
$ rpki-client -vvf rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/3136302e32352e35352e302f32342d3234203d3e20313533303630.roa
File: 3136302e32352e35352e302f32342d3234203d3e20313533303630.roa (raw, json)
Hash identifier: 1QSTMTha75VQUavzNrm00rtAo2y/e9vazzdx0pcZJXk=
Subject key identifier: 83:D9:CF:1A:47:26:93:E7:24:9E:05:D4:8C:DA:9C:7C:AA:88:14:58
Certificate issuer: /CN=1CCC9F903B0797259D4851831FDB74E850E28573
Certificate serial: 3749468A34EF55832236539201A833FFB980CF09
Authority key identifier: 1C:CC:9F:90:3B:07:97:25:9D:48:51:83:1F:DB:74:E8:50:E2:85:73
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/3136302e32352e35352e302f32342d3234203d3e20313533303630.roa
Signing time: Sun 03 May 2026 02:59:28 +0000
ROA not before: Sun 03 May 2026 02:54:28 +0000
ROA not after: Sun 02 May 2027 02:59:28 +0000
asID: 153060
IP address blocks: 160.25.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.crl
rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:32:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:49:46:8a:34:ef:55:83:22:36:53:92:01:a8:33:ff:b9:80:cf:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1CCC9F903B0797259D4851831FDB74E850E28573
Validity
Not Before: May 3 02:54:28 2026 GMT
Not After : May 2 02:59:28 2027 GMT
Subject: CN=83D9CF1A472693E7249E05D48CDA9C7CAA881458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:60:cc:d5:e1:17:6b:7d:ec:43:da:1d:d5:2d:
8e:2f:ac:9f:d6:25:3f:b0:77:28:37:ab:8a:18:5e:
72:db:71:dd:de:32:a3:9d:ed:b8:67:1f:2b:60:98:
b3:22:5d:67:fe:a2:ad:b6:56:20:91:fe:fb:99:e2:
4c:fa:b2:46:22:e9:24:a9:a2:de:49:53:05:9d:ec:
df:a2:1d:8e:5b:1c:7e:c5:63:a8:1f:1c:cc:07:dc:
b4:6c:c2:22:d5:f6:c7:d0:d0:d1:c7:ac:57:1e:86:
6b:75:c5:8c:c2:80:a3:a5:16:27:1b:5b:0f:56:3d:
be:67:fb:13:c3:d6:9f:de:6c:f3:3e:df:23:34:16:
f5:42:27:a7:1d:83:6a:df:99:06:27:76:fa:76:16:
03:08:da:64:c7:22:1a:22:07:60:a1:df:7f:19:bd:
5c:3b:5d:6b:dc:00:59:5a:99:96:a9:ea:11:f7:10:
2d:35:b0:24:59:a4:55:d0:5c:89:ff:e2:13:e2:3e:
10:90:72:77:f5:3b:74:c3:28:69:3e:4a:78:a0:65:
ac:c1:4d:06:9d:37:61:6b:6f:0e:f2:53:b4:94:46:
8a:93:65:64:44:26:2b:62:3a:99:e3:26:ef:94:d9:
82:8d:f4:15:3f:44:08:c4:e0:ab:74:a3:ef:9c:66:
f5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D9:CF:1A:47:26:93:E7:24:9E:05:D4:8C:DA:9C:7C:AA:88:14:58
X509v3 Authority Key Identifier:
keyid:1C:CC:9F:90:3B:07:97:25:9D:48:51:83:1F:DB:74:E8:50:E2:85:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/1CCC9F903B0797259D4851831FDB74E850E28573.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1CCC9F903B0797259D4851831FDB74E850E28573.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/3136302e32352e35352e302f32342d3234203d3e20313533303630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.55.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:f1:3b:91:12:8f:6d:93:4a:1a:79:e9:7d:71:b0:e8:b1:87:
8f:c6:ff:8d:3a:a7:7d:d9:22:67:45:ce:ba:90:31:39:b6:68:
c2:9d:da:15:65:20:6c:c1:7e:bd:ff:a1:38:fd:fe:1a:71:05:
11:84:ea:e7:79:3e:ea:f9:2e:81:0a:6a:43:d8:3f:14:7e:d5:
a5:4b:bc:c8:7a:54:35:09:dd:23:79:3a:1e:09:ac:bd:eb:e8:
0a:33:a0:d5:ae:27:1b:59:37:82:0e:a9:94:3a:9c:5d:09:5b:
82:01:f6:c1:34:8f:ab:67:5e:a8:be:28:ac:3e:b2:37:e2:47:
28:5d:14:78:ac:b7:6e:85:2e:b1:84:bf:7c:d5:ef:7f:3a:b3:
be:aa:2d:f1:d7:ab:d1:50:41:ac:fe:ba:a4:57:70:b5:bd:5d:
90:eb:0b:18:62:1b:95:70:bc:27:09:c7:b5:fd:b3:58:84:33:
6d:ce:8e:16:54:a1:e2:5c:0c:aa:06:ca:35:fb:44:02:26:44:
1a:7b:50:13:c3:3c:30:61:a9:c0:a5:ab:d4:7c:25:b7:91:0e:
71:42:67:06:99:ce:5f:5a:ba:db:e0:88:cf:91:9a:aa:97:4a:
03:df:cd:68:7f:7b:76:f9:bb:cf:a8:11:f5:3c:0c:35:6c:11:
d8:a5:96:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:27:40 2026 by rpki-client