
$ rpki-client -vvf rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/3136302e3139312e3138302e302f32342d3234203d3e20313338303839.roa
File: 3136302e3139312e3138302e302f32342d3234203d3e20313338303839.roa (raw, json)
Hash identifier: 4fUkU+nbH3X0YWVA/nyzT1vHqWQSMJDAjWYPAHB9Lcc=
Subject key identifier: 60:12:2F:26:0A:62:7C:55:51:02:A5:2A:31:F6:CE:0F:C3:7F:B8:C4
Certificate issuer: /CN=449858C6C35F8F9C8CAA75A065686F732F6F4F3B
Certificate serial: 0CE642BC35B0B274373AB25CBB0FBC1709CB0CF9
Authority key identifier: 44:98:58:C6:C3:5F:8F:9C:8C:AA:75:A0:65:68:6F:73:2F:6F:4F:3B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/3136302e3139312e3138302e302f32342d3234203d3e20313338303839.roa
Signing time: Sun 03 May 2026 02:53:00 +0000
ROA not before: Sun 03 May 2026 02:48:00 +0000
ROA not after: Sun 02 May 2027 02:53:00 +0000
asID: 138089
IP address blocks: 160.191.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.crl
rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:33:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:e6:42:bc:35:b0:b2:74:37:3a:b2:5c:bb:0f:bc:17:09:cb:0c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449858C6C35F8F9C8CAA75A065686F732F6F4F3B
Validity
Not Before: May 3 02:48:00 2026 GMT
Not After : May 2 02:53:00 2027 GMT
Subject: CN=60122F260A627C555102A52A31F6CE0FC37FB8C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8e:7a:0e:e7:f6:fc:04:55:3c:0f:c8:ca:1b:
fb:24:9b:4b:08:5b:6e:44:70:7d:11:7f:e1:58:d4:
77:19:47:64:15:83:9e:04:d6:09:d7:7d:72:a1:ba:
ca:de:a3:e1:21:4f:30:bf:19:8d:e8:31:fd:e4:7b:
85:25:f5:ef:cf:6b:fe:97:49:51:e8:73:97:6d:13:
0f:21:28:a8:cf:f0:8f:8f:1e:ea:2e:68:3d:f2:63:
ce:3d:4b:e8:1c:8a:71:85:3f:6b:ac:a0:2d:a1:15:
b4:d7:cc:a9:f2:62:0b:25:87:05:7f:26:74:84:4c:
22:e5:f9:26:6b:bc:b0:3c:93:71:9e:f2:ad:26:30:
b9:02:0c:27:c7:59:66:c4:4e:92:b4:bc:16:ea:b2:
da:98:15:dd:74:8d:3f:d5:77:75:8e:d4:ea:ac:08:
26:ad:82:d1:35:ed:0f:01:a2:1f:ce:8d:7c:83:91:
8b:a2:72:20:b2:e7:ac:6a:9c:38:fd:32:c1:0e:70:
16:14:74:52:13:33:b5:0a:5d:16:86:e0:80:4e:2f:
44:84:fb:8c:95:cc:9a:78:40:3c:6d:4e:5c:b9:65:
7e:ce:90:c7:bf:3b:ec:3b:79:12:a6:05:8a:1f:d4:
45:0d:d6:fa:7a:40:c8:a5:18:74:33:0c:05:b5:13:
39:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:12:2F:26:0A:62:7C:55:51:02:A5:2A:31:F6:CE:0F:C3:7F:B8:C4
X509v3 Authority Key Identifier:
keyid:44:98:58:C6:C3:5F:8F:9C:8C:AA:75:A0:65:68:6F:73:2F:6F:4F:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/449858C6C35F8F9C8CAA75A065686F732F6F4F3B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/3136302e3139312e3138302e302f32342d3234203d3e20313338303839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.191.180.0/24
Signature Algorithm: sha256WithRSAEncryption
29:3c:96:99:92:db:50:e1:3a:85:43:97:57:10:dc:68:07:02:
73:de:cb:67:42:16:5d:79:fe:1f:56:92:29:3e:e3:ea:06:9e:
7b:c1:ee:f5:28:8b:77:d3:e1:01:63:19:74:6e:c5:e2:0e:27:
b0:04:f7:9f:0d:a3:28:48:eb:47:cb:b8:55:8e:15:ba:e7:34:
7c:5b:1e:7b:0b:40:3a:c0:d2:3d:24:95:c5:c1:f8:99:e8:c6:
fe:7b:3e:d2:b7:e1:7d:35:15:b9:1a:85:d6:5e:a4:69:bd:a6:
20:6d:f1:cb:82:83:cd:f0:44:62:10:51:e6:7c:72:6d:bd:b8:
a5:06:61:2d:0a:bf:83:84:d8:41:a8:d3:b2:e5:56:cd:9c:f8:
c6:83:e5:a5:79:8d:ce:73:d3:4c:dc:cb:eb:55:89:f6:38:f6:
21:40:dd:9c:41:81:d8:72:e5:f5:60:87:e6:68:b8:d3:7f:5d:
52:40:bc:d6:f3:63:00:0c:90:80:bb:4d:c7:ab:84:dd:c1:8d:
03:42:08:e3:eb:e3:14:2e:39:89:27:27:23:ad:05:30:13:a4:
67:5a:47:d1:71:ee:7d:f3:0d:db:4f:ca:b3:a3:f8:c1:42:6f:
d9:45:3c:c9:55:83:d4:10:36:74:60:ab:c2:1f:c5:b6:14:d4:
35:92:54:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:05:51 2026 by rpki-client