
$ rpki-client -vvf rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/3136302e32322e3139362e302f32342d3234203d3e20313532383232.roa
File: 3136302e32322e3139362e302f32342d3234203d3e20313532383232.roa (raw, json)
Hash identifier: tY2P809Veb9qnVz+b5sj5T6oUhcFMFNmQj4vHbtiv9U=
Subject key identifier: 19:B7:39:41:B1:59:C7:7A:32:EF:E8:05:F0:3C:4A:5D:57:DD:E6:43
Certificate issuer: /CN=A041DA85A835517127145910FB36AAA5B7CA41F2
Certificate serial: 1E56CB1ACF28B26C15B5EE1F935FF62DB62452A1
Authority key identifier: A0:41:DA:85:A8:35:51:71:27:14:59:10:FB:36:AA:A5:B7:CA:41:F2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A041DA85A835517127145910FB36AAA5B7CA41F2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/3136302e32322e3139362e302f32342d3234203d3e20313532383232.roa
Signing time: Sun 03 May 2026 03:11:54 +0000
ROA not before: Sun 03 May 2026 03:06:54 +0000
ROA not after: Sun 02 May 2027 03:11:54 +0000
asID: 152822
IP address blocks: 160.22.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.crl
rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A041DA85A835517127145910FB36AAA5B7CA41F2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 16:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:56:cb:1a:cf:28:b2:6c:15:b5:ee:1f:93:5f:f6:2d:b6:24:52:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A041DA85A835517127145910FB36AAA5B7CA41F2
Validity
Not Before: May 3 03:06:54 2026 GMT
Not After : May 2 03:11:54 2027 GMT
Subject: CN=19B73941B159C77A32EFE805F03C4A5D57DDE643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ad:52:45:92:23:b3:0c:86:02:28:bd:e7:e7:
0e:69:bc:9f:76:88:8f:9a:e6:c2:5d:45:a7:7d:56:
e1:69:45:e1:5b:32:ae:cc:2d:88:85:a3:6a:5b:d5:
d6:e1:b7:31:c5:9e:1f:0f:3d:f1:d7:72:2c:09:d0:
a0:b1:00:33:c7:e1:29:be:e4:3d:f8:c3:7a:11:ea:
41:29:e4:10:72:ba:ca:0f:0c:34:b3:73:58:cb:73:
73:7c:1c:25:b4:c3:c4:be:96:fd:6c:a6:a9:c5:d2:
94:ee:f9:ce:f9:2b:ea:3f:75:d2:24:06:d9:a7:db:
f0:02:30:a2:bc:d1:d6:a7:4f:a7:2e:d8:f9:2e:12:
82:38:07:24:db:29:1e:b3:92:4e:43:84:0d:34:33:
81:4c:73:ae:50:3f:0a:b2:d7:2f:e3:49:19:e6:46:
49:f4:56:b4:c6:ff:d8:73:9f:3c:85:2b:7c:95:16:
9f:e0:8c:5f:5a:3b:10:05:82:ea:1e:97:42:12:d7:
9a:48:68:79:24:12:06:08:fd:3f:e4:a3:4a:3f:6c:
a1:80:5d:04:17:dd:ac:a7:81:e4:2c:70:25:60:72:
02:42:cd:c8:68:a3:f5:68:26:69:24:b9:52:bc:07:
b2:74:2b:a5:d7:b8:ed:64:a0:ea:ae:d2:04:0b:06:
18:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B7:39:41:B1:59:C7:7A:32:EF:E8:05:F0:3C:4A:5D:57:DD:E6:43
X509v3 Authority Key Identifier:
keyid:A0:41:DA:85:A8:35:51:71:27:14:59:10:FB:36:AA:A5:B7:CA:41:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A041DA85A835517127145910FB36AAA5B7CA41F2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/3136302e32322e3139362e302f32342d3234203d3e20313532383232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.196.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:54:78:c7:8e:8e:e5:20:8e:89:bd:4a:a9:82:e9:a7:7f:72:
