
$ rpki-client -vvf rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/3136302e32352e35302e302f32342d3234203d3e20313533303831.roa
File: 3136302e32352e35302e302f32342d3234203d3e20313533303831.roa (raw, json)
Hash identifier: uv4Ad3tws8/RhWdgc4kD3cmhisuMAvoQ5Utlm3Sezl0=
Subject key identifier: 2B:CF:6C:61:F0:83:7B:2B:6E:22:48:94:1B:6D:32:51:2E:22:71:63
Certificate issuer: /CN=9C7034B698C7FF4F82CC082FF9330FF137728D54
Certificate serial: 582F049E01B67CD64F975737080A1A3620211552
Authority key identifier: 9C:70:34:B6:98:C7:FF:4F:82:CC:08:2F:F9:33:0F:F1:37:72:8D:54
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/3136302e32352e35302e302f32342d3234203d3e20313533303831.roa
Signing time: Sun 03 May 2026 02:31:06 +0000
ROA not before: Sun 03 May 2026 02:26:06 +0000
ROA not after: Sun 02 May 2027 02:31:06 +0000
asID: 153081
IP address blocks: 160.25.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.crl
rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:2f:04:9e:01:b6:7c:d6:4f:97:57:37:08:0a:1a:36:20:21:15:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C7034B698C7FF4F82CC082FF9330FF137728D54
Validity
Not Before: May 3 02:26:06 2026 GMT
Not After : May 2 02:31:06 2027 GMT
Subject: CN=2BCF6C61F0837B2B6E2248941B6D32512E227163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:28:49:dd:c6:39:fe:0a:55:a3:4d:9b:ae:8c:
e7:ce:48:c3:99:12:40:60:e3:d9:fa:f0:d7:25:05:
f2:27:c6:47:ee:fb:dd:4a:15:03:6f:2f:11:b7:1f:
8e:18:24:ba:b3:1e:b3:46:27:77:e2:a2:0c:dc:b6:
f4:e7:16:84:ab:56:8f:db:a5:a3:e1:eb:c6:76:66:
1b:6e:ce:ab:d9:a0:e3:65:f7:0f:51:be:a2:c0:47:
55:36:05:11:d2:6a:21:d0:26:bc:a1:34:be:b7:18:
5d:65:f8:f4:b6:62:31:b1:37:f4:99:4b:8e:ab:2f:
c6:24:c5:79:3a:ce:17:4a:1d:e2:86:14:eb:a8:3d:
fe:cc:4e:b5:1c:e7:fc:36:55:b3:5f:11:de:b8:c3:
45:b3:91:c6:d3:ff:85:f4:35:37:e2:d3:94:87:86:
42:46:84:20:65:45:b7:34:13:dd:38:66:e3:cd:bc:
12:6c:45:08:52:bf:84:13:35:d6:0e:ea:5d:58:d7:
81:10:3c:9c:bc:58:40:0e:32:79:83:15:d6:2e:8c:
33:f5:d1:71:85:33:c8:de:26:8e:68:39:dc:e4:84:
63:be:ac:56:e1:cb:34:23:3b:a9:5d:24:2e:53:d2:
da:61:31:af:43:6f:2e:a4:6e:70:06:d6:be:12:dc:
3c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CF:6C:61:F0:83:7B:2B:6E:22:48:94:1B:6D:32:51:2E:22:71:63
X509v3 Authority Key Identifier:
keyid:9C:70:34:B6:98:C7:FF:4F:82:CC:08:2F:F9:33:0F:F1:37:72:8D:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9C7034B698C7FF4F82CC082FF9330FF137728D54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/3136302e32352e35302e302f32342d3234203d3e20313533303831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.50.0/24
Signature Algorithm: sha256WithRSAEncryption
41:06:39:83:cf:ce:c2:ae:b2:44:35:c6:06:3e:f7:2f:7c:07:
1f:89:c2:ad:60:32:33:0a:ff:27:09:31:95:7f:81:46:07:a9:
e3:e0:54:d0:e9:d6:24:a8:2a:2f:08:f3:ec:bf:11:4e:90:66:
88:e7:ef:3d:a6:1b:59:83:44:4c:37:6d:5a:cd:f8:47:cf:c3:
8f:ea:ad:4f:3d:99:d4:05:a0:7c:51:22:4f:a7:c0:15:3f:6f:
9e:47:eb:c8:96:57:af:df:ca:c2:db:c4:f8:7b:c5:c8:a7:76:
08:ca:b9:af:94:6c:18:69:25:51:8e:b2:02:f9:10:47:f7:0c:
32:75:84:10:e0:c3:6f:98:36:2d:08:e4:11:30:7c:9a:a5:5d:
7c:bf:f9:eb:a6:36:22:c7:b8:67:4e:41:5f:ae:a8:b7:95:59:
b2:06:b6:88:4c:3e:1b:80:97:7f:f5:3d:e2:0f:f1:9e:c1:d5:
75:79:01:0f:5e:23:b6:45:b5:6c:d5:aa:8e:c4:d2:d0:67:70:
91:36:d9:ea:4f:56:b1:ff:e6:8e:4e:3f:45:b9:c3:af:cb:dc:
33:f7:40:ac:8a:8a:c4:40:38:e9:84:29:ae:4f:4c:f3:48:20:
5f:8a:d8:15:0c:2a:6b:0f:e8:05:cb:60:d1:8f:88:dd:b3:11:
5b:eb:33:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:43:14 2026 by rpki-client