
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa
File: 3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa (raw, json)
Hash identifier: 3Tzs+hQ+b22vv80zUD8FcOM/x7RDc2pjQFIIYIEE2b4=
Subject key identifier: F5:E0:92:4D:5A:25:5E:B1:4B:19:C5:AF:A8:EA:B8:5D:A3:3F:DA:11
Certificate issuer: /CN=C10437213774C7C2BB5BC9BA7649B72D7646F81C
Certificate serial: 1BBC0C225A29C493EDCBEAE3F41B832A1EA041CE
Authority key identifier: C1:04:37:21:37:74:C7:C2:BB:5B:C9:BA:76:49:B7:2D:76:46:F8:1C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa
Signing time: Sun 03 May 2026 03:08:15 +0000
ROA not before: Sun 03 May 2026 03:03:15 +0000
ROA not after: Sun 02 May 2027 03:08:15 +0000
asID: 152808
IP address blocks: 160.22.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.crl
rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:28:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:bc:0c:22:5a:29:c4:93:ed:cb:ea:e3:f4:1b:83:2a:1e:a0:41:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C10437213774C7C2BB5BC9BA7649B72D7646F81C
Validity
Not Before: May 3 03:03:15 2026 GMT
Not After : May 2 03:08:15 2027 GMT
Subject: CN=F5E0924D5A255EB14B19C5AFA8EAB85DA33FDA11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6b:c5:82:c3:d4:73:3a:d1:92:e5:8a:82:56:
98:44:a8:b8:ef:b3:5c:4b:59:73:f9:e7:6d:da:84:
9b:4e:fb:ac:19:2b:6a:dd:83:69:56:17:bc:06:e9:
dd:4a:2c:f0:ed:ae:04:70:d3:5a:6a:30:46:57:a2:
2e:58:14:b6:1e:e5:18:2a:58:d6:78:60:cb:b0:b8:
85:4b:b8:06:95:2c:5f:05:4c:b2:68:d4:96:f8:f1:
c9:76:6d:8b:b6:87:26:01:95:06:53:e9:00:bc:38:
08:de:52:98:3e:f8:bd:e2:88:c3:1d:a4:3a:9b:e0:
5b:cf:52:d7:b5:f6:e7:2b:56:c1:a5:97:45:a5:32:
51:47:34:36:df:79:98:85:04:08:b3:27:90:4a:57:
b5:a2:f1:fa:5b:e8:ed:be:b6:9b:a2:4a:30:1d:15:
61:9d:03:b4:44:d1:e1:b9:63:e0:ac:d5:9a:2d:c4:
ea:d9:b8:1f:22:65:06:14:3f:e0:74:c8:94:71:4b:
07:3b:9f:56:82:49:68:29:0f:5f:ba:cd:0f:9f:42:
35:16:3e:95:b4:76:a2:10:84:a8:cd:ad:6a:39:2b:
23:68:94:fb:cf:5b:03:40:0d:7b:a0:ea:4d:e0:1e:
35:46:0d:e2:03:47:02:71:b2:1c:25:e5:e1:41:be:
5c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E0:92:4D:5A:25:5E:B1:4B:19:C5:AF:A8:EA:B8:5D:A3:3F:DA:11
X509v3 Authority Key Identifier:
keyid:C1:04:37:21:37:74:C7:C2:BB:5B:C9:BA:76:49:B7:2D:76:46:F8:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C10437213774C7C2BB5BC9BA7649B72D7646F81C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.100.0/24
Signature Algorithm: sha256WithRSAEncryption
08:e5:49:6c:0b:25:e4:55:fe:29:28:cb:0e:f6:dd:50:db:21:
1e:1b:f7:87:7d:83:c3:8e:b3:8d:b1:2c:4d:b4:99:ef:9b:45:
26:cb:eb:eb:f8:46:0d:d6:53:73:63:3a:d4:b2:48:e9:4e:3a:
59:61:7c:09:d0:18:e2:99:1d:81:01:55:2a:74:32:b9:46:4c:
95:50:cf:6d:af:4c:32:e8:43:bb:87:45:a3:c4:9b:50:f2:73:
52:e6:67:a8:18:61:6a:1b:21:af:47:06:f1:4c:50:21:ef:fd:
ee:19:17:d0:39:0c:65:8f:76:66:05:b1:c8:b1:0f:eb:e9:a7:
05:9f:73:00:9e:c0:bb:db:54:65:6c:6c:32:ed:bc:96:58:8f:
e4:5c:a5:20:48:34:ad:bc:23:fd:47:79:1e:f3:1e:f4:16:22:
c6:c8:b2:c4:54:b7:07:fe:6f:5d:f5:c7:ad:59:24:7b:1c:86:
dd:92:6c:c8:ca:79:69:67:e0:77:5f:b7:35:aa:ce:99:5b:42:
50:52:c8:84:3e:39:6c:d0:ff:51:26:47:ef:f3:f4:55:89:d2:
9f:a8:70:db:05:20:9e:f9:18:15:2a:00:ef:ac:37:6a:71:08:
8d:4e:f9:cd:b2:ba:08:9a:d0:f3:bb:2e:ce:e6:d0:be:ff:30:
cb:c1:8d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:50:16 2026 by rpki-client