
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/3136302e3139312e3233342e302f32342d3234203d3e20313533343932.roa
File: 3136302e3139312e3233342e302f32342d3234203d3e20313533343932.roa (raw, json)
Hash identifier: /8ZMrBAQoa3qQ8hBZzRb+TXTbN8qY8Wvj8VBQo+giW0=
Subject key identifier: A5:D7:75:69:C5:CA:BC:BE:7D:B1:A7:6F:8C:A5:E8:E7:E0:03:DE:36
Certificate issuer: /CN=A4249B719E5F988286AD3B4164C4E77F434FF948
Certificate serial: 7DCE76CF9778C1231BF2B85824A26C7466E229BE
Authority key identifier: A4:24:9B:71:9E:5F:98:82:86:AD:3B:41:64:C4:E7:7F:43:4F:F9:48
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A4249B719E5F988286AD3B4164C4E77F434FF948.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/3136302e3139312e3233342e302f32342d3234203d3e20313533343932.roa
Signing time: Sun 03 May 2026 02:54:26 +0000
ROA not before: Sun 03 May 2026 02:49:26 +0000
ROA not after: Sun 02 May 2027 02:54:26 +0000
asID: 153492
IP address blocks: 160.191.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.crl
rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A4249B719E5F988286AD3B4164C4E77F434FF948.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:ce:76:cf:97:78:c1:23:1b:f2:b8:58:24:a2:6c:74:66:e2:29:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4249B719E5F988286AD3B4164C4E77F434FF948
Validity
Not Before: May 3 02:49:26 2026 GMT
Not After : May 2 02:54:26 2027 GMT
Subject: CN=A5D77569C5CABCBE7DB1A76F8CA5E8E7E003DE36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:de:2b:13:42:eb:ca:e3:1d:19:d3:7b:7f:94:
8b:e0:11:97:78:b3:99:60:ef:80:c1:9e:d6:7a:6d:
65:c3:72:78:7f:b0:8c:55:09:a6:f5:4d:2a:3e:39:
fc:88:82:45:e3:58:2b:49:45:82:60:56:69:c3:38:
4d:1d:5b:d6:8b:41:86:13:ce:ff:51:f6:b0:a0:09:
bb:17:14:4d:f8:6c:26:38:8e:13:d9:53:f1:63:2f:
b2:35:2c:7c:ed:c2:aa:42:67:6c:bb:b3:5d:09:07:
30:f3:83:84:9e:fb:7d:58:ef:b6:ec:86:39:61:40:
39:06:65:1b:cf:30:88:16:28:95:8b:71:12:6a:c5:
69:42:df:97:26:44:9c:7f:8b:72:d6:60:4a:a2:e0:
89:39:9a:3b:86:84:c2:3e:6a:0e:62:8c:8f:3f:97:
72:16:12:cb:ad:e5:00:59:46:e1:8b:f6:b5:38:3a:
78:7e:da:a9:98:c3:f4:77:29:36:d2:11:45:6a:e3:
8b:a4:22:2a:78:4d:64:0e:0d:d1:89:e6:b8:ac:5b:
54:5d:dc:6a:6d:d7:6c:3f:57:3b:61:b1:07:d9:cc:
62:95:f2:51:c9:37:68:e6:97:c5:06:fc:9e:13:e9:
60:b1:11:2d:25:cb:6c:e9:07:4b:b1:7b:b1:e6:78:
b9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D7:75:69:C5:CA:BC:BE:7D:B1:A7:6F:8C:A5:E8:E7:E0:03:DE:36
X509v3 Authority Key Identifier:
keyid:A4:24:9B:71:9E:5F:98:82:86:AD:3B:41:64:C4:E7:7F:43:4F:F9:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/A4249B719E5F988286AD3B4164C4E77F434FF948.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A4249B719E5F988286AD3B4164C4E77F434FF948.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/3136302e3139312e3233342e302f32342d3234203d3e20313533343932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.191.234.0/24
