d3234203d3e20313439373436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.50.0/24
Signature Algorithm: sha256WithRSAEncryption
58:f6:f9:07:0b:23:69:61:36:ae:68:39:3b:0b:de:80:e1:b6:
55:9b:1f:98:f6:f8:91:51:fc:89:e1:db:94:dd:5d:b9:c0:90:
69:57:4f:9e:c3:90:96:fd:11:09:6c:10:d3:1d:ed:e5:1b:3d:
be:17:31:c5:1b:8a:bb:df:70:cb:84:55:e3:2c:59:f1:a6:ca:
3d:84:99:f7:d5:01:35:6e:68:6d:63:e8:74:91:e2:82:da:b1:
78:b2:78:10:65:11:f1:f7:2b:79:54:b6:fe:68:b1:be:43:ee:
c3:9e:3f:6b:d9:5e:8d:5a:b1:eb:f2:97:37:03:89:94:50:fa:
aa:f4:ef:c8:c0:40:88:f8:bf:e9:67:ee:70:3e:88:6d:56:93:
5c:5b:33:3d:78:eb:7d:1b:a9:7c:d0:24:d2:e8:89:de:ef:e3:
2c:62:20:fc:68:9e:d5:9b:8b:17:e1:d6:a1:e1:7a:e2:33:b8:
71:66:65:d7:00:47:88:c0:de:bf:75:44:6a:2a:12:82:b1:ad:
b6:b7:c8:dd:a5:02:d7:0c:71:69:a0:f9:06:e2:55:f6:a9:84:
aa:5e:11:83:e4:04:e5:9f:a9:d9:cd:5f:68:4a:e8:58:b5:6a:
1b:bf:10:32:40:c8:54:39:5e:ba:c8:a7:d3:a6:03:ff:75:92:
c7:d9:60:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:03:56 2026 by rpki-client