
$ rpki-client -vvf rpki-rsync.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa
File: 3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa (raw, json)
Hash identifier: 6gZoekKimbXzQFwezQ08dgpfsSYtH0N4xMrqLiWGu2w=
Subject key identifier: C7:41:44:85:05:0E:1F:AB:DC:14:44:E3:A0:53:AC:A3:EE:23:CD:4C
Certificate issuer: /CN=B78CE4D8A632D181FCC23251B7CF41141DBE1467
Certificate serial: 0D4A658FACB947AAB3EFAA1269EB7919DF338B6A
Authority key identifier: B7:8C:E4:D8:A6:32:D1:81:FC:C2:32:51:B7:CF:41:14:1D:BE:14:67
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa
Signing time: Sun 03 May 2026 02:38:01 +0000
ROA not before: Sun 03 May 2026 02:33:01 +0000
ROA not after: Sun 02 May 2027 02:38:01 +0000
asID: 153096
IP address blocks: 160.25.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.crl
rsync://rpki-rsync.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:50:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:4a:65:8f:ac:b9:47:aa:b3:ef:aa:12:69:eb:79:19:df:33:8b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B78CE4D8A632D181FCC23251B7CF41141DBE1467
Validity
Not Before: May 3 02:33:01 2026 GMT
Not After : May 2 02:38:01 2027 GMT
Subject: CN=C7414485050E1FABDC1444E3A053ACA3EE23CD4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9f:e6:53:f6:c8:99:00:1a:83:50:d1:51:05:
88:f5:57:1a:73:9c:b2:22:8a:ca:a3:ef:9e:8a:2a:
83:50:95:16:08:f7:57:fd:a5:92:f8:93:b2:54:52:
f5:05:dd:97:63:aa:72:76:6d:16:e1:b5:6b:e6:a5:
e2:63:e9:f5:ca:e1:03:c1:10:05:31:ac:c1:29:52:
01:72:db:38:a5:b8:13:13:78:db:eb:44:90:20:db:
5b:d8:27:ab:10:cd:bb:2b:4f:9c:7d:3b:8d:19:85:
06:c9:ac:5e:98:27:a7:c2:96:0a:7b:6c:08:66:ce:
29:54:e8:ec:51:f1:82:2c:6d:ea:54:7b:1b:3f:16:
15:5f:9d:ff:b3:1f:c6:37:8a:e9:58:2c:00:a6:9f:
d6:bf:bf:27:87:98:f7:23:33:9d:79:bc:f5:ed:f4:
fd:b3:50:43:86:e3:7e:f1:18:7c:79:39:35:cb:cd:
2c:1f:9e:47:cb:31:62:06:40:be:4e:61:b7:8f:f6:
71:24:3f:9d:59:71:8b:c2:54:3d:92:a1:72:15:8e:
74:c3:c5:0b:8a:9d:6e:8f:f6:e3:81:f8:c4:d5:47:
3b:89:b3:34:95:8d:d3:0c:dc:be:34:e2:64:2f:fc:
67:2a:9e:d1:97:d5:bc:5d:7d:f4:ad:b9:9d:e1:b5:
51:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:41:44:85:05:0E:1F:AB:DC:14:44:E3:A0:53:AC:A3:EE:23:CD:4C
X509v3 Authority Key Identifier:
keyid:B7:8C:E4:D8:A6:32:D1:81:FC:C2:32:51:B7:CF:41:14:1D:BE:14:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B78CE4D8A632D181FCC23251B7CF41141DBE1467.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.119.0/24
Signature Algorithm: sha256WithRSAEncryption
13:fb:58:f7:4b:94:8b:b6:8c:57:40:d6:de:f3:79:9f:58:f7:
fc:59:c6:85:10:96:eb:bd:04:e8:ad:89:4b:d9:74:5d:71:00:
87:e2:23:ab:4d:f5:d7:af:45:84:71:2d:d3:31:42:36:79:cd:
dc:11:34:74:0d:30:c1:17:63:2b:9e:f1:7e:61:d1:d8:0e:3b:
0c:3f:fb:7f:0d:e6:f2:ff:59:cc:1b:c5:81:80:93:f3:71:07:
9e:77:25:13:3e:50:14:df:7a:49:9e:3b:65:fb:77:65:be:50:
d4:28:97:75:2c:a9:58:61:f6:8c:3c:5d:0e:d6:0b:6a:fe:59:
57:86:01:36:d2:10:31:cd:c8:3c:8c:fb:8e:0f:a7:43:b6:fe:
d2:de:71:62:2f:7b:8c:06:04:83:56:0d:b3:eb:9e:5d:39:4a:
3b:7c:71:36:c4:71:f6:e0:97:3a:52:15:62:f8:78:b1:d7:84:
0b:c8:f5:d9:52:fc:fa:2a:56:8e:b4:11:d6:a6:ca:78:98:fa:
1b:17:ba:b2:b1:91:ca:ad:60:b0:5f:65:06:08:67:6f:4f:1d:
27:3f:43:03:44:b2:47:b5:21:be:b1:97:28:64:da:37:19:ed:
53:d4:b5:62:48:60:f6:c4:1d:09:b1:f0:58:45:fa:8a:1d:0e:
de:27:91:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:52 2026 by rpki-client