Signature Algorithm: sha256WithRSAEncryption
34:4b:e3:28:3b:ff:86:ff:8f:87:67:85:0c:39:dc:85:d4:d0:
a9:60:08:d6:af:70:86:7d:9c:c2:8a:63:2a:be:d2:4a:fe:e0:
e2:d8:0a:ae:75:6a:18:9c:d0:c2:bf:79:5e:63:a4:ea:3f:db:
6e:c9:63:51:d1:8f:76:5a:41:26:c7:51:43:dc:5a:10:3f:9c:
e3:ef:57:7c:05:24:f3:e4:fa:17:f6:a6:4f:37:90:b7:f5:f2:
e3:5d:72:33:24:0a:fb:0b:7c:c3:7b:5a:77:57:58:fb:df:5e:
61:e4:99:3c:46:b0:3c:c6:75:cb:06:c6:1c:a2:47:67:95:98:
46:31:d2:c0:89:3c:e9:90:bc:0f:f9:e7:67:a6:30:83:76:e3:
d3:02:9d:54:85:f7:fc:bf:c6:5a:85:e1:34:0a:ef:1f:57:8d:
92:e2:8c:55:23:84:e7:6a:40:29:16:d3:73:38:5d:11:22:28:
ec:59:10:2c:a4:ce:83:76:16:db:47:33:27:c4:31:ff:89:f8:
7b:12:cf:25:9b:65:9c:74:c6:dc:4b:d2:08:cb:56:6e:8c:86:
c6:3f:e5:c8:91:cc:4b:9b:2b:3e:0b:f9:76:b8:5e:0a:66:9f:
14:5a:d6:ce:a9:f4:cd:2d:8e:5c:02:1c:f9:1d:70:8b:2b:08:
69:4c:31:37
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUfc52z5d4wSMb8rhYJKJsdGbiKb4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQyNDlCNzE5RTVGOTg4Mjg2QUQzQjQxNjRDNEU3N0Y0
MzRGRjk0ODAeFw0yNjA1MDMwMjQ5MjZaFw0yNzA1MDIwMjU0MjZaMDMxMTAvBgNV
BAMTKEE1RDc3NTY5QzVDQUJDQkU3REIxQTc2RjhDQTVFOEU3RTAwM0RFMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA3isTQuvK4x0Z03t/lIvgEZd4
s5lg74DBntZ6bWXDcnh/sIxVCab1TSo+OfyIgkXjWCtJRYJgVmnDOE0dW9aLQYYT
zv9R9rCgCbsXFE34bCY4jhPZU/FjL7I1LHztwqpCZ2y7s10JBzDzg4Se+31Y77bs
hjlhQDkGZRvPMIgWKJWLcRJqxWlC35cmRJx/i3LWYEqi4Ik5mjuGhMI+ag5ijI8/
l3IWEsut5QBZRuGL9rU4Onh+2qmYw/R3KTbSEUVq44ukIip4TWQODdGJ5risW1Rd
3Gpt12w/VzthsQfZzGKV8lHJN2jml8UG/J4T6WCxES0ly2zpB0uxe7HmeLnpAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUpdd1acXKvL59sadvjKXo5+AD3jYwHwYDVR0j
BBgwFoAUpCSbcZ5fmIKGrTtBZMTnf0NP+UgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OWJjYzYyYWUtMjBjOC00OTc0LWFhZTktYjEwOGRmOGUyZjU5LzAvQTQyNDlCNzE5
RTVGOTg4Mjg2QUQzQjQxNjRDNEU3N0Y0MzRGRjk0OC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9BNDI0OUI3MTlFNUY5ODgyODZBRDNCNDE2NEM0RTc3RjQzNEZG
OTQ4LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzliY2M2MmFlLTIwYzgtNDk3NC1h
YWU5LWIxMDhkZjhlMmY1OS8wLzMxMzYzMDJlMzEzOTMxMmUzMjMzMzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzMzNDM5MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACgv+owDQYJ
KoZIhvcNAQELBQADggEBADRL4yg7/4b/j4dnhQw53IXU0KlgCNavcIZ9nMKKYyq+
0kr+4OLYCq51ahic0MK/eV5jpOo/227JY1HRj3ZaQSbHUUPcWhA/nOPvV3wFJPPk
+hf2pk83kLf18uNdcjMkCvsLfMN7WndXWPvfXmHkmTxGsDzGdcsGxhyiR2eVmEYx
0sCJPOmQvA/552emMIN249MCnVSF9/y/xlqF4TQK7x9XjZLijFUjhOdqQCkW03M4
XREiKOxZECykzoN2FttHMyfEMf+J+HsSzyWbZZx0xtxL0gjLVm6MhsY/5ciRzEub
Kz4L+Xa4XgpmnxRa1s6p9M0tjlwCHPkdcIsrCGlMMTc=
-----END CERTIFICATE-----
Generated at Wed May 13 01:42:07 2026 by rpki-client