
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/3136302e32322e372e302f32342d3234203d3e20313532373936.roa
File: 3136302e32322e372e302f32342d3234203d3e20313532373936.roa (raw, json)
Hash identifier: k8/tG1r6Hku+axyAkhpoG9wapKfM0tuW5ME+1hieoV0=
Subject key identifier: 9A:4E:DD:9E:D7:2B:A3:4D:33:13:FA:B6:A3:8C:CF:3F:FE:6B:D2:17
Certificate issuer: /CN=0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F
Certificate serial: 7286F8251A8C04FB55C603B6F744030367C0CA44
Authority key identifier: 0B:59:A7:D0:66:AE:2D:E3:B9:78:20:AE:F1:79:1A:B0:F7:AE:C6:4F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/3136302e32322e372e302f32342d3234203d3e20313532373936.roa
Signing time: Sun 03 May 2026 02:59:14 +0000
ROA not before: Sun 03 May 2026 02:54:14 +0000
ROA not after: Sun 02 May 2027 02:59:14 +0000
asID: 152796
IP address blocks: 160.22.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.crl
rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:41:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:86:f8:25:1a:8c:04:fb:55:c6:03:b6:f7:44:03:03:67:c0:ca:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F
Validity
Not Before: May 3 02:54:14 2026 GMT
Not After : May 2 02:59:14 2027 GMT
Subject: CN=9A4EDD9ED72BA34D3313FAB6A38CCF3FFE6BD217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:39:88:1d:5f:07:57:20:95:52:53:96:58:9c:
50:0a:6b:2a:f8:80:39:a6:52:07:87:27:d1:6a:41:
ab:1e:6a:a7:e8:a9:36:1b:cc:10:06:57:35:fe:18:
59:d1:03:d4:56:e5:ad:b6:a8:78:83:02:1b:cc:cb:
b8:a6:c3:2e:e0:42:37:ae:fe:a7:34:f0:eb:2c:07:
a4:cf:34:a6:f2:06:66:fd:15:44:b4:75:d5:50:e1:
7f:bc:9f:00:91:db:73:93:b0:68:eb:96:43:a9:3e:
69:29:55:c9:40:f5:59:12:a3:c2:02:a7:7d:a2:3e:
0b:8b:25:f7:75:24:04:f0:bf:1f:a7:01:b1:e3:94:
da:94:9f:41:64:8e:d7:5b:44:ae:55:ff:f9:c6:9a:
92:87:2d:bd:f0:46:e3:46:e2:cb:69:a1:51:d7:0d:
f7:52:18:b5:6b:aa:14:1e:45:1c:02:73:33:05:7a:
bb:2b:cd:ba:c2:1c:e4:db:ec:63:c2:4c:70:ef:98:
f2:c9:b7:d5:ea:1e:e6:a2:be:02:3e:2c:89:a8:b0:
5c:fd:9d:bb:5c:3f:97:bd:13:31:3f:e7:d9:c0:45:
3d:82:bd:13:25:c0:79:9a:d5:c8:5e:c5:fc:2d:cf:
9b:af:51:16:5a:41:2e:dd:85:bd:88:aa:44:ea:87:
b6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4E:DD:9E:D7:2B:A3:4D:33:13:FA:B6:A3:8C:CF:3F:FE:6B:D2:17
X509v3 Authority Key Identifier:
keyid:0B:59:A7:D0:66:AE:2D:E3:B9:78:20:AE:F1:79:1A:B0:F7:AE:C6:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0B59A7D066AE2DE3B97820AEF1791AB0F7AEC64F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/3136302e32322e372e302f32342d3234203d3e20313532373936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.7.0/24
Signature Algorithm: sha256WithRSAEncryption
