
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/3136302e32322e362e302f32332d3233203d3e20313532373936.roa
File: 3136302e32322e362e302f32332d3233203d3e20313532373936.roa (raw, json)
Hash identifier: IlP4XUrtIYB7cIrDzPVEacnUChoP62KcR47GYYrS40A=
Subject key identifier: 1A:09:F3:DB:EC:25:07:96:5F:65:D8:F6:7E:A2:0D:9A:8A:21:0E:30
Certificate issuer: /CN=0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F
Certificate serial: 3A170C998B5A76C35A7DCB70BF212C8F6C8A54ED
Authority key identifier: 0B:59:A7:D0:66:AE:2D:E3:B9:78:20:AE:F1:79:1A:B0:F7:AE:C6:4F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/3136302e32322e362e302f32332d3233203d3e20313532373936.roa
Signing time: Sun 03 May 2026 02:59:13 +0000
ROA not before: Sun 03 May 2026 02:54:13 +0000
ROA not after: Sun 02 May 2027 02:59:13 +0000
asID: 152796
IP address blocks: 160.22.6.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.crl
rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:41:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:17:0c:99:8b:5a:76:c3:5a:7d:cb:70:bf:21:2c:8f:6c:8a:54:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F
Validity
Not Before: May 3 02:54:13 2026 GMT
Not After : May 2 02:59:13 2027 GMT
Subject: CN=1A09F3DBEC2507965F65D8F67EA20D9A8A210E30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:24:f4:c0:e7:f4:a4:83:12:c0:0d:32:4b:5c:
be:a6:77:43:ec:c0:57:79:af:b8:40:2f:d2:98:7b:
02:ea:39:d5:8d:12:f0:2a:bc:d7:98:6f:7f:b2:3f:
72:73:22:23:a1:52:79:87:1f:69:46:22:5f:42:e4:
71:e8:7c:e3:1c:c0:40:59:04:d7:52:c7:fb:e6:c4:
1b:0b:0d:6e:d0:9f:37:83:c3:13:2d:6c:02:87:fb:
83:1e:62:ed:7b:de:a6:f5:24:03:ed:5a:82:5a:02:
bf:3f:4d:3a:36:16:5a:e2:a7:e4:d5:5d:e1:07:6b:
db:55:ea:75:a1:38:e0:2c:16:cc:fa:95:88:b7:d9:
66:d8:49:1a:31:51:47:c3:03:b6:ba:df:70:4c:eb:
fd:04:ec:c7:91:0f:58:5b:ac:26:e3:d8:6e:b1:66:
c8:16:ca:05:34:47:f1:73:bf:b3:d9:74:eb:02:40:
9f:5a:3e:75:2a:b2:8e:70:47:7e:53:fb:5c:d6:25:
5e:93:9d:e9:25:7a:3c:fe:e5:64:ab:ec:0e:ce:2e:
2f:f7:a8:6c:a3:a2:df:c2:8e:02:b5:10:67:75:a2:
db:c0:f6:30:b3:83:3f:98:a0:9b:45:6e:50:10:4c:
02:58:ed:1f:30:93:e4:67:ed:dd:27:01:43:3c:e8:
26:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:09:F3:DB:EC:25:07:96:5F:65:D8:F6:7E:A2:0D:9A:8A:21:0E:30
X509v3 Authority Key Identifier:
keyid:0B:59:A7:D0:66:AE:2D:E3:B9:78:20:AE:F1:79:1A:B0:F7:AE:C6:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/3136302e32322e362e302f32332d3233203d3e20313532373936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.6.0/23
Signature Algorithm: sha256WithRSAEncryption
68:c7:58:e1:5b:02:66:54:b9:02:ef:99:bf:d7:60:8e:06:a6:
65:1d:c3:b1:90:4e:7f:7b:67:56:59:a0:1e:b8:8e:67:72:74:
8b:97:b5:ef:f9:40:5b:3d:fb:02:21:eb:58:69:e0:b2:7d:71:
df:fc:52:d7:06:d7:0b:82:b7:37:a3:c4:f2:bf:52:d6:30:0c:
27:91:34:ba:9c:99:6b:d2:ad:fb:49:4b:da:27:bb:4d:38:6e:
1c:8e:64:72:68:fc:4d:59:57:9f:95:2e:0e:d4:01:e1:cf:a4:
d6:9b:f1:18:6e:66:fa:a1:55:9d:4e:8f:10:89:cc:36:62:f4:
3e:48:ad:5c:da:cb:bd:6f:36:b2:25:ab:ca:12:e5:56:62:ed:
38:e9:66:ba:bd:5d:d4:a5:f5:16:9c:75:e9:7f:c6:1c:3b:b6:
a9:18:c0:ed:37:19:3f:d8:4d:77:f7:91:24:b5:4c:42:61:d2:
e2:47:f8:05:77:a8:f0:4d:e8:c5:60:4c:91:8e:73:f9:e6:07:
67:c9:22:bb:8c:a7:8a:47:0e:b4:98:53:a0:0d:80:cd:b2:86:
f3:e4:fe:cb:4c:ef:e9:77:5b:66:9f:54:4b:ef:62:af:ef:af:
46:4e:8e:f7:21:45:be:a9:83:e6:bb:91:fa:93:22:0f:66:83:
82:25:e1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:29:04 2026 by rpki-client