
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/3136302e32322e33302e302f32342d3234203d3e20313532373938.roa
File: 3136302e32322e33302e302f32342d3234203d3e20313532373938.roa (raw, json)
Hash identifier: LMx8zBVHXTYJsx76jxaT8yWyQ1RbqIMUQYgsbdQSiik=
Subject key identifier: B9:D3:A0:98:4F:5D:92:32:88:F9:A7:BE:16:9F:6F:3D:C9:52:D9:E5
Certificate issuer: /CN=1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E
Certificate serial: 014D9A7C76012B24BEE7F4C1F98B59A14A384AD4
Authority key identifier: 1B:A7:48:DB:DE:37:8C:4F:7F:2C:E6:A8:1E:5D:40:F8:79:3E:AF:3E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/3136302e32322e33302e302f32342d3234203d3e20313532373938.roa
Signing time: Sun 03 May 2026 03:17:53 +0000
ROA not before: Sun 03 May 2026 03:12:53 +0000
ROA not after: Sun 02 May 2027 03:17:53 +0000
asID: 152798
IP address blocks: 160.22.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.crl
rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:27:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:4d:9a:7c:76:01:2b:24:be:e7:f4:c1:f9:8b:59:a1:4a:38:4a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E
Validity
Not Before: May 3 03:12:53 2026 GMT
Not After : May 2 03:17:53 2027 GMT
Subject: CN=B9D3A0984F5D923288F9A7BE169F6F3DC952D9E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:06:6e:a7:4c:e9:8f:70:fd:07:fb:91:53:03:
c4:ab:79:a1:00:00:6b:f5:d8:92:5c:38:c4:5f:c2:
57:39:3d:fc:1f:48:9b:3e:50:42:a0:1d:b3:bd:d5:
51:62:4d:41:d3:29:4b:5f:4f:d6:a3:60:a2:5c:49:
cf:77:5f:ee:a2:73:16:83:81:38:64:0a:de:42:05:
d8:c2:72:58:fa:d6:ad:62:9b:c6:da:9d:31:54:09:
20:5a:54:e0:de:95:86:5a:93:cd:0c:31:f3:d2:18:
cd:b7:c3:6a:44:a9:38:af:fc:57:f6:1b:19:4d:44:
36:5b:53:6f:92:43:59:cd:77:1d:22:4c:96:02:9a:
3e:90:e2:14:24:0c:7b:38:18:d6:6f:b3:2f:c9:40:
91:60:52:4f:14:ca:a3:7e:aa:b1:d2:0e:1a:bc:83:
41:11:10:e1:70:ec:40:a8:af:d1:8e:c4:bd:ff:22:
3b:e3:07:9b:b6:67:7b:5d:8e:5a:10:96:db:93:54:
bb:36:30:02:1d:ca:5a:96:e6:1b:19:91:3b:e3:16:
af:77:ec:40:bd:64:4a:6d:5b:1a:58:03:40:28:17:
e7:e5:fc:f2:6d:0d:6e:7a:92:69:e9:79:69:3f:23:
12:d0:c3:c6:f4:33:cf:1c:60:3a:47:d7:d5:89:3c:
49:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D3:A0:98:4F:5D:92:32:88:F9:A7:BE:16:9F:6F:3D:C9:52:D9:E5
X509v3 Authority Key Identifier:
keyid:1B:A7:48:DB:DE:37:8C:4F:7F:2C:E6:A8:1E:5D:40:F8:79:3E:AF:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/3136302e32322e33302e302f32342d3234203d3e20313532373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.30.0/24
Signature Algorithm: sha256WithRSAEncryption
89:20:75:24:a0:08:9f:55:9a:02:a0:5a:42:b3:4d:a6:19:be:
45:c2:f3:7f:83:56:e4:99:48:d2:f0:db:93:7c:2c:e5:8e:77:
53:60:34:41:a0:43:28:66:76:b4:8b:e2:ec:e0:05:45:d4:c3:
ff:de:27:cb:30:9f:e3:af:0e:71:81:7b:60:69:83:7e:e7:9a:
cb:d9:f8:00:ec:45:da:44:22:c6:1a:d0:fe:15:19:c2:69:f0:
7f:8a:3e:c3:ca:03:ca:be:82:b2:45:0f:bc:41:14:69:9a:82:
7f:7b:32:70:13:d8:7e:9a:83:d8:3b:19:a0:bf:14:1b:39:83:
14:12:72:3d:c0:0a:a5:eb:aa:26:68:cf:b1:e7:8f:66:aa:02:
e6:01:d7:1a:22:06:d6:51:ef:4a:42:92:0a:3b:b3:86:22:67:
21:e2:ab:87:12:c6:7f:d9:37:2b:f5:e4:60:24:20:f2:95:bf:
bc:46:da:7f:5f:74:f1:99:83:2f:29:d0:95:88:2e:d6:58:e8:
55:70:23:5f:3e:69:8b:a7:9a:49:85:b2:90:d5:9e:a8:d7:0a:
1a:34:71:a2:08:4c:62:cd:44:2a:54:3b:21:f5:0d:5a:8e:3f:
d3:3c:87:93:5f:8f:e8:ac:29:3f:4b:1e:8c:48:b2:9b:82:e4:
51:ed:38:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:59:10 2026 by rpki-client