
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/3136302e32352e3132372e302f32342d3234203d3e20313532383338.roa
File: 3136302e32352e3132372e302f32342d3234203d3e20313532383338.roa (raw, json)
Hash identifier: rVdmDzQFD5XQKuWG8ocH4/yOjCGzvuLA3P7Uzu2MMmg=
Subject key identifier: C0:7C:55:6C:C2:A0:F8:F8:CA:24:2B:46:B5:8C:59:2F:D7:34:53:1C
Certificate issuer: /CN=F576D7187FE092471757158DEF85D92023BB827A
Certificate serial: 2CD927C7663D8F33EA88CAA02113933B87FFA7E6
Authority key identifier: F5:76:D7:18:7F:E0:92:47:17:57:15:8D:EF:85:D9:20:23:BB:82:7A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F576D7187FE092471757158DEF85D92023BB827A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/3136302e32352e3132372e302f32342d3234203d3e20313532383338.roa
Signing time: Sun 03 May 2026 03:12:58 +0000
ROA not before: Sun 03 May 2026 03:07:58 +0000
ROA not after: Sun 02 May 2027 03:12:58 +0000
asID: 152838
IP address blocks: 160.25.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.crl
rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F576D7187FE092471757158DEF85D92023BB827A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:13:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:d9:27:c7:66:3d:8f:33:ea:88:ca:a0:21:13:93:3b:87:ff:a7:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F576D7187FE092471757158DEF85D92023BB827A
Validity
Not Before: May 3 03:07:58 2026 GMT
Not After : May 2 03:12:58 2027 GMT
Subject: CN=C07C556CC2A0F8F8CA242B46B58C592FD734531C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f5:7e:1e:7c:d2:b7:8a:d9:51:0b:b9:14:ef:
39:56:8f:9c:06:ad:96:4d:8c:07:ae:11:a5:6e:27:
f8:cd:e6:98:b8:9b:81:63:e1:21:d1:9a:95:98:34:
20:a6:90:69:14:87:cf:82:79:95:75:67:62:53:ff:
e7:da:8a:ad:91:0f:02:ce:55:7c:0c:fe:7d:ef:0c:
a9:1e:59:c1:cf:54:d0:e3:38:51:4a:de:11:9f:c0:
e2:b8:5c:b4:cc:fe:ad:95:cb:45:4a:61:1b:88:40:
98:64:e8:1a:de:46:20:6d:da:cb:57:f6:5d:7a:15:
26:29:01:87:49:44:2e:46:08:e0:d6:fb:1e:a4:8e:
2a:25:cf:01:22:bd:2b:40:6e:b2:cc:c4:dd:50:d6:
05:05:c2:1b:6c:33:e3:81:7f:e5:e1:e7:7b:03:08:
3f:52:12:45:94:ac:81:36:a3:d4:d6:27:dd:f1:0d:
1d:8d:90:b7:79:7e:14:39:07:13:5a:3d:9a:20:43:
fd:c7:cb:d5:63:98:9e:96:6d:25:0b:ed:96:6c:8d:
24:d8:98:b2:a3:45:f3:73:c4:17:39:6c:ce:1d:04:
fb:6e:16:0c:c6:40:4d:62:9a:ff:f6:40:b4:b3:54:
19:c6:e8:72:71:a4:30:26:cb:fb:24:c3:1d:a9:63:
77:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7C:55:6C:C2:A0:F8:F8:CA:24:2B:46:B5:8C:59:2F:D7:34:53:1C
X509v3 Authority Key Identifier:
keyid:F5:76:D7:18:7F:E0:92:47:17:57:15:8D:EF:85:D9:20:23:BB:82:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/F576D7187FE092471757158DEF85D92023BB827A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F576D7187FE092471757158DEF85D92023BB827A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/3136302e32352e3132372e302f32342d3234203d3e20313532383338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.127.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:c6:69:37:79:52:70:63:a1:a3:ab:75:3e:c2:d4:06:f1:4e:
