
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/3136302e32352e3132362e302f32332d3233203d3e20313532383338.roa
File: 3136302e32352e3132362e302f32332d3233203d3e20313532383338.roa (raw, json)
Hash identifier: 6Qo8l/n/t0M13iYl+2beLLikwdIbh6DFG76tlW903nY=
Subject key identifier: 4C:42:36:F3:25:60:0C:13:45:3F:FC:2D:73:C1:B4:8B:F9:EE:12:4A
Certificate issuer: /CN=F576D7187FE092471757158DEF85D92023BB827A
Certificate serial: 7994CD7AA13C852351FB8E018BD5E94DCCC46E63
Authority key identifier: F5:76:D7:18:7F:E0:92:47:17:57:15:8D:EF:85:D9:20:23:BB:82:7A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F576D7187FE092471757158DEF85D92023BB827A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/3136302e32352e3132362e302f32332d3233203d3e20313532383338.roa
Signing time: Sun 03 May 2026 03:12:58 +0000
ROA not before: Sun 03 May 2026 03:07:58 +0000
ROA not after: Sun 02 May 2027 03:12:58 +0000
asID: 152838
IP address blocks: 160.25.126.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.crl
rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F576D7187FE092471757158DEF85D92023BB827A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:94:cd:7a:a1:3c:85:23:51:fb:8e:01:8b:d5:e9:4d:cc:c4:6e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F576D7187FE092471757158DEF85D92023BB827A
Validity
Not Before: May 3 03:07:58 2026 GMT
Not After : May 2 03:12:58 2027 GMT
Subject: CN=4C4236F325600C13453FFC2D73C1B48BF9EE124A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:32:13:5b:98:8c:b1:08:d9:66:7a:4b:f6:67:
bc:cb:c7:e4:1d:7e:5b:43:a4:86:af:56:a2:0f:9d:
96:d8:51:e5:0e:ef:80:0d:3e:9e:ee:85:9c:e9:04:
02:87:c4:fe:c4:89:d4:36:9c:b6:d1:74:4e:a5:e4:
56:81:26:4f:cf:4f:a4:29:a0:c9:02:17:dd:11:90:
88:ea:b4:83:f8:b5:4f:43:fe:d5:1d:54:80:48:a8:
c2:36:9d:9f:a4:22:b4:04:49:8b:be:b2:e3:42:35:
73:37:e0:7c:a5:fb:c6:62:9b:9c:c6:b1:e9:d4:c0:
1a:19:a5:74:af:84:56:a9:62:50:17:ea:a6:5e:9a:
7d:86:88:3e:71:2b:65:e4:d7:e8:06:b1:c3:37:a3:
5e:2b:46:a5:cd:e7:de:a0:e2:c1:3d:38:6a:1c:67:
03:0f:63:82:1f:35:4b:5f:92:ad:2d:ea:7d:ce:81:
c1:9c:b6:cc:5d:7e:a7:67:8f:d2:8f:5f:46:a8:5b:
f0:93:d0:61:48:c5:50:04:0a:a6:36:65:4f:a1:c7:
20:f6:1b:ec:b1:b7:d4:3a:51:8d:ce:dd:12:70:10:
8e:b8:4a:ad:05:23:15:25:ce:11:a9:8b:2d:5b:76:
1e:e4:56:f1:7c:c3:90:08:38:91:9d:6d:fd:63:37:
0f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:42:36:F3:25:60:0C:13:45:3F:FC:2D:73:C1:B4:8B:F9:EE:12:4A
X509v3 Authority Key Identifier:
keyid:F5:76:D7:18:7F:E0:92:47:17:57:15:8D:EF:85:D9:20:23:BB:82:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F576D7187FE092471757158DEF85D92023BB827A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/3136302e32352e3132362e302f32332d3233203d3e20313532383338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.126.0/23
Signature Algorithm: sha256WithRSAEncryption
65:7f:24:c2:e9:e9:5e:42:3d:de:7b:7d:37:40:5e:2e:2c:53:
bf:1d:2d:62:65:98:e8:b2:12:f5:c0:00:fb:3b:c9:b0:b0:4d:
16:79:ef:4b:03:4e:00:70:91:6d:c4:c4:89:d9:5c:06:de:cd:
3d:c2:bb:69:ef:94:0d:ae:57:c2:eb:b9:25:be:ad:0e:81:17:
f7:d7:19:e3:33:1c:c5:cf:ba:40:8b:2e:1e:2f:ef:15:79:d7:
ce:78:0a:70:df:38:57:8b:29:d8:f9:8d:19:53:e0:c5:9a:62:
5b:21:82:81:21:9a:c8:18:5f:c6:db:80:2e:72:91:89:38:dc:
b1:30:10:38:b1:c7:ae:7c:b8:b9:47:e1:e8:53:c9:92:20:48:
f5:7d:3e:ec:1e:29:f0:ea:d5:46:2d:b9:8f:f4:94:96:74:a0:
ec:34:16:6b:0b:91:2c:55:16:85:0d:9d:76:b9:43:be:73:39:
99:e3:a9:f5:66:02:80:1d:75:43:e3:57:d9:cf:2a:85:3f:1a:
ee:4b:17:16:a1:c1:5a:2a:85:25:12:55:55:06:45:93:06:98:
09:63:b6:44:ca:d6:63:76:5d:54:08:73:38:37:05:44:23:5b:
d8:37:b3:ff:1b:75:fd:8b:dc:5d:33:9e:ac:bf:4d:a4:e4:1b:
46:8f:2b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:50:04 2026 by rpki-client