
$ rpki-client -vvf rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa
File: 3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa (raw, json)
Hash identifier: kBeqJoRUsHXxY39mgRSdQH97sO/Q6gRFjIsnk6Mz6iw=
Subject key identifier: 6F:50:21:8D:AC:CF:F9:E7:21:F7:CD:F0:B4:5B:95:61:25:8D:45:52
Certificate issuer: /CN=3A3AAC87AB4378730C3C8CFD373E558E1273053C
Certificate serial: 71B816C4C3DE8952378B643DF22C8B1E744E387D
Authority key identifier: 3A:3A:AC:87:AB:43:78:73:0C:3C:8C:FD:37:3E:55:8E:12:73:05:3C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa
Signing time: Sun 03 May 2026 02:51:36 +0000
ROA not before: Sun 03 May 2026 02:46:36 +0000
ROA not after: Sun 02 May 2027 02:51:36 +0000
asID: 140456
IP address blocks: 160.22.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl
rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:b8:16:c4:c3:de:89:52:37:8b:64:3d:f2:2c:8b:1e:74:4e:38:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A3AAC87AB4378730C3C8CFD373E558E1273053C
Validity
Not Before: May 3 02:46:36 2026 GMT
Not After : May 2 02:51:36 2027 GMT
Subject: CN=6F50218DACCFF9E721F7CDF0B45B9561258D4552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d5:39:83:2c:00:89:42:bd:a7:9e:66:86:b2:
45:1d:46:30:85:5a:6b:09:86:8c:e8:cc:a9:c1:26:
0b:68:be:9c:ce:e1:69:fd:4c:bd:f0:f0:59:3d:46:
30:67:1b:05:3f:7d:60:e5:fa:b3:e1:15:c8:94:7c:
71:f2:f2:15:36:b5:69:cd:2f:c1:6d:bd:1d:94:67:
bf:4d:6e:54:5b:86:b3:d1:8d:6e:18:23:32:86:71:
ec:91:aa:71:ce:eb:06:3f:f0:e6:03:fe:b1:06:39:
2c:18:8c:2d:71:1c:e4:34:f7:7b:c1:13:30:c4:ce:
2d:5d:e2:b4:2e:86:f3:ef:f4:3b:ec:89:1b:be:c9:
73:07:94:d4:72:91:2d:e8:14:7e:c0:e3:bc:f7:2b:
96:d3:90:5e:a6:95:88:de:aa:9d:47:a0:3c:6e:1e:
9d:cd:7f:89:fd:46:80:bd:35:89:cf:ee:c4:c7:0c:
e6:e5:17:2e:f5:95:db:03:7b:c8:58:51:86:44:97:
e3:b4:e7:6d:19:2d:9d:05:3d:9b:dc:d0:74:4a:4b:
b3:57:cb:c1:5c:eb:0b:5a:cc:ce:31:56:04:ef:96:
c5:08:8a:c1:e3:69:cd:a8:82:f0:eb:0b:e6:04:84:
b5:55:16:02:95:2c:65:d8:bf:78:b9:3b:08:e2:74:
e8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:50:21:8D:AC:CF:F9:E7:21:F7:CD:F0:B4:5B:95:61:25:8D:45:52
X509v3 Authority Key Identifier:
keyid:3A:3A:AC:87:AB:43:78:73:0C:3C:8C:FD:37:3E:55:8E:12:73:05:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.251.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:7e:3e:b7:cc:8b:4a:b3:f0:dd:a5:02:ea:1a:18:47:6c:0e:
3a:12:21:fa:1d:bf:a0:53:92:bb:20:4d:cd:83:f4:2b:f9:ba:
52:7d:53:d8:ee:2b:93:e1:81:d4:c6:62:b8:00:8d:f4:64:c8:
72:a1:d0:4a:55:cd:b2:4c:23:c6:66:32:38:0b:d8:4b:0c:73:
e9:d4:b9:92:c0:1b:cc:4c:84:97:98:ec:b9:2d:81:7e:d0:20:
07:20:36:cc:40:da:a0:70:b2:0c:6c:e7:79:11:4e:50:8c:72:
91:f7:f6:1e:55:f7:46:06:09:1c:ae:ca:bb:9a:f6:a3:ad:4d:
c5:2b:4e:82:9f:59:85:1a:a8:eb:7c:db:f9:ce:ac:69:c0:5e:
c6:fa:9a:12:e0:78:16:ba:e1:02:e3:fe:10:ba:19:16:3d:c1:
1b:17:77:ab:2e:52:f9:f5:4c:c4:ac:e5:00:82:f4:a2:69:da:
37:dd:95:01:e6:52:a5:fa:31:05:a7:f2:15:18:b7:d3:34:33:
eb:70:69:7f:df:78:ef:50:69:74:bd:cb:09:ea:ed:3d:b7:f4:
9c:ea:c3:71:d5:e7:22:a5:3b:cc:ee:98:a9:f7:71:5e:13:db:
37:06:4c:64:cc:21:e0:4d:58:c6:ea:b1:b0:94:d7:c7:d2:e0:
a3:b3:75:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:57:01 2026 by rpki-client