
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/3136302e32322e3232332e302f32342d3234203d3e20313533303633.roa
File: 3136302e32322e3232332e302f32342d3234203d3e20313533303633.roa (raw, json)
Hash identifier: NNCB2v6kiQU+LIFer/0ciSicWehIuEPTki/mtfhUeqk=
Subject key identifier: 8F:E6:A0:16:B8:27:7B:F0:EC:28:5A:DE:85:29:5B:1E:6C:E6:3B:92
Certificate issuer: /CN=04019B19845760AEBFFA4B3395DCC30F1C6D7AF5
Certificate serial: 11DC7C8929FB5C8DC8CE930D1B01419D782D54D0
Authority key identifier: 04:01:9B:19:84:57:60:AE:BF:FA:4B:33:95:DC:C3:0F:1C:6D:7A:F5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/3136302e32322e3232332e302f32342d3234203d3e20313533303633.roa
Signing time: Sun 03 May 2026 02:49:31 +0000
ROA not before: Sun 03 May 2026 02:44:31 +0000
ROA not after: Sun 02 May 2027 02:49:31 +0000
asID: 153063
IP address blocks: 160.22.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.crl
rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:dc:7c:89:29:fb:5c:8d:c8:ce:93:0d:1b:01:41:9d:78:2d:54:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04019B19845760AEBFFA4B3395DCC30F1C6D7AF5
Validity
Not Before: May 3 02:44:31 2026 GMT
Not After : May 2 02:49:31 2027 GMT
Subject: CN=8FE6A016B8277BF0EC285ADE85295B1E6CE63B92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ee:75:60:63:37:8f:27:4b:89:fa:1d:b0:e3:
5f:1e:f0:a9:d8:a3:e3:a6:21:95:b1:88:fc:c0:92:
7c:a2:ce:47:57:29:85:87:27:f7:cb:38:01:c1:70:
2a:83:72:80:b6:8e:38:67:72:b2:15:be:0f:18:70:
c2:09:e2:32:6e:a3:21:6f:0f:80:98:7a:d4:52:40:
ac:4d:10:2e:86:de:ff:91:6e:4b:85:7f:34:af:bf:
50:6e:88:e2:f0:d5:8b:a1:f2:c2:86:29:a0:71:e1:
79:8d:e4:d6:fe:00:c9:93:df:3f:16:b5:93:36:8e:
b9:87:0b:f3:3a:11:9e:06:8b:06:32:84:6a:80:f2:
ce:df:bb:85:20:c7:b1:2a:f3:41:ff:87:f9:b4:08:
1a:cf:71:30:c2:56:44:73:9b:b2:67:68:71:66:78:
c0:40:0a:b7:49:0b:46:d8:c3:e5:cb:d8:66:44:d6:
d7:53:eb:fe:07:0f:a9:35:b7:59:93:f4:05:2f:23:
e2:94:da:8e:a5:ab:df:e0:84:55:c8:0a:e5:f5:8d:
17:7b:d8:8e:53:02:66:df:cd:73:41:2e:0f:4d:ae:
67:f5:f8:d9:7b:d8:96:a6:ee:90:67:88:12:a4:81:
34:79:6b:8b:30:83:69:c1:77:13:0e:bf:70:35:7b:
0e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E6:A0:16:B8:27:7B:F0:EC:28:5A:DE:85:29:5B:1E:6C:E6:3B:92
X509v3 Authority Key Identifier:
keyid:04:01:9B:19:84:57:60:AE:BF:FA:4B:33:95:DC:C3:0F:1C:6D:7A:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/04019B19845760AEBFFA4B3395DCC30F1C6D7AF5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b29e912-35c6-480f-b869-2a0f8aef30d2/0/3136302e32322e3232332e302f32342d3234203d3e20313533303633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.223.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:0e:e3:83:6d:68:35:e4:e5:a5:06:c8:4e:2d:ca:13:42:a6:
56:f0:90:f7:11:da:04:06:51:81:af:f2:ce:60:6c:85:cd:d2:
77:00:2f:45:83:cc:a7:63:6d:53:e7:5f:1d:7f:44:2d:66:87:
ab:49:8d:d6:1e:5b:a2:fe:d0:0b:74:1c:a8:f1:cc:33:a3:04:
d4:41:cb:fc:cf:58:4e:b3:0b:33:93:a0:d8:b3:6c:64:bd:ae:
20:54:24:ff:e5:21:55:21:e4:c7:07:0c:57:f8:03:27:e7:6f:
e0:57:3b:a4:49:18:fd:4e:b8:83:53:8b:3f:0d:87:86:81:da:
fe:a4:24:a9:e1:59:be:be:99:b1:f4:66:d1:35:7e:dd:d5:b4:
c7:8e:ef:06:79:16:e6:54:d4:ba:e4:f1:02:68:09:fc:26:d0:
f4:8b:dc:97:ab:79:d4:61:ee:6b:bf:3b:35:72:e3:2f:38:2f:
86:86:1d:9f:6f:f0:2f:83:b0:97:8e:3b:22:46:be:b6:11:88:
cc:bc:5e:39:2e:44:95:97:26:61:d3:e7:30:4e:54:03:47:21:
8e:ee:01:6c:e9:47:7b:0d:10:4f:e8:db:0e:b9:62:59:d6:49:
04:e5:ae:7c:0f:06:5e:46:9e:dc:0c:47:bd:42:01:73:60:d8:
82:58:3f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:52 2026 by rpki-client