
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/3136302e32352e36392e302f32342d3234203d3e20313531353736.roa
File: 3136302e32352e36392e302f32342d3234203d3e20313531353736.roa (raw, json)
Hash identifier: 1+JTfYoEqYG8HL8IOwRwwtz6yQl8cWQuH4yZNj+/L1Y=
Subject key identifier: 1B:6A:3C:19:C0:6B:15:16:44:1D:23:36:0E:4B:76:EB:C8:84:9A:77
Certificate issuer: /CN=88D4F4FDF51BF10308C015B2FC8444F66EC54E55
Certificate serial: 6BC1115D974C1C0E377EE57DFBB56F8FDA33DA58
Authority key identifier: 88:D4:F4:FD:F5:1B:F1:03:08:C0:15:B2:FC:84:44:F6:6E:C5:4E:55
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/3136302e32352e36392e302f32342d3234203d3e20313531353736.roa
Signing time: Mon 26 Oct 2026 12:06:57 +0000
ROA not before: Mon 26 Oct 2026 12:01:57 +0000
ROA not after: Mon 25 Oct 2027 12:06:57 +0000
asID: 151576
IP address blocks: 160.25.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.crl
rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 02:47:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:c1:11:5d:97:4c:1c:0e:37:7e:e5:7d:fb:b5:6f:8f:da:33:da:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88D4F4FDF51BF10308C015B2FC8444F66EC54E55
Validity
Not Before: Oct 26 12:01:57 2026 GMT
Not After : Oct 25 12:06:57 2027 GMT
Subject: CN=1B6A3C19C06B1516441D23360E4B76EBC8849A77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c1:71:08:8f:38:1a:90:70:71:ee:2a:1c:ae:
86:a1:07:0e:4c:52:9b:e4:53:39:4a:ba:15:3f:96:
11:7d:b4:2a:2f:e5:05:2c:a1:af:28:ae:d3:4c:0d:
2c:23:5a:2d:c3:7a:7a:39:d6:26:5b:f5:43:02:d5:
f5:54:63:cd:c1:cb:d7:45:03:d2:1c:c4:ea:62:81:
b0:f3:d1:cd:d6:74:47:db:ea:37:ca:9f:6c:a9:e8:
d5:75:bf:a4:24:14:f9:fa:13:0a:f0:ba:43:2d:cf:
6d:e9:bf:f2:33:c6:9d:79:0e:d2:cb:b7:28:81:9f:
ac:31:7a:7a:93:f5:ef:25:bb:02:cb:32:0a:3a:a7:
19:ce:ae:85:7d:e8:64:3e:3a:63:37:3f:b8:21:cf:
1e:a0:5c:a5:19:ab:e7:c1:da:67:36:d0:1c:48:f3:
a7:f7:6b:a7:41:5c:70:cc:d8:c0:2e:eb:f5:ad:2b:
d6:2d:91:60:b2:12:bf:1f:fb:bb:45:83:54:61:a2:
69:3e:46:0e:b0:46:98:b7:89:d1:35:0c:e6:80:06:
46:93:62:85:b5:e0:ed:bd:ce:fe:4a:a3:f2:f1:cb:
c6:bd:fb:39:13:44:b2:b2:15:32:25:d1:8f:f3:04:
cc:c1:e0:32:74:9b:12:a2:87:0f:49:3e:4d:17:15:
29:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6A:3C:19:C0:6B:15:16:44:1D:23:36:0E:4B:76:EB:C8:84:9A:77
X509v3 Authority Key Identifier:
keyid:88:D4:F4:FD:F5:1B:F1:03:08:C0:15:B2:FC:84:44:F6:6E:C5:4E:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88D4F4FDF51BF10308C015B2FC8444F66EC54E55.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/3136302e32352e36392e302f32342d3234203d3e20313531353736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.69.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:85:46:53:39:ff:4c:f1:9b:d4:1c:81:80:62:e2:6c:0e:26:
e1:e4:59:b5:cd:9f:41:e6:0e:e5:e6:c9:9d:33:68:47:04:49:
36:da:a7:af:9f:d2:16:3a:8c:50:b5:e7:5c:1e:61:3a:72:0e:
ea:79:88:ea:a9:9b:87:84:98:78:eb:76:93:79:1e:26:fb:9d:
d7:c4:33:55:55:78:f9:aa:f0:e1:89:1a:1e:c8:03:b9:35:97:
2c:1a:5b:06:25:35:09:84:6b:4b:e2:b4:11:54:6d:00:07:39:
98:aa:91:ab:c7:53:40:b0:84:e9:1c:13:9b:42:2a:43:f2:e5:
10:ba:24:d9:87:b7:7f:09:12:d7:26:02:4f:90:b2:d8:66:39:
5d:3e:1e:27:35:d1:9c:04:ad:aa:8e:b4:8c:60:e6:7d:ec:de:
e6:ff:64:c1:a3:e8:bf:e5:6c:34:44:a5:62:19:4e:8a:47:5a:
1f:23:8e:28:e1:6b:0e:6f:d5:3e:c8:9f:91:07:a8:74:b0:0f:
48:4c:86:08:60:4d:cc:78:40:45:ec:00:18:fa:e6:e0:21:7c:
fa:5e:ff:4c:56:df:d4:5c:a5:43:eb:aa:59:66:0f:8b:51:cc:
5b:48:cb:06:8c:35:b3:aa:d2:6e:c6:88:35:10:9b:84:98:14:
1d:91:2a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 12:47:23 2026 by rpki-client