
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/3136302e32322e36362e302f32342d3234203d3e20313532383134.roa
File: 3136302e32322e36362e302f32342d3234203d3e20313532383134.roa (raw, json)
Hash identifier: 4TAm+Tq7VEmBP4/ZDSMoQRtNl/2F8B0387VCKH9srzE=
Subject key identifier: 49:D7:46:F4:FC:37:C0:86:39:DE:51:6E:01:B0:7C:63:E1:48:04:B2
Certificate issuer: /CN=0FB62F1F0D10C5EC7D72410E5637525B621C4870
Certificate serial: 40825FF82AF1F80E71382B14A442755743116E1E
Authority key identifier: 0F:B6:2F:1F:0D:10:C5:EC:7D:72:41:0E:56:37:52:5B:62:1C:48:70
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/3136302e32322e36362e302f32342d3234203d3e20313532383134.roa
Signing time: Sun 03 May 2026 02:54:49 +0000
ROA not before: Sun 03 May 2026 02:49:49 +0000
ROA not after: Sun 02 May 2027 02:54:49 +0000
asID: 152814
IP address blocks: 160.22.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.crl
rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 11:04:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:82:5f:f8:2a:f1:f8:0e:71:38:2b:14:a4:42:75:57:43:11:6e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FB62F1F0D10C5EC7D72410E5637525B621C4870
Validity
Not Before: May 3 02:49:49 2026 GMT
Not After : May 2 02:54:49 2027 GMT
Subject: CN=49D746F4FC37C08639DE516E01B07C63E14804B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:41:5a:56:86:71:85:98:8f:bf:02:4d:8d:16:
b3:f1:2a:2a:85:ae:0f:15:9e:49:62:c0:9a:9e:6d:
1b:10:e9:d7:18:55:fb:6a:75:e6:1c:4a:26:f6:ca:
a4:ce:e1:9b:77:c4:a3:91:0d:a6:ff:aa:9b:9d:2b:
68:c0:10:1c:67:97:aa:23:09:9c:d5:29:0a:66:1e:
5c:e4:be:9f:ff:fb:7b:d8:39:d8:d1:f2:8c:46:3d:
78:ff:c7:07:f2:2d:59:5d:c3:fd:64:fe:06:af:90:
16:57:09:bd:3a:71:40:c2:71:5e:91:4e:13:fc:11:
9d:70:f3:0c:bb:18:c6:8a:12:17:1e:52:fb:04:56:
29:46:53:00:2d:6f:df:bc:6e:24:df:67:b5:f7:76:
ad:7a:c9:11:f0:9a:2c:17:e2:76:f4:08:7b:a2:e6:
49:3d:6d:3b:10:d1:7e:bc:ef:41:13:17:f7:4d:b6:
36:1a:5a:b8:6e:85:23:8a:60:1b:31:74:e9:ca:6e:
52:b8:e9:99:75:d4:6c:d3:05:b8:e5:1a:74:b3:99:
da:99:b8:6c:ef:a0:cd:de:d7:dd:16:5d:01:f4:00:
7f:a1:c3:f8:05:dd:96:20:fb:e3:a5:72:b2:49:e8:
6d:98:46:cb:66:c6:18:18:8b:25:17:eb:75:a1:bb:
30:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D7:46:F4:FC:37:C0:86:39:DE:51:6E:01:B0:7C:63:E1:48:04:B2
X509v3 Authority Key Identifier:
keyid:0F:B6:2F:1F:0D:10:C5:EC:7D:72:41:0E:56:37:52:5B:62:1C:48:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0FB62F1F0D10C5EC7D72410E5637525B621C4870.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9db927df-bc9c-4be6-a1fa-2e125c469f71/0/3136302e32322e36362e302f32342d3234203d3e20313532383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.66.0/24
Signature Algorithm: sha256WithRSAEncryption
52:b9:57:cb:11:55:bf:da:96:5d:3d:7b:7c:b3:e7:cf:21:24:
c6:d6:51:a1:b5:60:47:80:b7:1a:3a:08:e3:11:07:7e:45:17:
2e:2f:61:28:c5:f2:4d:e8:b2:63:40:d7:84:d4:24:96:89:e2:
8e:82:82:23:98:bc:ec:25:2b:5d:2b:6a:33:db:a2:51:12:4b:
81:67:85:1e:f6:ca:34:b9:bc:46:cc:d2:ea:60:d2:98:f3:ab:
0d:dc:2b:70:f9:6e:7d:fb:ab:40:46:ad:10:f1:cf:fb:a1:1c:
c8:47:6d:6c:01:40:16:11:10:31:65:43:0a:ea:f8:97:6a:8e:
eb:34:c9:18:f7:f3:fc:ff:5b:1d:bb:0d:52:62:0f:8c:b4:82:
3c:2c:c0:85:6c:1d:af:f1:9e:2c:41:5f:41:25:41:00:09:5f:
c2:fd:cc:03:0c:a3:71:18:ab:cd:1e:1a:f7:2c:d1:12:1a:d3:
a5:e0:ca:58:82:9c:8c:ef:90:5d:e5:fc:51:92:c1:55:57:f6:
d9:e9:55:84:6e:92:9a:80:41:4f:d9:de:79:32:79:d6:90:f7:
6d:26:a9:b6:72:8d:c0:df:7f:dc:48:a2:1a:1c:10:bd:2d:ab:
54:3b:8a:5e:b1:3e:9d:96:9a:dc:ff:2d:c4:fc:34:c0:db:7a:
89:a6:7e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:20:03 2026 by rpki-client