
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/3136302e32352e33372e302f32342d3234203d3e20313532383332.roa
File: 3136302e32352e33372e302f32342d3234203d3e20313532383332.roa (raw, json)
Hash identifier: mYODDo3xXjU46MAAdCgBohgomvh7OQ+5/NIDJ1DIeOU=
Subject key identifier: D1:0D:8A:2B:53:14:26:8E:95:45:94:B0:7B:27:81:69:CF:00:59:B4
Certificate issuer: /CN=AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB
Certificate serial: 1C3C4FC9E669B288EE2C9CF915D7233656B293FA
Authority key identifier: AC:96:19:8C:9E:15:9F:FA:EE:BD:01:EE:DB:4D:EC:D2:D1:25:B4:FB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/3136302e32352e33372e302f32342d3234203d3e20313532383332.roa
Signing time: Sun 03 May 2026 02:46:19 +0000
ROA not before: Sun 03 May 2026 02:41:19 +0000
ROA not after: Sun 02 May 2027 02:46:19 +0000
asID: 152832
IP address blocks: 160.25.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.crl
rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:3c:4f:c9:e6:69:b2:88:ee:2c:9c:f9:15:d7:23:36:56:b2:93:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB
Validity
Not Before: May 3 02:41:19 2026 GMT
Not After : May 2 02:46:19 2027 GMT
Subject: CN=D10D8A2B5314268E954594B07B278169CF0059B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0d:2a:5f:75:28:4e:bb:c9:f2:16:67:6b:5a:
0f:e6:ef:88:b7:9a:ab:fb:24:48:da:ca:87:49:2a:
3f:81:19:c3:6d:1f:a1:4e:92:1d:62:ec:a0:22:e7:
8d:cb:05:89:89:71:82:92:18:9c:09:9e:f8:c9:46:
58:93:47:36:b6:51:82:03:ab:a9:f8:50:06:e6:94:
25:a7:19:ef:4f:16:a4:ab:3a:02:ac:0e:f0:fd:2c:
58:2c:7a:08:2e:a7:1f:43:fd:c8:72:4f:4d:a4:cb:
d7:60:3f:61:67:fc:de:7e:84:ca:9b:26:9e:d4:04:
8c:21:e1:99:ef:ab:34:a9:70:71:14:75:43:0a:20:
92:50:93:28:09:e6:e5:8a:dc:3d:e5:86:08:4b:60:
7b:b2:b0:05:20:23:3b:bb:d0:53:0e:18:43:28:b7:
fa:c9:ae:37:80:a8:73:c0:e3:93:4a:39:e4:dd:92:
58:22:8a:d9:d8:ee:c6:5a:c4:4c:2c:a7:e1:fb:35:
39:34:27:c7:92:c6:5a:d9:73:d4:1d:5a:fe:fb:96:
65:0f:d3:df:20:62:ee:ee:c3:35:e0:14:9e:d5:24:
16:a8:37:1f:00:b5:fd:37:01:fc:1e:24:df:c2:86:
be:87:2e:f5:d6:be:f2:d0:d1:0f:ce:a9:7b:83:82:
0f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0D:8A:2B:53:14:26:8E:95:45:94:B0:7B:27:81:69:CF:00:59:B4
X509v3 Authority Key Identifier:
keyid:AC:96:19:8C:9E:15:9F:FA:EE:BD:01:EE:DB:4D:EC:D2:D1:25:B4:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/3136302e32352e33372e302f32342d3234203d3e20313532383332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.37.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:93:5e:83:93:59:93:16:c9:86:db:12:09:21:78:01:dd:68:
