
$ rpki-client -vvf rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa
File: 3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa (raw, json)
Hash identifier: KrFgsVnJ/CPVgce61GzFtNxXXABIAjXPOpkQ6UBGiUQ=
Subject key identifier: 9D:BE:F8:8B:E2:5C:92:6E:4B:53:E3:6F:9D:9A:47:6D:18:FF:F1:CA
Certificate issuer: /CN=F5B5D46C5DCE844707C0D789603977CD1FE1EAF6
Certificate serial: 0C9F7A836992D85A57CCB042AC8265B584281671
Authority key identifier: F5:B5:D4:6C:5D:CE:84:47:07:C0:D7:89:60:39:77:CD:1F:E1:EA:F6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa
Signing time: Sun 03 May 2026 02:43:46 +0000
ROA not before: Sun 03 May 2026 02:38:46 +0000
ROA not after: Sun 02 May 2027 02:43:46 +0000
asID: 153157
IP address blocks: 160.191.198.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl
rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:9f:7a:83:69:92:d8:5a:57:cc:b0:42:ac:82:65:b5:84:28:16:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5B5D46C5DCE844707C0D789603977CD1FE1EAF6
Validity
Not Before: May 3 02:38:46 2026 GMT
Not After : May 2 02:43:46 2027 GMT
Subject: CN=9DBEF88BE25C926E4B53E36F9D9A476D18FFF1CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:94:5d:dc:ff:7a:42:a4:11:70:78:66:e2:f5:
60:c4:5a:f0:5d:ec:80:36:a8:e1:93:83:25:25:23:
56:c2:a1:71:ad:b2:4d:54:d9:20:ae:fa:7b:42:fb:
2c:98:6a:ad:f0:50:18:0d:8e:58:c9:be:55:17:2d:
ea:93:d9:01:dd:3d:9e:af:55:e6:de:8f:8c:75:a3:
19:e1:e0:9a:11:1c:51:ad:11:c5:cf:9a:bf:45:c9:
e8:80:7a:90:bd:58:37:cd:1c:5b:65:5b:3f:62:9a:
d8:62:88:dd:31:35:d5:5f:bb:52:f6:78:2a:fa:dd:
b6:1f:a7:8c:52:08:e7:7f:26:15:c4:ba:e2:c1:5a:
92:16:67:e6:54:10:85:6a:27:42:96:ef:6c:64:c1:
ba:69:46:e0:6a:dd:2c:bd:1f:1c:3f:7d:7a:30:f2:
16:7f:54:9d:de:59:1d:f0:16:20:46:46:4b:1f:04:
3a:21:18:cb:91:89:fd:63:bb:91:0b:07:77:e1:f9:
13:60:b8:da:08:9c:4a:a0:eb:e5:87:a5:20:fe:2a:
88:2b:b0:fe:42:a1:12:a0:fe:31:f3:1c:cf:cd:12:
f9:2a:04:54:c9:a9:eb:7a:85:b5:73:89:a3:f8:b0:
2a:d8:96:82:32:d0:db:30:9f:1d:12:bb:cd:f7:57:
2b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BE:F8:8B:E2:5C:92:6E:4B:53:E3:6F:9D:9A:47:6D:18:FF:F1:CA
X509v3 Authority Key Identifier:
keyid:F5:B5:D4:6C:5D:CE:84:47:07:C0:D7:89:60:39:77:CD:1F:E1:EA:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.191.198.0/23
Signature Algorithm: sha256WithRSAEncryption
28:4c:98:28:f7:2f:09:03:8e:e6:df:e5:7b:26:5b:a6:2f:92:
7e:d7:e0:39:99:83:8c:9f:d7:dc:01:7d:0e:b5:a2:88:24:5c:
54:c3:e4:93:08:43:55:ae:f4:80:69:38:ca:ca:63:57:33:55:
af:66:59:14:b7:61:38:ef:70:d7:f3:ad:61:76:a7:e8:8f:77:
e9:cc:25:20:d8:94:10:4f:f7:43:85:81:22:97:05:8e:71:2b:
ef:e1:a2:18:44:53:2d:e2:54:14:c6:5f:ef:22:4f:95:05:18:
50:63:43:40:d9:b4:6e:d9:66:30:05:82:ad:ef:9b:2c:cc:8b:
43:0e:af:88:54:94:24:ab:ce:cc:8e:66:f3:25:2f:d0:a9:eb:
03:5c:44:b5:69:df:cf:06:5a:f1:b6:5e:fe:c0:16:48:0c:24:
51:0d:44:69:3d:7c:b5:b7:12:41:c4:5b:0e:69:9b:68:a1:cd:
43:58:a7:fb:c5:11:09:b3:cb:45:a2:08:bb:95:80:38:6d:53:
8a:8e:7c:59:19:2a:02:cd:c9:29:49:fb:52:97:a0:60:0c:d1:
58:f6:c6:9f:47:7c:58:d4:61:3d:32:d0:03:9a:d1:12:49:71:
d6:55:50:e9:78:22:41:9a:aa:e3:af:b5:4d:b3:06:79:e6:a1:
7d:af:17:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:37:46 2026 by rpki-client