
$ rpki-client -vvf rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/3136302e32322e3231382e302f32332d3233203d3e20313533303832.roa
File: 3136302e32322e3231382e302f32332d3233203d3e20313533303832.roa (raw, json)
Hash identifier: 8SDP3wfE2ITikt4jDcd6r3J1oTDgApLS/F1IvHjprMQ=
Subject key identifier: F1:83:9B:C7:D5:D0:7F:3F:AD:53:36:5C:E6:9E:CB:53:67:85:35:26
Certificate issuer: /CN=58D7371463C97F0A2A5D9ED78952F82CAA379F75
Certificate serial: 01BC857A32E7C82AC9E44A8FD2A47D9D93F72984
Authority key identifier: 58:D7:37:14:63:C9:7F:0A:2A:5D:9E:D7:89:52:F8:2C:AA:37:9F:75
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/3136302e32322e3231382e302f32332d3233203d3e20313533303832.roa
Signing time: Sun 03 May 2026 02:58:51 +0000
ROA not before: Sun 03 May 2026 02:53:51 +0000
ROA not after: Sun 02 May 2027 02:58:51 +0000
asID: 153082
IP address blocks: 160.22.218.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.crl
rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:bc:85:7a:32:e7:c8:2a:c9:e4:4a:8f:d2:a4:7d:9d:93:f7:29:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58D7371463C97F0A2A5D9ED78952F82CAA379F75
Validity
Not Before: May 3 02:53:51 2026 GMT
Not After : May 2 02:58:51 2027 GMT
Subject: CN=F1839BC7D5D07F3FAD53365CE69ECB5367853526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5c:68:b3:dc:2d:5e:25:67:06:a5:dc:c3:84:
ea:b2:7d:a1:b7:68:ac:7b:c3:25:7c:cf:d8:72:7e:
da:b0:c2:23:d2:28:af:1b:ae:70:7d:4b:97:89:4b:
47:4c:d5:03:39:a9:5d:ec:ea:d7:b7:64:25:f4:b3:
9a:e2:f7:32:3c:d4:36:5c:95:f8:c5:01:67:34:83:
83:e3:28:26:b6:3b:7e:cf:c6:78:dc:34:a4:a3:7c:
db:9f:2f:21:17:b4:49:1d:56:05:e1:c2:89:aa:8f:
d4:31:c3:a4:3f:90:4f:91:65:c1:2b:1f:3e:a0:6f:
15:d3:4f:d0:a0:98:6d:96:56:ff:0f:60:54:a9:9a:
95:e3:bc:07:f1:4a:33:eb:5a:98:96:fb:f4:2d:2a:
4a:ff:ec:d2:de:35:6a:30:e6:df:70:e7:a1:02:20:
f2:c1:cd:1f:5b:fa:b5:73:92:75:4a:00:1a:bd:6d:
43:56:f8:09:35:c1:65:4e:40:da:f9:50:bb:61:77:
14:80:2d:bf:c4:21:84:bb:90:1f:53:d7:01:00:c6:
3e:e0:04:01:bf:04:2f:35:17:4a:b7:da:84:63:68:
6c:55:c8:8e:c0:84:4e:c2:b3:5a:cb:ec:3d:04:c6:
b0:f2:ad:69:3f:f3:31:85:63:ad:2c:bd:1a:03:87:
71:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:83:9B:C7:D5:D0:7F:3F:AD:53:36:5C:E6:9E:CB:53:67:85:35:26
X509v3 Authority Key Identifier:
keyid:58:D7:37:14:63:C9:7F:0A:2A:5D:9E:D7:89:52:F8:2C:AA:37:9F:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/3136302e32322e3231382e302f32332d3233203d3e20313533303832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.218.0/23
Signature Algorithm: sha256WithRSAEncryption
60:10:83:25:a8:b8:2d:fa:ec:c7:95:ed:d0:b3:d0:4e:8b:23:
dc:7a:87:85:77:ff:38:f0:86:2d:22:79:f1:d9:c6:1a:96:07:
20:62:37:cb:3b:59:ff:96:52:60:f4:30:0f:d6:e8:7f:ea:79:
d2:bb:80:b2:45:81:79:64:1b:c4:7d:be:0c:5a:70:5c:2b:36:
f3:82:2a:5e:52:d1:84:6c:ee:90:ea:a8:db:69:1a:0e:fd:5d:
5c:18:37:ce:cf:ce:54:d4:01:01:49:5e:5b:e1:39:e3:92:11:
a7:30:f5:90:76:58:8e:40:5b:8f:92:df:06:3f:0b:ff:87:dc:
2f:2b:42:45:78:f6:72:97:54:0b:97:55:c5:25:ff:34:25:a7:
1b:58:7e:13:33:0c:7d:07:a5:aa:23:bf:1c:44:05:3f:8d:e8:
6c:02:98:16:db:91:0b:7d:be:94:42:d0:a0:15:12:74:de:45:
2d:0f:50:e8:89:d8:ef:59:64:32:f3:1a:40:c1:35:06:46:de:
d0:ca:eb:ca:bf:c5:0c:99:6d:ce:66:fd:f0:c7:5c:f0:60:bd:
de:f9:4a:87:6c:6a:2c:f8:66:ef:b4:c3:fd:ab:83:7c:bd:ad:
83:89:04:0e:b8:f6:8d:ac:f4:d0:75:8d:e6:97:60:7f:26:dc:
ae:0b:94:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:54:01 2026 by rpki-client