
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3136302e32322e39342e302f32342d3234203d3e20313533313130.roa
File: 3136302e32322e39342e302f32342d3234203d3e20313533313130.roa (raw, json)
Hash identifier: nPHGyPRlVU4NvbiCVIa+b1x20FU3xtj+iCnjkj2L1yY=
Subject key identifier: 4A:83:E0:9D:63:74:9A:C5:DF:D6:68:FF:F6:12:91:3B:A9:CE:B8:A9
Certificate issuer: /CN=3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE
Certificate serial: 34FB8C7B76AB683C01E726DD1B4B85583F1A5AC7
Authority key identifier: 3D:8B:1B:0F:FC:78:64:B1:A0:E9:9A:09:EB:F5:A7:6C:96:C8:27:DE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3136302e32322e39342e302f32342d3234203d3e20313533313130.roa
Signing time: Sun 03 May 2026 03:14:58 +0000
ROA not before: Sun 03 May 2026 03:09:58 +0000
ROA not after: Sun 02 May 2027 03:14:58 +0000
asID: 153110
IP address blocks: 160.22.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.crl
rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:53:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:fb:8c:7b:76:ab:68:3c:01:e7:26:dd:1b:4b:85:58:3f:1a:5a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE
Validity
Not Before: May 3 03:09:58 2026 GMT
Not After : May 2 03:14:58 2027 GMT
Subject: CN=4A83E09D63749AC5DFD668FFF612913BA9CEB8A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1f:e3:1d:33:78:1a:19:dd:6f:9d:c4:3f:a4:
f8:56:18:b8:49:da:4c:fc:5f:0a:cb:46:9c:40:c8:
5c:88:ca:cf:ae:28:82:98:b2:08:8b:b8:ed:02:73:
3b:b5:17:c1:5e:5d:38:cf:dc:6a:b3:c7:4f:e8:cc:
09:df:7b:e1:c8:6c:96:f0:8b:93:a7:ad:5f:83:83:
d1:02:00:0d:89:19:28:70:c9:52:f3:67:e7:99:72:
b3:4d:ab:54:ea:85:98:fb:b6:f9:b8:ff:9d:a9:ef:
00:25:81:d5:a0:2c:7b:db:89:df:4e:f6:89:39:62:
e0:d8:78:a4:99:f0:36:5b:2c:8b:ff:2b:6e:c9:a4:
7f:79:59:33:53:52:b9:8d:2c:d5:e2:62:05:39:16:
58:d6:5f:02:6f:34:fa:83:f9:86:13:01:85:f0:ee:
97:f5:79:d9:05:ea:70:fd:2d:83:a7:25:ef:53:c3:
d4:03:21:cf:de:24:a1:73:38:a9:71:16:58:cf:16:
02:bc:66:38:02:24:33:a8:a4:fb:57:62:82:f2:8a:
da:1f:75:24:c1:42:fa:fa:ea:36:77:6e:3d:c7:9a:
76:e2:f9:f8:cb:c5:f6:a3:57:93:9e:07:67:d1:4b:
ce:13:0d:dc:2b:61:7c:2b:bf:28:b9:2a:4c:8a:c5:
e9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:83:E0:9D:63:74:9A:C5:DF:D6:68:FF:F6:12:91:3B:A9:CE:B8:A9
X509v3 Authority Key Identifier:
keyid:3D:8B:1B:0F:FC:78:64:B1:A0:E9:9A:09:EB:F5:A7:6C:96:C8:27:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3D8B1B0FFC7864B1A0E99A09EBF5A76C96C827DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3136302e32322e39342e302f32342d3234203d3e20313533313130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.94.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:ed:55:4d:cb:86:8f:a2:b8:3f:68:c6:8f:7b:08:1c:d5:0e:
e8:9a:22:0b:09:50:a4:d1:26:c3:a2:94:a1:95:12:9e:e4:36:
be:18:90:69:ce:fc:4d:a5:8f:ba:38:ed:9f:d9:91:84:34:09:
fc:53:6e:38:79:0f:0c:a9:24:be:63:18:ba:51:ec:67:28:ad:
bd:f2:fd:8f:34:c0:95:26:72:77:dd:6f:69:56:16:3a:d3:d1:
88:3f:a9:7f:cf:fd:37:dc:34:d2:dc:8d:bc:92:ff:f3:0e:2c:
81:92:8b:58:5a:e2:82:f4:fc:e3:d8:1a:72:87:53:29:a4:5a:
97:22:ca:85:10:92:ca:31:61:95:cf:1b:50:a1:24:a8:16:fb:
97:e0:87:03:0a:df:57:e2:d9:63:0a:dd:9a:99:a7:98:50:42:
7d:c8:1d:f6:d8:79:9d:1c:57:10:a3:1e:22:16:c4:c6:61:33:
bb:c2:ce:20:ff:c8:e8:aa:8d:66:a9:64:a0:3c:b4:68:6c:86:
0e:ce:34:9b:fb:9d:71:e7:a1:da:93:cb:3f:c5:db:31:ce:11:
e3:e2:63:b4:f8:37:26:6e:65:a5:6b:a7:94:be:27:7a:a6:26:
43:2f:fc:20:51:0c:85:7e:4e:17:da:06:9a:99:ce:4f:da:e4:
f5:e8:6c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:50:33 2026 by rpki-client