
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/3136302e32322e33372e302f32342d3234203d3e20313532373933.roa
File: 3136302e32322e33372e302f32342d3234203d3e20313532373933.roa (raw, json)
Hash identifier: mjBCiOFY82W/5BaaCPKdfmkELXQJ5JnJLV1VHbKxJAE=
Subject key identifier: DD:20:D4:4F:F8:B1:63:BE:27:3D:50:BD:01:B5:E0:28:6D:DE:40:4C
Certificate issuer: /CN=1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97
Certificate serial: 27D3F00BD718FA72512F1641E857C6F6CBEF5A28
Authority key identifier: 1C:5C:3A:AF:7D:5C:FE:38:CE:AE:53:6C:A9:4C:F0:70:FF:17:7D:97
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/3136302e32322e33372e302f32342d3234203d3e20313532373933.roa
Signing time: Sun 03 May 2026 02:51:18 +0000
ROA not before: Sun 03 May 2026 02:46:18 +0000
ROA not after: Sun 02 May 2027 02:51:18 +0000
asID: 152793
IP address blocks: 160.22.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.crl
rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:15:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:d3:f0:0b:d7:18:fa:72:51:2f:16:41:e8:57:c6:f6:cb:ef:5a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97
Validity
Not Before: May 3 02:46:18 2026 GMT
Not After : May 2 02:51:18 2027 GMT
Subject: CN=DD20D44FF8B163BE273D50BD01B5E0286DDE404C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:96:65:03:f5:ee:52:8e:62:42:47:9f:49:bc:
13:64:af:24:f2:03:24:8c:25:cb:20:41:5b:4c:38:
8f:93:7b:2d:ea:44:43:28:ca:24:75:62:78:3a:01:
78:05:b8:d6:cf:c4:a0:79:72:ae:82:a8:79:97:88:
f1:cd:22:e2:b6:67:f4:4d:e9:31:59:c2:92:41:fa:
bd:7e:94:b3:d0:51:76:24:a1:50:96:0b:7b:44:6c:
5a:33:32:55:7c:d4:80:95:ba:b8:0d:ea:85:52:3c:
96:95:4f:b0:ef:43:e9:d9:c5:9f:30:eb:4f:3c:f5:
b4:c4:58:0c:26:ae:7b:f7:fb:21:a5:6c:40:06:7b:
81:87:1a:d2:10:b2:a3:13:b1:95:28:9f:fb:74:5d:
47:8f:84:0e:0a:fe:97:65:67:3b:5a:f2:c1:8a:b7:
01:5f:85:bf:16:58:13:06:07:6e:d0:e0:12:b0:71:
ee:2a:5a:82:d1:07:97:72:b9:2a:07:b3:b6:c5:b2:
58:42:1c:6c:01:bc:ce:5f:ec:2d:12:43:c9:d3:e9:
49:6c:27:ca:9e:91:da:7e:d0:d5:31:6d:5e:8a:79:
05:69:68:70:90:97:8b:75:19:f1:c4:41:0e:6a:90:
46:d4:8e:2e:d2:e1:99:ff:1f:56:95:50:4f:a3:34:
8b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:20:D4:4F:F8:B1:63:BE:27:3D:50:BD:01:B5:E0:28:6D:DE:40:4C
X509v3 Authority Key Identifier:
keyid:1C:5C:3A:AF:7D:5C:FE:38:CE:AE:53:6C:A9:4C:F0:70:FF:17:7D:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1C5C3AAF7D5CFE38CEAE536CA94CF070FF177D97.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/3136302e32322e33372e302f32342d3234203d3e20313532373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.37.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ac:1b:96:2c:ba:88:db:d8:e5:8f:8f:ea:63:60:65:d1:b0:
f9:57:4b:1a:20:04:c2:fb:fb:b3:87:f2:65:61:7a:0c:31:b2:
a6:82:58:d9:2e:89:28:3d:bf:17:31:66:2f:73:e8:1f:cd:c2:
d7:14:85:32:7d:a5:d9:7f:9b:fe:13:9c:21:58:6d:4b:49:56:
d6:3d:48:6a:5d:f6:f2:99:76:9a:3d:b9:ee:35:c0:4a:d6:29:
0e:ec:3a:33:36:64:bd:2c:0f:6c:bf:7b:a1:02:74:4e:7d:ca:
aa:d4:0a:34:3b:a0:b1:04:9e:72:d4:ff:cb:e9:49:9b:93:84:
13:e0:eb:c3:90:09:e8:25:f4:fa:da:e1:80:71:4b:1f:32:56:
8a:54:18:81:43:de:0e:12:db:6e:e7:5b:14:bf:2b:10:e5:84:
b6:69:e7:e6:0d:06:45:5e:10:36:49:61:94:01:a1:8c:46:ab:
1d:0a:97:4d:b2:c7:76:24:6b:8a:1e:b4:15:e3:5e:81:09:cc:
cb:f1:ae:ed:e8:1f:f8:12:23:ec:8e:33:d7:e8:27:ce:4d:20:
ef:be:78:57:f8:12:02:14:88:50:44:80:58:58:e6:ef:07:6d:
47:00:6c:22:5c:02:06:81:98:c2:a6:b1:6e:ae:a3:2b:af:5e:
a2:43:23:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:47 2026 by rpki-client