
$ rpki-client -vvf rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/3136302e32322e3231392e302f32342d3234203d3e20313533303832.roa
File: 3136302e32322e3231392e302f32342d3234203d3e20313533303832.roa (raw, json)
Hash identifier: J9HqktuqnJv4vacSFe3gAHVu6uw4uN5M19Yf9RU6PCA=
Subject key identifier: 52:81:8D:75:FF:18:88:61:B6:29:AA:7B:9B:70:B3:D0:62:FB:DF:72
Certificate issuer: /CN=58D7371463C97F0A2A5D9ED78952F82CAA379F75
Certificate serial: 3C6F1F575932CA49FE46161F17F115C7233C6D58
Authority key identifier: 58:D7:37:14:63:C9:7F:0A:2A:5D:9E:D7:89:52:F8:2C:AA:37:9F:75
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/3136302e32322e3231392e302f32342d3234203d3e20313533303832.roa
Signing time: Sun 03 May 2026 02:58:52 +0000
ROA not before: Sun 03 May 2026 02:53:52 +0000
ROA not after: Sun 02 May 2027 02:58:52 +0000
asID: 153082
IP address blocks: 160.22.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.crl
rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:6f:1f:57:59:32:ca:49:fe:46:16:1f:17:f1:15:c7:23:3c:6d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58D7371463C97F0A2A5D9ED78952F82CAA379F75
Validity
Not Before: May 3 02:53:52 2026 GMT
Not After : May 2 02:58:52 2027 GMT
Subject: CN=52818D75FF188861B629AA7B9B70B3D062FBDF72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ee:93:3c:f6:fd:f1:a6:2b:e5:c9:e6:89:fe:
bd:a6:85:58:de:2c:36:1a:1e:84:a5:dc:fe:af:55:
0a:8d:49:92:19:2f:24:e6:30:d2:4d:3c:a3:19:ba:
2b:75:90:ce:42:d9:8c:72:c0:be:0f:1b:d4:b2:fc:
75:ee:52:b4:27:0c:77:55:e9:fc:9a:e1:d8:bc:a1:
50:34:d3:2f:29:2b:b8:66:9d:1b:78:ab:e7:34:ad:
02:32:6d:20:82:1f:83:0f:9b:1a:73:c9:8f:d3:b2:
d4:b8:52:67:b9:0b:67:7d:e0:85:b1:07:6e:ea:dc:
49:9b:46:02:bd:3f:32:2b:bc:c9:7e:bf:d2:ba:69:
8b:d9:59:4d:55:e4:9e:0b:40:e9:02:1a:91:ad:91:
ab:6b:12:cb:a1:74:fc:90:9e:1f:81:57:3c:16:cc:
74:8b:00:82:ef:99:96:4a:39:fe:e1:ba:05:51:93:
98:b9:39:c4:d0:eb:7a:5f:40:ea:2d:90:41:57:2b:
37:f6:6e:5e:31:4a:33:4c:d0:5a:cf:25:61:b6:e6:
df:6f:69:18:13:55:1d:0b:c0:b6:60:18:5a:dd:a2:
cb:0f:04:7f:87:41:86:1e:d8:e4:06:a9:60:3c:7a:
c6:21:f5:1b:09:44:06:83:35:51:44:a7:24:a2:b1:
72:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:81:8D:75:FF:18:88:61:B6:29:AA:7B:9B:70:B3:D0:62:FB:DF:72
X509v3 Authority Key Identifier:
keyid:58:D7:37:14:63:C9:7F:0A:2A:5D:9E:D7:89:52:F8:2C:AA:37:9F:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/58D7371463C97F0A2A5D9ED78952F82CAA379F75.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/3136302e32322e3231392e302f32342d3234203d3e20313533303832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.219.0/24
Signature Algorithm: sha256WithRSAEncryption
