
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/3136302e32352e34382e302f32332d3233203d3e20313533303634.roa
File: 3136302e32352e34382e302f32332d3233203d3e20313533303634.roa (raw, json)
Hash identifier: Lv2NZjilkuqOJ+c1eBw2SoZh11bL7T0a8emlMlbGyBU=
Subject key identifier: B9:D5:CE:10:DF:E3:D4:41:E6:6A:3E:38:CA:ED:A9:26:1C:C0:7C:A6
Certificate issuer: /CN=546870A485381309B4CFED36047EB68D8C1B2C0E
Certificate serial: 3346868FC76CC3D013BC0D60B1BDC90EF90380DC
Authority key identifier: 54:68:70:A4:85:38:13:09:B4:CF:ED:36:04:7E:B6:8D:8C:1B:2C:0E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/546870A485381309B4CFED36047EB68D8C1B2C0E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/3136302e32352e34382e302f32332d3233203d3e20313533303634.roa
Signing time: Sun 03 May 2026 03:13:40 +0000
ROA not before: Sun 03 May 2026 03:08:40 +0000
ROA not after: Sun 02 May 2027 03:13:40 +0000
asID: 153064
IP address blocks: 160.25.48.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/546870A485381309B4CFED36047EB68D8C1B2C0E.crl
rsync://rpki-rsync.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/546870A485381309B4CFED36047EB68D8C1B2C0E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/546870A485381309B4CFED36047EB68D8C1B2C0E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:26:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:46:86:8f:c7:6c:c3:d0:13:bc:0d:60:b1:bd:c9:0e:f9:03:80:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546870A485381309B4CFED36047EB68D8C1B2C0E
Validity
Not Before: May 3 03:08:40 2026 GMT
Not After : May 2 03:13:40 2027 GMT
Subject: CN=B9D5CE10DFE3D441E66A3E38CAEDA9261CC07CA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4a:09:d8:49:07:10:61:25:04:92:11:19:2b:
f8:9d:cb:3e:09:34:f2:10:1f:81:43:a3:a4:55:c1:
12:69:54:c0:61:d7:b0:0b:c8:a0:49:a5:53:38:63:
02:ed:bd:7d:27:83:16:c7:b0:aa:0d:2e:14:f3:d8:
73:07:04:52:70:ae:06:dd:37:0c:cb:c5:a1:a1:30:
9a:5b:99:9e:5b:09:97:9e:35:ed:41:ee:f2:7a:2e:
ef:6e:8a:db:0e:00:94:4d:d9:96:27:bf:75:64:49:
dd:a9:3d:21:5d:83:95:bc:bf:60:3d:74:92:c0:1c:
61:0d:ce:7b:d6:65:32:c8:e2:22:da:57:b0:37:83:
fc:c2:cb:8e:1f:d2:44:67:c0:54:e2:47:8a:f8:52:
ee:e6:e4:fc:77:04:35:41:78:c2:12:34:6d:25:2b:
80:f9:f2:39:b3:b9:f6:4c:84:67:8b:8c:2b:1e:c3:
2f:d4:e0:42:8c:d6:b5:c9:d8:71:ca:f8:81:fa:45:
13:03:97:d8:f1:aa:dd:3b:a7:99:9b:95:18:84:b9:
4e:15:b2:90:95:78:54:b2:14:9c:80:14:75:5d:fa:
fd:41:c0:a1:5d:80:ae:72:de:50:59:15:af:96:01:
23:1b:a6:f1:54:23:73:9e:21:22:6d:90:f2:c4:c5:
54:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D5:CE:10:DF:E3:D4:41:E6:6A:3E:38:CA:ED:A9:26:1C:C0:7C:A6
X509v3 Authority Key Identifier:
keyid:54:68:70:A4:85:38:13:09:B4:CF:ED:36:04:7E:B6:8D:8C:1B:2C:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/546870A485381309B4CFED36047EB68D8C1B2C0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/546870A485381309B4CFED36047EB68D8C1B2C0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/3136302e32352e34382e302f32332d3233203d3e20313533303634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.48.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:dc:7b:9d:e8:a0:cc:d9:75:c0:6c:c1:95:a2:04:ca:01:4e:
a5:a5:84:18:d5:c5:bd:79:73:77:cb:1e:a3:42:81:6d:7d:6b:
bb:e0:ba:3d:62:79:60:77:b6:2b:c7:36:38:2a:2c:f0:03:ea:
24:35:c7:64:97:51:b7:c8:68:f1:67:5b:a7:5b:05:ed:ad:87:
4c:c4:26:0a:ec:6b:2e:cc:f7:bb:f4:e1:0f:3d:bf:4d:49:55:
ad:6d:22:33:0c:84:ec:39:0b:6d:6d:89:2f:16:dd:d3:61:cf:
7e:91:c1:ca:a1:12:0e:a0:4a:2e:d5:a5:35:fd:eb:f7:c9:60:
47:53:db:f9:92:81:58:40:04:9c:0f:c0:06:b1:a9:87:76:37:
b1:17:56:a5:fa:53:75:04:9b:e1:61:f3:93:16:9e:59:43:5a:
d2:74:74:5b:8a:76:4e:bf:c8:bb:48:77:c1:f7:2e:8e:a8:66:
ec:f5:5a:a4:4c:68:5d:72:b5:f5:60:ab:1a:e6:06:4b:fc:ea:
73:b6:aa:c5:7d:68:6e:e8:39:4a:73:d5:c9:29:1a:04:f0:cb:
4c:29:d3:78:75:51:e4:46:63:aa:c8:62:32:69:c8:af:85:35:
e4:bc:8c:7c:b7:45:be:9b:82:81:01:d2:44:3e:4d:bd:f3:19:
73:85:96:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:56:43 2026 by rpki-client