87:ad:9e:07:32:7a:b3:02:39:0d:47:65:d3:df:1a:e3:4e:11:
1c:2b:dc:eb:ec:22:e4:bd:4f:a3:ba:1f:18:f1:a9:18:7b:ef:
c3:e2:b4:e9:11:fe:62:a4:a3:6c:b8:cd:af:fe:eb:ef:e0:fa:
46:1a:aa:40:39:cc:3d:2e:47:97:34:7d:5c:11:d3:8f:3f:39:
09:56:23:bf:9c:32:7f:d7:f9:46:dc:54:47:05:fc:95:58:18:
55:2b:54:51:8d:ed:40:62:89:78:11:40:72:90:97:b2:d3:f3:
69:e8:32:04:b4:00:38:63:8c:f1:76:56:05:ac:b1:4c:03:3a:
59:0e:c4:c0:e9:32:4e:04:22:6a:e1:0f:2c:cb:51:fb:1d:17:
bb:25:ae:ba:03:47:f4:b2:9a:f2:03:6e:12:33:8a:d3:fb:d6:
cb:99:96:38:3a:ee:69:b5:86:91:2d:cd:1c:6f:61:b8:e1:fb:
66:23:30:cc:e2:70:02:0f:05:ee:49:4f:fe:77:6f:92:78:9c:
a1:a1:a1:d7:f1:6b:a3:66:05:b9:a7:0c:b7:29:71:7d:e0:13:
62:48:5d:db:7f:00:85:3a:3c:ca:64:3d:18:c3:10:ca:19:bd:
27:26:f2:ba
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUHlbLGs8osmwVte4fk1/2LbYkUqEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA0MURBODVBODM1NTE3MTI3MTQ1OTEwRkIzNkFBQTVC
N0NBNDFGMjAeFw0yNjA1MDMwMzA2NTRaFw0yNzA1MDIwMzExNTRaMDMxMTAvBgNV
BAMTKDE5QjczOTQxQjE1OUM3N0EzMkVGRTgwNUYwM0M0QTVENTdEREU2NDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6rVJFkiOzDIYCKL3n5w5pvJ92
iI+a5sJdRad9VuFpReFbMq7MLYiFo2pb1dbhtzHFnh8PPfHXciwJ0KCxADPH4Sm+
5D34w3oR6kEp5BByusoPDDSzc1jLc3N8HCW0w8S+lv1spqnF0pTu+c75K+o/ddIk
Btmn2/ACMKK80danT6cu2PkuEoI4ByTbKR6zkk5DhA00M4FMc65QPwqy1y/jSRnm
Rkn0VrTG/9hznzyFK3yVFp/gjF9aOxAFguoel0IS15pIaHkkEgYI/T/ko0o/bKGA
XQQX3ayngeQscCVgcgJCzchoo/VoJmkkuVK8B7J0K6XXuO1koOqu0gQLBhiRAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUGbc5QbFZx3oy7+gF8DxKXVfd5kMwHwYDVR0j
BBgwFoAUoEHahag1UXEnFFkQ+zaqpbfKQfIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGYxYTBkZjYtMWQzYS00YmNjLWIzZDEtNjQ2OTVmODdlMzdmLzAvQTA0MURBODVB
ODM1NTE3MTI3MTQ1OTEwRkIzNkFBQTVCN0NBNDFGMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9BMDQxREE4NUE4MzU1MTcxMjcxNDU5MTBGQjM2QUFBNUI3Q0E0
MUYyLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RmMWEwZGY2LTFkM2EtNGJjYy1i
M2QxLTY0Njk1Zjg3ZTM3Zi8wLzMxMzYzMDJlMzIzMjJlMzEzOTM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzgzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBbEMA0GCSqG
SIb3DQEBCwUAA4IBAQDYVHjHjo7lII6JvUqpgumnf3KHrZ4HMnqzAjkNR2XT3xrj
ThEcK9zr7CLkvU+juh8Y8akYe+/D4rTpEf5ipKNsuM2v/uvv4PpGGqpAOcw9LkeX
NH1cEdOPPzkJViO/nDJ/1/lG3FRHBfyVWBhVK1RRje1AYol4EUBykJey0/Np6DIE
tAA4Y4zxdlYFrLFMAzpZDsTA6TJOBCJq4Q8sy1H7HRe7Ja66A0f0spryA24SM4rT
+9bLmZY4Ou5ptYaRLc0cb2G44ftmIzDM4nACDwXuSU/+d2+SeJyhoaHX8WujZgW5
pwy3KXF94BNiSF3bfwCFOjzKZD0YwxDKGb0nJvK6
-----END CERTIFICATE-----
Generated at Wed May 13 03:55:32 2026 by rpki-client