
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/3136302e32352e3137342e302f32342d3234203d3e20313533303733.roa
File: 3136302e32352e3137342e302f32342d3234203d3e20313533303733.roa (raw, json)
Hash identifier: FXO9CsmctV8fdA5KiII/rw/3Y+5l9AlF4P2ED3TDR8A=
Subject key identifier: DD:68:4A:B7:FF:62:AA:F0:60:60:AD:25:29:4A:68:EB:AE:A9:4A:30
Certificate issuer: /CN=5C7445C1E1376E4A7B404BC53A71AC927D2C2204
Certificate serial: 30E6BAAF91447BFE238C957BED8180E507FD8C35
Authority key identifier: 5C:74:45:C1:E1:37:6E:4A:7B:40:4B:C5:3A:71:AC:92:7D:2C:22:04
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/3136302e32352e3137342e302f32342d3234203d3e20313533303733.roa
Signing time: Sun 03 May 2026 03:15:41 +0000
ROA not before: Sun 03 May 2026 03:10:41 +0000
ROA not after: Sun 02 May 2027 03:15:41 +0000
asID: 153073
IP address blocks: 160.25.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.crl
rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:44:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:e6:ba:af:91:44:7b:fe:23:8c:95:7b:ed:81:80:e5:07:fd:8c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C7445C1E1376E4A7B404BC53A71AC927D2C2204
Validity
Not Before: May 3 03:10:41 2026 GMT
Not After : May 2 03:15:41 2027 GMT
Subject: CN=DD684AB7FF62AAF06060AD25294A68EBAEA94A30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:97:be:fd:2b:18:ec:e7:8e:1c:82:fd:86:38:
6c:73:05:2c:4e:4c:18:3f:7a:21:d0:a4:a8:ee:b0:
0d:b9:a1:58:e2:52:8f:e8:15:df:df:64:d0:4d:d0:
62:5a:6d:3b:26:0d:52:35:bd:0c:61:61:34:94:d5:
d6:2d:6c:61:72:9c:62:95:0d:0b:43:5e:f7:12:2d:
27:25:ca:ba:9b:38:ec:b0:4c:40:57:0a:f9:06:60:
5f:93:6d:cb:84:88:93:f8:9c:b1:15:ab:59:83:5d:
f1:2e:83:0d:cc:6e:37:8c:b0:c1:1c:36:c7:23:3c:
78:b3:c3:c2:70:36:e4:6e:f6:dc:fd:b9:23:94:13:
6f:56:0e:e0:c7:86:67:6d:57:84:4c:ee:c6:55:40:
f9:b7:18:ce:13:c3:6d:0c:df:8c:59:94:18:35:13:
01:23:66:79:3c:69:8f:e3:43:99:c5:61:f9:b2:bc:
6f:6f:d0:c8:e2:f0:21:8f:9b:0d:60:90:62:80:f0:
a8:1a:c7:39:91:9a:49:b1:d8:e3:93:90:08:52:18:
1e:94:18:29:f2:c9:78:c8:31:7c:7a:9b:f0:2a:57:
d3:d2:a6:e1:e6:01:b1:72:40:c7:50:8c:d4:ea:4a:
35:aa:7f:d4:6d:5d:ec:c3:d4:03:2b:48:a1:b5:d5:
2c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:68:4A:B7:FF:62:AA:F0:60:60:AD:25:29:4A:68:EB:AE:A9:4A:30
X509v3 Authority Key Identifier:
keyid:5C:74:45:C1:E1:37:6E:4A:7B:40:4B:C5:3A:71:AC:92:7D:2C:22:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5C7445C1E1376E4A7B404BC53A71AC927D2C2204.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/3136302e32352e3137342e302f32342d3234203d3e20313533303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.174.0/24
Signature Algorithm: sha256WithRSAEncryption
32:26:75:b3:41:92:cf:7e:7a:6c:b7:a4:68:cc:89:3d:1d:50:
e7:cb:04:cb:16:44:69:1a:95:73:73:34:dd:14:92:4b:e2:72:
31:a3:35:b4:85:c5:17:05:9e:ff:6c:30:28:9e:d5:6d:10:4d:
65:f7:1f:4e:50:dc:aa:90:73:3e:ce:ab:86:59:a9:cf:26:b7:
1a:fe:f1:0f:32:6f:31:59:1c:3e:e2:4c:2c:fc:49:f2:29:18:
fb:bf:4c:11:6b:c3:fa:d2:19:6d:15:ff:94:59:ad:f1:d0:63:
91:d1:d2:11:8f:fc:63:62:fc:47:1d:1f:54:0e:01:9c:76:64:
c5:71:13:15:0f:cd:1a:4d:dd:d3:b9:dc:60:ce:f5:72:d0:d9:
07:47:00:0c:5f:26:3a:dc:f8:63:6b:f5:d2:17:e9:48:8b:99:
e1:31:93:46:fc:34:19:40:77:7c:e4:19:63:ab:b3:e9:ad:de:
b0:ed:1e:02:06:fe:93:ea:90:21:58:16:39:fe:de:46:3e:47:
d8:dc:04:92:7a:b6:71:45:ac:e6:53:58:28:14:b8:e2:e8:f0:
7e:3c:44:67:03:db:62:19:2b:32:22:83:ed:6a:53:81:f6:80:
83:10:36:d7:7a:53:a0:3d:a7:db:c4:0c:14:f1:38:9a:02:dd:
db:02:f6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:15:05 2026 by rpki-client