65:90:26:dd:97:9d:e7:e4:63:7f:f2:b7:db:52:8b:3e:89:85:
79:c8:f8:5a:c6:3a:f7:e6:eb:e6:20:88:aa:c4:b3:da:13:74:
80:ff:86:9c:59:90:27:81:d8:c5:8b:58:37:34:d8:54:7d:e7:
d6:0b:e8:2e:a0:85:a4:e9:d5:c9:98:2f:a0:e2:86:84:9c:47:
97:02:ec:f3:20:c7:51:c3:25:1c:4f:59:ab:5c:07:b2:cc:62:
47:a7:3d:c0:5d:af:f1:14:8c:62:9b:84:60:94:93:03:42:fe:
92:ca:8a:c8:74:38:0d:d5:66:d6:c3:d6:ac:52:fd:97:33:27:
0f:34:6b:6c:31:79:1e:6d:80:ed:da:57:96:df:a5:f0:47:44:
2e:f4:fc:97:95:53:fb:e4:98:0f:8b:1a:be:a1:19:ec:37:da:
26:5b:30:05:44:6c:e6:4b:71:fe:02:9e:64:7b:25:9c:95:f3:
9b:45:fc:dd:a4:bc:da:f8:c0:f6:a0:71:2e:05:60:a1:2e:17:
da:09:c2:e9:d6:71:fa:f3:93:86:5b:79:8f:d9:21:16:62:4f:
17:b3:3b:ea:ee:f3:34:59:8f:b9:77:6c:b9:53:b1:dc:f8:ad:
d0:94:9e:c4:c2:36:b8:5b:d1:c1:b6:4c:c2:8a:97:90:57:23:
3c:99:51:f1
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUPG8fV1kyykn+RhYfF/EVxyM8bVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNThENzM3MTQ2M0M5N0YwQTJBNUQ5RUQ3ODk1MkY4MkNB
QTM3OUY3NTAeFw0yNjA1MDMwMjUzNTJaFw0yNzA1MDIwMjU4NTJaMDMxMTAvBgNV
BAMTKDUyODE4RDc1RkYxODg4NjFCNjI5QUE3QjlCNzBCM0QwNjJGQkRGNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC87pM89v3xpivlyeaJ/r2mhVje
LDYaHoSl3P6vVQqNSZIZLyTmMNJNPKMZuit1kM5C2YxywL4PG9Sy/HXuUrQnDHdV
6fya4di8oVA00y8pK7hmnRt4q+c0rQIybSCCH4MPmxpzyY/TstS4Ume5C2d94IWx
B27q3EmbRgK9PzIrvMl+v9K6aYvZWU1V5J4LQOkCGpGtkatrEsuhdPyQnh+BVzwW
zHSLAILvmZZKOf7hugVRk5i5OcTQ63pfQOotkEFXKzf2bl4xSjNM0FrPJWG25t9v
aRgTVR0LwLZgGFrdossPBH+HQYYe2OQGqWA8esYh9RsJRAaDNVFEpySisXJVAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUUoGNdf8YiGG2Kap7m3Cz0GL733IwHwYDVR0j
BBgwFoAUWNc3FGPJfwoqXZ7XiVL4LKo3n3UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWNkYjJiZjgtYmViMy00Y2M5LTgzYWQtMmM5ZDU3NWY5NGFmLzAvNThENzM3MTQ2
M0M5N0YwQTJBNUQ5RUQ3ODk1MkY4MkNBQTM3OUY3NS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC81OEQ3MzcxNDYzQzk3RjBBMkE1RDlFRDc4OTUyRjgyQ0FBMzc5
Rjc1LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FjZGIyYmY4LWJlYjMtNGNjOS04
M2FkLTJjOWQ1NzVmOTRhZi8wLzMxMzYzMDJlMzIzMjJlMzIzMTM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzAzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBbbMA0GCSqG
SIb3DQEBCwUAA4IBAQBlkCbdl53n5GN/8rfbUos+iYV5yPhaxjr35uvmIIiqxLPa
E3SA/4acWZAngdjFi1g3NNhUfefWC+guoIWk6dXJmC+g4oaEnEeXAuzzIMdRwyUc
T1mrXAeyzGJHpz3AXa/xFIxim4RglJMDQv6SyorIdDgN1WbWw9asUv2XMycPNGts
MXkebYDt2leW36XwR0Qu9PyXlVP75JgPixq+oRnsN9omWzAFRGzmS3H+Ap5keyWc
lfObRfzdpLza+MD2oHEuBWChLhfaCcLp1nH685OGW3mP2SEWYk8Xszvq7vM0WY+5
d2y5U7Hc+K3QlJ7Ewja4W9HBtkzCipeQVyM8mVHx
-----END CERTIFICATE-----
Generated at Wed May 13 02:47:08 2026 by rpki-client