53:e6:95:3c:e5:82:10:9c:6f:87:51:20:1b:4a:45:51:d5:15:
b3:f6:6d:66:02:a1:bb:56:d5:ea:eb:91:70:8d:c0:bb:f6:5d:
fb:db:85:a8:56:56:ec:a4:83:d1:ca:01:a8:b6:86:c9:78:39:
1f:e0:43:28:b3:b2:21:1c:95:0e:b0:13:80:6a:05:06:ac:fc:
96:94:4c:cb:ae:08:f3:e0:e1:a3:2c:b6:a6:88:fd:73:8c:58:
5b:4c:4d:25:48:22:4f:e1:5c:ea:dc:98:ba:86:9d:28:2f:5c:
78:ef:a4:f6:30:51:c8:93:d8:0a:a7:8d:9c:c1:a2:c0:d3:6b:
71:77:c8:71:af:59:1e:4b:30:83:4b:3a:75:e9:f1:d2:bb:ea:
65:6f:c6:1c:62:80:1e:02:2d:4d:62:19:4d:b6:2d:a0:53:c8:
09:ba:8d:a2:e0:4c:55:0b:b9:f1:dd:8c:28:88:d3:a7:20:29:
57:12:9c:ec:16:05:b2:ea:e3:c8:c5:d3:70:00:29:2e:cc:2a:
bd:a3:8f:a4:05:4f:63:30:00:a6:6b:92:09:59:88:d8:0c:e5:
5f:e3:39:23:cf:4c:f0:5f:14:1b:47:30:9f:9b:d4:fc:70:03:
da:0e:a3:cc:db:d5:dc:fa:f8:ff:3f:0b:62:c8:19:48:ab:cc:
0d:21:49:5c
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUcob4JRqMBPtVxgO290QDA2fAykQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEI1OUE3RDA2NkFFMkRFM0I5NzgyMEFFRjE3OTFBQjBG
N0FFQzY0RjAeFw0yNjA1MDMwMjU0MTRaFw0yNzA1MDIwMjU5MTRaMDMxMTAvBgNV
BAMTKDlBNEVERDlFRDcyQkEzNEQzMzEzRkFCNkEzOENDRjNGRkU2QkQyMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzOYgdXwdXIJVSU5ZYnFAKayr4
gDmmUgeHJ9FqQaseaqfoqTYbzBAGVzX+GFnRA9RW5a22qHiDAhvMy7imwy7gQjeu
/qc08OssB6TPNKbyBmb9FUS0ddVQ4X+8nwCR23OTsGjrlkOpPmkpVclA9VkSo8IC
p32iPguLJfd1JATwvx+nAbHjlNqUn0FkjtdbRK5V//nGmpKHLb3wRuNG4stpoVHX
DfdSGLVrqhQeRRwCczMFersrzbrCHOTb7GPCTHDvmPLJt9XqHuaivgI+LImosFz9
nbtcP5e9EzE/59nART2CvRMlwHma1chexfwtz5uvURZaQS7dhb2IqkTqh7YzAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUmk7dntcro00zE/q2o4zPP/5r0hcwHwYDVR0j
BBgwFoAUC1mn0GauLeO5eCCu8XkasPeuxk8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YWUxOTg4MTYtNWFmOS00N2VmLWI5ODktNDJmMjczMTg0OGJlLzAvMEI1OUE3RDA2
NkFFMkRFM0I5NzgyMEFFRjE3OTFBQjBGN0FFQzY0Ri5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC8wQjU5QTdEMDY2QUUyREUzQjk3ODIwQUVGMTc5MUFCMEY3QUVD
NjRGLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FlMTk4ODE2LTVhZjktNDdlZi1i
OTg5LTQyZjI3MzE4NDhiZS8wLzMxMzYzMDJlMzIzMjJlMzcyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM1MzIzNzM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACgFgcwDQYJKoZIhvcN
AQELBQADggEBAFPmlTzlghCcb4dRIBtKRVHVFbP2bWYCobtW1errkXCNwLv2Xfvb
hahWVuykg9HKAai2hsl4OR/gQyizsiEclQ6wE4BqBQas/JaUTMuuCPPg4aMstqaI
/XOMWFtMTSVIIk/hXOrcmLqGnSgvXHjvpPYwUciT2AqnjZzBosDTa3F3yHGvWR5L
MINLOnXp8dK76mVvxhxigB4CLU1iGU22LaBTyAm6jaLgTFULufHdjCiI06cgKVcS
nOwWBbLq48jF03AAKS7MKr2jj6QFT2MwAKZrkglZiNgM5V/jOSPPTPBfFBtHMJ+b
1PxwA9oOo8zb1dz6+P8/C2LIGUirzA0hSVw=
-----END CERTIFICATE-----
Generated at Wed May 13 12:25:11 2026 by rpki-client