46:fc:ae:28:47:09:1a:d0:be:bd:b4:01:c1:d3:ff:eb:51:2e:
9f:6e:dd:7a:f5:27:e4:10:53:24:28:5a:a2:7a:23:71:8b:a0:
74:12:92:c0:a9:46:af:d1:15:65:50:a6:df:1b:24:63:04:c4:
1f:a7:f6:33:97:ca:b0:1c:72:b6:d4:97:8e:aa:74:a5:a3:cb:
65:3d:7b:1b:06:80:91:73:87:b5:62:a0:85:cb:30:85:56:d5:
a2:fd:f2:d0:4c:5f:94:6e:fb:19:ee:82:74:19:7d:bb:f2:e9:
19:1d:0e:7e:fe:54:d0:a1:25:a1:c7:e4:a0:2b:0c:02:29:1b:
36:11:0b:ec:bc:d8:58:39:ef:57:43:58:53:b7:f4:45:02:07:
7b:12:f7:b3:99:e0:80:26:56:26:77:ec:84:55:05:49:e8:05:
85:0b:f0:57:f6:ca:b9:52:61:18:b6:43:7c:95:90:55:e7:2d:
f1:c3:97:ce:f1:42:58:fa:8f:9c:98:6e:56:54:fe:9c:cd:3c:
e8:39:e5:68:66:04:21:f2:d2:b3:e5:0d:a4:ed:1f:1b:95:8c:
c4:33:81:c4:c4:ce:9f:8c:48:fa:e1:c8:f5:73:b7:5e:ff:7f:
42:2c:84:4f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIULNknx2Y9jzPqiMqgIROTO4f/p+YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjU3NkQ3MTg3RkUwOTI0NzE3NTcxNThERUY4NUQ5MjAy
M0JCODI3QTAeFw0yNjA1MDMwMzA3NThaFw0yNzA1MDIwMzEyNThaMDMxMTAvBgNV
BAMTKEMwN0M1NTZDQzJBMEY4RjhDQTI0MkI0NkI1OEM1OTJGRDczNDUzMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo9X4efNK3itlRC7kU7zlWj5wG
rZZNjAeuEaVuJ/jN5pi4m4Fj4SHRmpWYNCCmkGkUh8+CeZV1Z2JT/+faiq2RDwLO
VXwM/n3vDKkeWcHPVNDjOFFK3hGfwOK4XLTM/q2Vy0VKYRuIQJhk6BreRiBt2stX
9l16FSYpAYdJRC5GCODW+x6kjiolzwEivStAbrLMxN1Q1gUFwhtsM+OBf+Xh53sD
CD9SEkWUrIE2o9TWJ93xDR2NkLd5fhQ5BxNaPZogQ/3Hy9VjmJ6WbSUL7ZZsjSTY
mLKjRfNzxBc5bM4dBPtuFgzGQE1imv/2QLSzVBnG6HJxpDAmy/skwx2pY3ejAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUwHxVbMKg+PjKJCtGtYxZL9c0UxwwHwYDVR0j
BBgwFoAU9XbXGH/gkkcXVxWN74XZICO7gnowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZTIwNmRlZmEtZmE0My00ZjkzLTkzY2UtMzlmZGZmODFjMTlhLzAvRjU3NkQ3MTg3
RkUwOTI0NzE3NTcxNThERUY4NUQ5MjAyM0JCODI3QS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9GNTc2RDcxODdGRTA5MjQ3MTc1NzE1OERFRjg1RDkyMDIzQkI4
MjdBLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2UyMDZkZWZhLWZhNDMtNGY5My05
M2NlLTM5ZmRmZjgxYzE5YS8wLzMxMzYzMDJlMzIzNTJlMzEzMjM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzgzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBl/MA0GCSqG
SIb3DQEBCwUAA4IBAQBfxmk3eVJwY6Gjq3U+wtQG8U5G/K4oRwka0L69tAHB0//r
US6fbt169SfkEFMkKFqieiNxi6B0EpLAqUav0RVlUKbfGyRjBMQfp/Yzl8qwHHK2
1JeOqnSlo8tlPXsbBoCRc4e1YqCFyzCFVtWi/fLQTF+UbvsZ7oJ0GX278ukZHQ5+
/lTQoSWhx+SgKwwCKRs2EQvsvNhYOe9XQ1hTt/RFAgd7EvezmeCAJlYmd+yEVQVJ
6AWFC/BX9sq5UmEYtkN8lZBV5y3xw5fO8UJY+o+cmG5WVP6czTzoOeVoZgQh8tKz
5Q2k7R8blYzEM4HExM6fjEj64cj1c7de/39CLIRP
-----END CERTIFICATE-----
Generated at Wed May 13 02:11:44 2026 by rpki-client