
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/3136302e31392e3136352e302f32342d3234203d3e20313532373739.roa
File: 3136302e31392e3136352e302f32342d3234203d3e20313532373739.roa (raw, json)
Hash identifier: tpH2JM9YTbmOossLdQW6SZYFmNHRQYnoyuwrrx1s/G4=
Subject key identifier: 2D:11:7D:14:3A:56:19:B3:7F:55:EB:FE:E0:77:79:56:27:09:26:6B
Certificate issuer: /CN=1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C
Certificate serial: 068885B08DFEE293035EFB3F2B49A3B0D2C6BE72
Authority key identifier: 1F:2A:25:26:6F:0F:F3:AB:5E:10:77:BA:20:AC:3B:13:AB:A6:A8:9C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/3136302e31392e3136352e302f32342d3234203d3e20313532373739.roa
Signing time: Sun 03 May 2026 03:18:33 +0000
ROA not before: Sun 03 May 2026 03:13:33 +0000
ROA not after: Sun 02 May 2027 03:18:33 +0000
asID: 152779
IP address blocks: 160.19.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.crl
rsync://rpki-rsync.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:58:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:88:85:b0:8d:fe:e2:93:03:5e:fb:3f:2b:49:a3:b0:d2:c6:be:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C
Validity
Not Before: May 3 03:13:33 2026 GMT
Not After : May 2 03:18:33 2027 GMT
Subject: CN=2D117D143A5619B37F55EBFEE07779562709266B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c8:c6:e2:5f:cd:11:a0:6c:42:77:e5:cb:3e:
31:3f:1c:f2:42:1e:7a:00:d3:f2:2a:2b:fc:04:b4:
f6:06:23:45:d2:38:00:a6:3b:85:38:b5:e7:1b:86:
0f:f7:28:ce:e4:c7:eb:30:94:63:20:37:77:69:8a:
cc:15:d7:dc:72:b1:a9:29:3c:65:01:9f:c5:85:cc:
95:eb:9f:b6:d8:00:2e:8a:8c:67:60:38:49:71:d7:
ca:2b:0c:fd:2f:39:81:59:0e:e7:16:e0:8d:5d:82:
91:24:af:18:4b:00:f7:6d:86:ed:a2:50:3c:b0:d3:
5c:32:09:bd:ef:ce:f4:a1:e6:da:57:8f:94:3d:ff:
0c:ff:a8:40:f0:11:83:ed:63:22:ff:be:cc:62:16:
65:f1:8c:8b:94:dd:69:fd:7b:60:cf:b9:47:fe:dc:
34:3f:2d:04:30:61:e4:e6:44:51:8b:3a:d9:cc:0d:
32:56:e1:0c:3d:82:53:d2:bb:c0:04:f9:5d:33:a0:
b1:57:77:8e:88:42:94:cb:0e:34:23:da:3b:1c:68:
08:4f:a7:9e:6d:93:dd:d7:77:32:ea:ad:41:7f:31:
4e:e5:49:35:98:22:dc:87:43:9e:cf:db:9c:96:37:
cb:da:ab:3d:0c:c9:7f:a9:0a:79:6b:71:46:d2:b5:
57:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:11:7D:14:3A:56:19:B3:7F:55:EB:FE:E0:77:79:56:27:09:26:6B
X509v3 Authority Key Identifier:
keyid:1F:2A:25:26:6F:0F:F3:AB:5E:10:77:BA:20:AC:3B:13:AB:A6:A8:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1F2A25266F0FF3AB5E1077BA20AC3B13ABA6A89C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f92254c3-2661-461f-9324-07070470cc6d/0/3136302e31392e3136352e302f32342d3234203d3e20313532373739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.19.165.0/24
Signature Algorithm: sha256WithRSAEncryption
20:67:4d:86:d3:44:e9:3a:e3:0a:4d:30:3c:87:6b:64:fc:cf:
18:3b:a3:32:70:b3:c5:4a:30:17:84:0a:88:f7:2e:65:79:99:
ad:5e:da:82:95:c6:34:95:fe:b0:ad:47:1c:66:28:f1:5a:ed:
4e:3e:41:c7:d9:ad:2c:f0:98:ce:18:db:17:f3:47:5a:32:9a:
75:bf:ee:35:f9:70:d2:48:c7:d3:30:3d:5e:36:89:f2:33:c1:
a4:c7:3e:76:78:80:4d:9c:77:e0:e9:27:c2:1d:cc:54:08:f2:
89:6a:e0:68:26:46:43:69:d0:4a:a7:c7:f7:d6:b5:eb:81:69:
bc:fb:92:30:6f:fc:88:4b:22:1a:7d:87:fb:6f:b0:e7:46:c2:
6c:57:33:fc:6d:f6:2c:42:c6:61:30:a0:2b:ea:04:1e:c3:80:
20:4d:dc:77:cf:c7:d9:53:5c:32:74:a7:5f:3e:ba:1d:89:5c:
58:ef:e6:b0:a3:ce:04:ee:03:bc:8d:31:54:1e:aa:74:b3:de:
14:9b:c6:82:27:e4:b1:b2:15:d0:b9:ce:91:b8:00:a6:b7:83:
2b:00:45:19:df:96:1b:e0:5f:c4:8c:97:c5:fc:3a:85:b9:fc:
69:f7:2a:b8:d0:dc:a8:20:c1:75:40:1b:4a:90:bd:df:90:85:
89:33:ff:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:10:19 2026 by rpki-client