
$ rpki-client -vvf rpki-rsync.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/3136302e32352e3234322e302f32332d3234203d3e20313432333437.roa
File: 3136302e32352e3234322e302f32332d3234203d3e20313432333437.roa (raw, json)
Hash identifier: 305J/hvDOtqebHoQeRrN4WMPfeTRNXW47+DjNs90tTM=
Subject key identifier: BA:B5:E3:CE:E1:F8:8E:17:EE:60:ED:DD:A4:9B:15:89:DD:51:DE:F7
Certificate issuer: /CN=6E24FCB26084F4518683107BCD2BBF81AB6AC68B
Certificate serial: 7465E235AFFD1335ECB32B62AEFB1FCE9005B192
Authority key identifier: 6E:24:FC:B2:60:84:F4:51:86:83:10:7B:CD:2B:BF:81:AB:6A:C6:8B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6E24FCB26084F4518683107BCD2BBF81AB6AC68B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/3136302e32352e3234322e302f32332d3234203d3e20313432333437.roa
Signing time: Sun 03 May 2026 02:32:37 +0000
ROA not before: Sun 03 May 2026 02:27:37 +0000
ROA not after: Sun 02 May 2027 02:32:37 +0000
asID: 142347
IP address blocks: 160.25.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/6E24FCB26084F4518683107BCD2BBF81AB6AC68B.crl
rsync://rpki-rsync.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/6E24FCB26084F4518683107BCD2BBF81AB6AC68B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6E24FCB26084F4518683107BCD2BBF81AB6AC68B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:59:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:65:e2:35:af:fd:13:35:ec:b3:2b:62:ae:fb:1f:ce:90:05:b1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E24FCB26084F4518683107BCD2BBF81AB6AC68B
Validity
Not Before: May 3 02:27:37 2026 GMT
Not After : May 2 02:32:37 2027 GMT
Subject: CN=BAB5E3CEE1F88E17EE60EDDDA49B1589DD51DEF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9c:0d:0c:92:49:11:a5:11:bb:b0:77:72:5e:
49:d3:d5:91:81:dd:49:e6:c2:87:08:fc:8a:d8:ec:
c1:de:31:f4:64:1f:14:d0:65:05:dc:2a:bc:b2:30:
02:e6:eb:a5:b3:24:d6:2b:8c:bc:b8:b2:2d:4b:bc:
4f:1d:1d:88:8f:a9:2e:6b:7a:b7:45:72:e7:79:16:
02:dd:34:97:a4:c7:81:a0:47:21:37:5d:61:2c:f4:
b3:01:31:9a:0a:d6:bd:ec:90:9e:61:32:60:9a:54:
c8:ee:e9:33:16:ef:cf:d8:66:2d:00:19:41:a0:df:
92:37:3f:e6:38:ab:8b:98:bb:57:c1:5a:4a:a5:3a:
58:59:6b:55:9b:56:8d:45:07:7c:38:dd:7d:a6:af:
75:b2:56:55:b3:34:a9:dd:42:27:77:d3:0e:97:db:
82:99:c5:b6:cf:86:ad:79:e1:b7:55:ec:91:47:14:
97:95:07:94:72:bc:47:30:76:75:8f:8b:7b:76:1f:
d0:36:68:e3:4a:e5:24:ad:dc:8a:59:82:e3:a3:9d:
34:db:fa:a3:7a:9a:0d:dc:f9:f4:03:0e:3f:96:91:
15:fb:4b:39:a5:9a:fe:2f:7c:ce:c1:3b:4a:05:3d:
4b:ce:81:6b:cd:ab:9f:5f:53:1d:97:e3:cf:26:df:
c8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B5:E3:CE:E1:F8:8E:17:EE:60:ED:DD:A4:9B:15:89:DD:51:DE:F7
X509v3 Authority Key Identifier:
keyid:6E:24:FC:B2:60:84:F4:51:86:83:10:7B:CD:2B:BF:81:AB:6A:C6:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/6E24FCB26084F4518683107BCD2BBF81AB6AC68B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6E24FCB26084F4518683107BCD2BBF81AB6AC68B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/505388f4-107b-44a9-9d8f-1603fecfdee9/0/3136302e32352e3234322e302f32332d3234203d3e20313432333437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.242.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:9b:42:97:e2:1b:4d:2f:2a:fa:c6:77:d9:77:2f:0e:f2:44:
cf:d9:b2:f2:ad:9e:8a:34:a2:c0:b8:ed:d4:2e:c6:19:32:7e:
e2:b3:d8:bb:17:2c:1f:03:6b:ce:32:b2:3f:ba:da:e4:ad:e3:
31:a7:93:42:29:0a:a3:ab:38:74:2e:39:4b:75:c4:cd:b3:29:
7d:d2:0b:e3:66:03:d4:6c:04:89:35:13:ec:33:ce:c1:c7:88:
32:99:6d:a7:9a:96:89:e9:83:e8:d7:69:5e:77:a8:82:2a:ee:
9d:07:7f:69:c9:0a:e5:fb:13:fe:67:69:64:5d:ff:22:27:73:
63:2b:18:7e:73:0a:13:83:6c:0f:07:7f:94:57:9f:98:89:4c:
29:be:3b:e7:36:e1:8a:b0:f1:15:42:c6:07:66:d7:f0:7a:d4:
76:14:fc:0e:22:e1:32:ad:d0:55:e2:01:63:87:d5:8c:cb:61:
8b:ff:9e:f6:42:fc:1e:98:69:97:d9:4f:ff:d8:81:9b:bf:b6:
50:66:f0:04:94:5f:57:48:85:58:cd:1e:53:9b:48:b8:a8:bf:
68:04:e7:9c:2f:87:f5:2c:72:77:bc:fa:08:10:92:16:7a:06:
79:0e:b3:f2:8d:5b:02:ff:46:c6:95:d5:d1:00:a6:9c:99:6b:
fd:1c:13:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:45:18 2026 by rpki-client