02:3b:d9:47:f4:31:6c:63:f8:15:58:53:59:fd:4a:ec:31:4c:
55:db:33:6f:aa:a2:03:8d:c3:cc:f4:55:cf:f5:c6:c4:22:ed:
6d:74:2f:7d:94:fc:8e:2c:30:2b:73:91:e1:92:da:3e:eb:2b:
b6:c5:54:e3:29:7d:fc:26:c0:fa:f7:db:a7:92:7c:a8:ed:e2:
99:fc:6b:71:7b:32:64:fe:10:29:33:52:e5:9e:24:9b:ad:da:
67:ed:fa:40:be:38:d8:f0:e5:10:a9:8c:f3:b7:e5:b0:96:e8:
c2:f0:3b:3b:4a:0a:2d:47:11:aa:f6:be:23:a1:aa:b4:3f:ab:
a4:f5:8f:e2:a3:5c:c7:33:2e:36:43:ec:85:ac:f0:c2:f8:bf:
3c:ba:b3:62:86:6c:3b:28:07:19:ea:63:6d:ef:ea:7b:7f:9d:
ec:00:24:11:13:0c:f4:0a:cb:28:a1:64:1c:06:c8:0c:d2:77:
ed:97:b1:b2:27:61:de:ba:a6:b0:e7:1d:1b:b5:12:3d:de:f2:
c0:90:56:8f:d5:5c:98:0a:c3:d6:0e:17:7c:57:f5:e2:25:31:
d8:0f:a0:5a:8a:95:5e:be:c0:d2:64:78:61:7b:36:7c:48:76:
3c:9c:9c:ed
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUHDxPyeZpsojuLJz5FdcjNlayk/owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM5NjE5OEM5RTE1OUZGQUVFQkQwMUVFREI0REVDRDJE
MTI1QjRGQjAeFw0yNjA1MDMwMjQxMTlaFw0yNzA1MDIwMjQ2MTlaMDMxMTAvBgNV
BAMTKEQxMEQ4QTJCNTMxNDI2OEU5NTQ1OTRCMDdCMjc4MTY5Q0YwMDU5QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdDSpfdShOu8nyFmdrWg/m74i3
mqv7JEjayodJKj+BGcNtH6FOkh1i7KAi543LBYmJcYKSGJwJnvjJRliTRza2UYID
q6n4UAbmlCWnGe9PFqSrOgKsDvD9LFgseggupx9D/chyT02ky9dgP2Fn/N5+hMqb
Jp7UBIwh4ZnvqzSpcHEUdUMKIJJQkygJ5uWK3D3lhghLYHuysAUgIzu70FMOGEMo
t/rJrjeAqHPA45NKOeTdklgiitnY7sZaxEwsp+H7NTk0J8eSxlrZc9QdWv77lmUP
098gYu7uwzXgFJ7VJBaoNx8Atf03AfweJN/Chr6HLvXWvvLQ0Q/OqXuDgg+DAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU0Q2KK1MUJo6VRZSweyeBac8AWbQwHwYDVR0j
BBgwFoAUrJYZjJ4Vn/ruvQHu203s0tEltPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
N2Y0YjUzZDgtYjJmZi00OTczLWIxYWMtNmY4NWZhZWFkYmU1LzAvQUM5NjE5OEM5
RTE1OUZGQUVFQkQwMUVFREI0REVDRDJEMTI1QjRGQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9BQzk2MTk4QzlFMTU5RkZBRUVCRDAxRUVEQjRERUNEMkQxMjVC
NEZCLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzdmNGI1M2Q4LWIyZmYtNDk3My1i
MWFjLTZmODVmYWVhZGJlNS8wLzMxMzYzMDJlMzIzNTJlMzMzNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMjM4MzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKAZJTANBgkqhkiG
9w0BAQsFAAOCAQEAppNeg5NZkxbJhtsSCSF4Ad1oAjvZR/QxbGP4FVhTWf1K7DFM
Vdszb6qiA43DzPRVz/XGxCLtbXQvfZT8jiwwK3OR4ZLaPusrtsVU4yl9/CbA+vfb
p5J8qO3imfxrcXsyZP4QKTNS5Z4km63aZ+36QL442PDlEKmM87flsJbowvA7O0oK
LUcRqva+I6GqtD+rpPWP4qNcxzMuNkPshazwwvi/PLqzYoZsOygHGepjbe/qe3+d
7AAkERMM9ArLKKFkHAbIDNJ37Zexsidh3rqmsOcdG7USPd7ywJBWj9VcmArD1g4X
fFf14iUx2A+gWoqVXr7A0mR4YXs2fEh2PJyc7Q==
-----END CERTIFICATE-----
Generated at Wed May 13 03:23:42 2026 by rpki-client