
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/3136302e32322e3133342e302f32332d3234203d3e20313532383130.roa
File: 3136302e32322e3133342e302f32332d3234203d3e20313532383130.roa (raw, json)
Hash identifier: 5nmyDoEgajCNa3aQTVrmwY0LqSO8VPqoagBlAooNpbg=
Subject key identifier: DF:9B:C9:05:FC:AE:D9:89:80:AF:A5:67:13:34:80:95:97:71:19:A5
Certificate issuer: /CN=54026028AD87AC49BD097621095F68B69F4EF6DB
Certificate serial: 78DE6634164047BD9D7E3814A21241124F82D8D8
Authority key identifier: 54:02:60:28:AD:87:AC:49:BD:09:76:21:09:5F:68:B6:9F:4E:F6:DB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54026028AD87AC49BD097621095F68B69F4EF6DB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/3136302e32322e3133342e302f32332d3234203d3e20313532383130.roa
Signing time: Sun 03 May 2026 02:47:41 +0000
ROA not before: Sun 03 May 2026 02:42:41 +0000
ROA not after: Sun 02 May 2027 02:47:41 +0000
asID: 152810
IP address blocks: 160.22.134.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/54026028AD87AC49BD097621095F68B69F4EF6DB.crl
rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/54026028AD87AC49BD097621095F68B69F4EF6DB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54026028AD87AC49BD097621095F68B69F4EF6DB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:52:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:de:66:34:16:40:47:bd:9d:7e:38:14:a2:12:41:12:4f:82:d8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54026028AD87AC49BD097621095F68B69F4EF6DB
Validity
Not Before: May 3 02:42:41 2026 GMT
Not After : May 2 02:47:41 2027 GMT
Subject: CN=DF9BC905FCAED98980AFA56713348095977119A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e7:8b:44:d5:1a:93:ec:48:1e:06:f8:7a:74:
eb:ab:61:66:ab:95:60:f2:68:aa:e1:a5:8c:88:4e:
07:bd:35:8c:55:57:f1:d9:ef:82:01:3f:42:0f:55:
61:b2:22:36:dc:30:8a:04:36:30:86:b4:f4:8e:f4:
43:bf:69:64:be:6a:47:e4:7b:56:f7:5b:b8:83:5d:
0e:e6:b2:de:92:49:a7:62:da:00:72:49:a9:b2:bc:
47:98:52:2a:5c:d3:51:a5:c4:99:f4:0a:b3:86:94:
6b:3f:0d:4d:87:59:08:91:04:72:2a:ac:fc:b3:a2:
14:ba:65:db:77:6b:9d:48:28:c2:cd:8b:b3:73:e0:
5b:9c:3a:12:5d:7e:d4:ac:ad:1c:4e:ca:80:6f:c0:
35:d3:4e:39:6b:72:99:54:b6:3b:6c:dc:73:42:39:
4f:3a:ae:95:b0:cb:a4:dc:a5:14:06:6d:2a:98:e8:
89:47:3f:ab:99:48:83:03:46:9a:04:d1:74:0b:59:
3b:ca:8b:78:05:a2:f0:58:e5:52:2c:fd:04:35:52:
e5:d2:2d:29:17:62:e5:89:f7:c8:1b:71:fd:17:47:
54:bc:0c:78:e5:dc:60:3c:bb:a9:81:07:66:3b:7e:
d2:42:88:77:6b:b2:84:64:e3:b0:f9:48:aa:d3:84:
15:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9B:C9:05:FC:AE:D9:89:80:AF:A5:67:13:34:80:95:97:71:19:A5
X509v3 Authority Key Identifier:
keyid:54:02:60:28:AD:87:AC:49:BD:09:76:21:09:5F:68:B6:9F:4E:F6:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/54026028AD87AC49BD097621095F68B69F4EF6DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/54026028AD87AC49BD097621095F68B69F4EF6DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/3136302e32322e3133342e302f32332d3234203d3e20313532383130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.134.0/23
Signature Algorithm: sha256WithRSAEncryption
84:76:81:76:c3:1e:ca:a8:d9:db:15:27:06:d9:e2:f8:9f:c3:
41:d3:1d:26:1b:b9:3b:3a:79:bb:21:b8:f8:d5:be:61:73:a8:
b6:28:6d:6c:1a:49:cf:c5:4c:76:94:66:52:91:a4:aa:e1:61:
da:ea:fc:65:38:2d:5b:8a:a1:25:ba:8e:e2:2e:03:52:3e:93:
29:2c:bc:ea:84:d9:91:5a:54:e9:1d:39:2c:31:68:6f:ac:d5:
54:cf:9b:4a:02:d6:8d:b1:f0:ba:6c:72:df:e2:a1:6e:b5:b2:
8d:7b:3c:48:25:45:ea:b9:10:5f:b4:9f:55:74:4f:a8:dd:06:
21:16:6d:8a:ad:82:73:a0:99:c7:7b:a1:50:a1:04:a1:01:a9:
b7:5a:b3:06:c8:6d:d3:38:30:9a:bc:c4:6d:3f:49:91:87:89:
00:8a:dd:a3:e8:51:0f:a9:b7:00:28:61:9e:0f:3c:fd:ca:c1:
40:75:1c:a5:b5:55:52:38:61:bc:a2:d9:ab:47:9a:c2:9c:b3:
1e:32:7d:62:13:1a:6f:94:8c:66:c9:9c:fd:c1:ac:2e:72:b3:
91:23:93:80:84:3d:76:68:a7:85:b5:cb:1e:d6:dd:84:f9:d2:
95:3b:4b:54:81:be:91:c5:04:0f:98:61:e4:c7:dc:32:e2:f1:
0a:07:41:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:00:02 2026 by rpki-client