
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/3136302e32322e36332e302f32342d3234203d3e20313439373138.roa
File: 3136302e32322e36332e302f32342d3234203d3e20313439373138.roa (raw, json)
Hash identifier: UjvbqeEp3AIhQDYH/4nUvz4iV5UIpUT6LqffHIa8KeM=
Subject key identifier: 65:E1:D6:7C:15:B9:BF:FA:2A:E1:8C:B0:ED:B9:8A:04:66:E3:EE:DE
Certificate issuer: /CN=6A896306C12F88C0F83F70AFCC7C6BF9C4F42109
Certificate serial: 6D418B058329BCED5487D729E16DD7052A4EB578
Authority key identifier: 6A:89:63:06:C1:2F:88:C0:F8:3F:70:AF:CC:7C:6B:F9:C4:F4:21:09
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/3136302e32322e36332e302f32342d3234203d3e20313439373138.roa
Signing time: Sun 03 May 2026 02:13:34 +0000
ROA not before: Sun 03 May 2026 02:08:34 +0000
ROA not after: Sun 02 May 2027 02:13:34 +0000
asID: 149718
IP address blocks: 160.22.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.crl
rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 12:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:41:8b:05:83:29:bc:ed:54:87:d7:29:e1:6d:d7:05:2a:4e:b5:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A896306C12F88C0F83F70AFCC7C6BF9C4F42109
Validity
Not Before: May 3 02:08:34 2026 GMT
Not After : May 2 02:13:34 2027 GMT
Subject: CN=65E1D67C15B9BFFA2AE18CB0EDB98A0466E3EEDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a7:22:ab:fa:ad:f7:1a:77:d9:0e:42:85:f7:
06:ce:b7:7f:14:32:19:10:6a:bc:64:c4:bf:fa:b5:
c2:8c:a2:62:b5:f2:86:b5:cb:62:65:60:98:20:59:
25:ef:ae:4d:76:b1:82:07:bb:29:62:60:17:d6:48:
59:15:13:d7:c3:80:15:b9:f7:f1:dc:8b:01:76:dc:
ae:8f:80:4c:fd:1c:29:6a:87:82:fb:0c:df:ea:75:
29:cf:e2:9e:8f:b8:62:23:a8:43:26:ef:07:5a:75:
bc:5d:9e:04:7b:01:15:13:ce:c2:ea:3e:29:f8:8f:
c0:b9:c4:be:b0:e9:ef:a7:27:55:08:51:a5:55:9b:
29:09:c7:12:bb:dd:34:56:8b:c0:04:ed:ed:68:20:
ff:32:78:38:da:a5:f1:5e:e0:1e:c4:51:74:9e:e0:
37:86:21:ba:11:87:17:f6:94:91:5d:87:be:d9:9d:
b8:14:e2:d3:97:a4:21:9f:c3:cc:c2:20:5c:56:61:
07:b4:0c:98:be:b7:78:56:be:c6:3b:c4:92:fc:bd:
ca:fb:71:d3:90:fb:08:2b:9f:9f:28:e4:70:90:3e:
f4:57:30:92:20:e6:06:d7:4a:95:08:75:2b:2b:02:
42:6e:9b:c2:66:a1:b8:e5:93:04:f4:bc:73:9f:d5:
74:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E1:D6:7C:15:B9:BF:FA:2A:E1:8C:B0:ED:B9:8A:04:66:E3:EE:DE
X509v3 Authority Key Identifier:
keyid:6A:89:63:06:C1:2F:88:C0:F8:3F:70:AF:CC:7C:6B:F9:C4:F4:21:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6A896306C12F88C0F83F70AFCC7C6BF9C4F42109.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/3136302e32322e36332e302f32342d3234203d3e20313439373138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.63.0/24
Signature Algorithm: sha256WithRSAEncryption
77:2e:9e:d3:27:2e:96:73:da:2d:6d:49:5f:52:ab:cb:d6:0e:
1c:c4:45:d4:ca:20:e4:e7:da:95:48:a9:ee:95:cc:d4:a1:d5:
4d:0a:22:eb:72:b0:d4:c0:d9:3c:93:19:e7:25:e6:3c:7e:a2:
d6:30:70:b1:05:b8:ef:bf:d7:fc:34:52:c7:df:8e:5c:78:99:
70:c7:41:93:2e:6b:10:42:32:56:80:cf:4e:19:0d:cb:db:49:
37:10:8b:be:fd:37:86:a5:31:8f:31:cd:32:9e:e5:86:2d:de:
b7:ee:1c:87:1c:e2:3c:e3:bd:a1:5e:33:a4:7d:34:69:d7:d4:
0e:5c:6e:07:f4:b8:72:cd:ce:e2:5c:22:d8:0e:65:bd:eb:84:
09:eb:9a:99:14:d6:1d:30:e8:6e:f3:37:4d:3a:18:06:38:72:
ed:3c:f8:74:d4:76:64:6d:ff:dc:4a:98:7a:8d:57:b7:1a:c1:
ab:78:33:28:94:21:ff:f5:70:68:b2:b9:c3:a3:ec:71:d3:66:
ef:68:7a:ee:b3:6e:c3:bd:d9:e2:0c:bc:85:42:01:68:1f:f1:
8b:b2:2e:4e:c1:53:cb:c7:32:81:64:dd:5d:59:57:9c:de:3f:
ef:07:cb:9a:0e:34:27:d4:21:ec:8c:da:21:90:8c:88:44:36:
db:ac:71:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:30:22 2026 by rpki-client