
$ rpki-client -vvf rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/3136302e32302e3130352e302f32342d3234203d3e20313532373930.roa
File: 3136302e32302e3130352e302f32342d3234203d3e20313532373930.roa (raw, json)
Hash identifier: WBmunSovPNYFyYK7dkst2VZ71lyXv9EDr75oZ34lMUE=
Subject key identifier: F1:F0:A1:92:10:B3:1E:0B:32:7A:10:7C:B0:78:49:CD:24:D2:21:1B
Certificate issuer: /CN=FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C
Certificate serial: 11635FE02EA135E686347D21F47B83055C7838C1
Authority key identifier: FD:5F:AE:8F:24:1E:C7:B7:2B:D4:BA:87:95:21:67:6B:1D:A8:F3:8C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/3136302e32302e3130352e302f32342d3234203d3e20313532373930.roa
Signing time: Sun 03 May 2026 03:19:06 +0000
ROA not before: Sun 03 May 2026 03:14:06 +0000
ROA not after: Sun 02 May 2027 03:19:06 +0000
asID: 152790
IP address blocks: 160.20.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.crl
rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:28:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:63:5f:e0:2e:a1:35:e6:86:34:7d:21:f4:7b:83:05:5c:78:38:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C
Validity
Not Before: May 3 03:14:06 2026 GMT
Not After : May 2 03:19:06 2027 GMT
Subject: CN=F1F0A19210B31E0B327A107CB07849CD24D2211B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:97:a0:33:26:27:c3:09:f7:2f:c1:21:31:09:
bd:fe:87:8b:74:2d:82:3c:9f:fd:80:b3:b9:45:49:
94:57:a9:51:47:d8:0b:3e:56:19:db:ca:70:9b:7c:
99:0e:74:eb:40:9e:eb:1e:ea:d6:6b:18:01:e7:86:
d3:67:1a:af:8d:a4:be:01:7e:c8:d5:86:11:1e:3f:
8e:7f:56:20:71:cc:53:9a:f9:52:fb:df:09:ec:23:
9e:62:7d:0b:0f:4a:5f:7a:2d:a7:80:bb:04:72:bd:
70:80:57:f6:68:c0:d8:64:e8:3c:1c:2c:b8:d1:c4:
8a:17:61:8b:4e:5f:65:e3:39:77:f3:40:cc:0b:59:
ed:f1:b8:1e:90:0a:e7:ac:70:ef:87:96:fb:7e:94:
56:b8:67:77:2a:17:ce:a2:c6:2c:f9:c0:51:67:da:
ef:c9:2e:4a:be:83:e9:16:19:a6:22:bc:f1:36:da:
68:66:9b:59:bd:75:5d:f5:ba:ef:4a:87:ad:b7:2f:
ec:0b:75:87:04:4c:6a:a4:54:0a:40:96:a2:c8:3b:
63:f1:d1:2f:78:88:1a:e3:33:2d:70:45:26:b9:cf:
3b:07:97:6a:58:71:77:0b:b2:76:df:1d:66:9b:eb:
a9:dc:68:47:36:bc:32:c2:34:a1:56:d2:78:00:19:
5d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F0:A1:92:10:B3:1E:0B:32:7A:10:7C:B0:78:49:CD:24:D2:21:1B
X509v3 Authority Key Identifier:
keyid:FD:5F:AE:8F:24:1E:C7:B7:2B:D4:BA:87:95:21:67:6B:1D:A8:F3:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FD5FAE8F241EC7B72BD4BA879521676B1DA8F38C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/3136302e32302e3130352e302f32342d3234203d3e20313532373930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.20.105.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ee:d3:4c:a4:ad:c6:da:5e:9a:2d:53:f4:61:0c:94:ad:71:
26:30:fd:88:7a:f8:29:08:89:04:c5:e7:ac:60:fe:37:d5:be:
60:83:57:e0:31:cf:ea:d0:f8:36:bc:74:f6:21:68:9d:db:3d:
21:81:bf:a6:e0:48:35:95:cb:71:bf:70:57:35:48:9e:c0:38:
b5:74:5a:70:0a:3b:94:2d:42:52:17:09:69:dc:65:4e:70:04:
e3:2d:f5:f0:43:37:a2:a5:4e:e6:55:9f:dd:6b:73:c7:aa:09:
d1:a8:13:22:81:fe:27:e8:91:c5:d3:cc:c5:53:a9:aa:6d:e4:
ed:6d:cc:7b:c6:08:37:d0:9e:51:80:33:0f:15:d1:2c:50:cc:
84:28:3b:dd:3e:64:3d:4b:ba:93:87:0a:ab:f7:15:4c:54:20:
e7:ad:a3:e0:a6:f4:cf:ba:ca:48:bc:6a:fc:19:eb:d8:c4:c7:
5a:63:98:eb:0b:7b:9b:c4:1e:b4:20:ba:b0:d1:8c:78:5c:98:
07:22:86:11:43:f7:5c:fa:31:ea:68:c3:21:02:44:9a:9c:33:
fe:6c:b3:57:5f:3d:6b:38:cd:c8:5f:4e:6b:aa:6a:8c:f9:77:
56:e9:b5:33:a9:b8:b5:78:02:4f:32:0c:05:ff:de:ed:07:9f:
b3:26:5b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:11:49 2026 by rpki-client