
$ rpki-client -vvf rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/3136302e32352e35332e302f32342d3234203d3e20313533303738.roa
File: 3136302e32352e35332e302f32342d3234203d3e20313533303738.roa (raw, json)
Hash identifier: YkRgmQFG0awSR2V4EqFn99OnF2XHm125JZP/mEf4NVk=
Subject key identifier: C8:93:62:CF:CF:07:FA:D1:EF:3B:E8:DD:FF:A2:18:5B:48:01:72:20
Certificate issuer: /CN=AD19D226489003F092B69D57F2AEE4849BC2F21F
Certificate serial: 11ADEBB4F5CE099F7E6F5A2B1A6DA87DD1A98618
Authority key identifier: AD:19:D2:26:48:90:03:F0:92:B6:9D:57:F2:AE:E4:84:9B:C2:F2:1F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/3136302e32352e35332e302f32342d3234203d3e20313533303738.roa
Signing time: Sun 03 May 2026 02:38:54 +0000
ROA not before: Sun 03 May 2026 02:33:54 +0000
ROA not after: Sun 02 May 2027 02:38:54 +0000
asID: 153078
IP address blocks: 160.25.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.crl
rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:ad:eb:b4:f5:ce:09:9f:7e:6f:5a:2b:1a:6d:a8:7d:d1:a9:86:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD19D226489003F092B69D57F2AEE4849BC2F21F
Validity
Not Before: May 3 02:33:54 2026 GMT
Not After : May 2 02:38:54 2027 GMT
Subject: CN=C89362CFCF07FAD1EF3BE8DDFFA2185B48017220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b9:d8:57:30:80:7d:fc:dc:26:d5:16:0e:27:
88:af:44:a3:be:b4:e8:e1:bb:6f:a3:40:ee:95:d4:
e5:c8:ea:13:fd:91:6e:ab:45:b1:96:ce:9b:20:aa:
54:d7:74:7e:74:90:17:67:46:30:1f:95:7e:97:89:
95:e8:6e:a4:b6:1b:43:8a:29:9e:5d:6b:b5:40:10:
00:e5:10:50:f2:8e:42:06:ae:47:16:6b:9f:64:72:
3c:fc:9e:db:05:e9:15:19:1d:d3:2b:6c:69:18:db:
67:54:a5:10:b8:68:27:2e:36:f4:4c:53:02:b7:56:
9f:d1:5b:e7:33:0c:f1:d4:91:48:b3:dc:e4:ea:5f:
12:b0:96:68:4c:ea:f1:4d:64:26:ec:80:64:bc:dc:
93:20:72:ed:89:fa:23:cd:ab:e0:c6:ab:c1:79:4c:
94:24:ec:1e:8c:50:e2:96:1a:9b:73:64:5a:df:0e:
81:4a:93:61:9f:69:3c:2c:25:35:85:8a:fe:02:b2:
62:b1:4a:49:2d:47:90:08:32:5b:93:6e:d1:55:de:
c5:37:ce:3c:69:e6:84:12:f0:3a:42:94:66:97:f9:
e1:06:7d:f8:7c:a1:41:45:af:ed:09:34:c1:63:f7:
c5:a9:58:27:01:34:6e:b4:83:f7:f4:c3:9a:f3:bc:
b9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:93:62:CF:CF:07:FA:D1:EF:3B:E8:DD:FF:A2:18:5B:48:01:72:20
X509v3 Authority Key Identifier:
keyid:AD:19:D2:26:48:90:03:F0:92:B6:9D:57:F2:AE:E4:84:9B:C2:F2:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AD19D226489003F092B69D57F2AEE4849BC2F21F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/3136302e32352e35332e302f32342d3234203d3e20313533303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.53.0/24
Signature Algorithm: sha256WithRSAEncryption
68:1a:a8:dc:b8:e5:26:9c:18:42:df:9b:b3:2d:43:32:eb:ab:
7b:a8:9e:e6:34:8b:55:3a:6b:31:08:3d:53:b6:9d:f7:9a:3a:
4c:35:0f:d5:94:78:6d:a3:f8:10:ef:a9:fe:94:56:ce:c7:cf:
bb:45:5b:49:63:4b:e9:d1:1d:86:ae:78:81:88:b4:d8:97:5d:
1a:ff:d0:f4:35:e6:53:30:40:27:e1:49:d7:99:56:0f:0b:70:
33:9a:9e:c5:53:03:db:fc:6a:1f:9a:10:e7:37:e3:41:8a:2f:
36:8d:69:ac:97:06:1e:93:a2:da:b8:2e:bf:43:94:47:9d:f8:
f2:0a:a3:53:de:a2:a8:44:ea:7e:31:c6:8d:ec:e6:2d:4e:ab:
64:b1:c6:41:f4:34:e7:4a:5c:65:10:e1:09:dd:9a:35:b3:6d:
a6:26:8c:92:50:9c:bc:5d:a4:46:f6:4f:d4:de:86:40:e3:f3:
eb:5e:83:bc:63:e4:89:1e:a4:a0:39:ba:14:c1:04:08:4a:66:
5d:91:40:c4:30:02:bd:28:52:38:53:1d:ca:b3:65:80:51:e9:
92:41:c2:33:a8:52:50:c3:12:8d:cd:b3:aa:43:5e:73:1a:9a:
a6:51:29:4f:c6:ae:52:cc:86:b2:c7:da:76:7d:90:ed:28:4d:
72:7c:a4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:57:47 2026 by rpki-client