
$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/323830343a323639633a32653a3a2f34382d3438203d3e203631353735.roa
File: 323830343a323639633a32653a3a2f34382d3438203d3e203631353735.roa (raw, json)
Hash identifier: sZiMsnzGto3m8xwV3L509fjG9cBUL9IxMJZ26sTZAYc=
Subject key identifier: F9:FE:EC:E3:19:65:70:F7:B4:8F:34:BC:E6:A3:21:6E:EB:05:0F:F6
Certificate issuer: /CN=160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C
Certificate serial: 24329EDF9FE29E6BD03DBEFD4D6C2301E5CE7509
Authority key identifier: 16:0F:D2:1A:97:6A:19:A7:B8:1A:59:AA:FA:69:F6:A0:AF:E3:6D:0C
Authority info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.cer
Subject info access: rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/323830343a323639633a32653a3a2f34382d3438203d3e203631353735.roa
Signing time: Wed 15 Apr 2026 04:01:30 +0000
ROA not before: Wed 15 Apr 2026 03:56:30 +0000
ROA not after: Wed 14 Apr 2027 04:01:30 +0000
asID: 61575
IP address blocks: 2804:269c:2e::/48 maxlen: 48
Validation: OK
Signature path: rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.crl
rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.mft
rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.cer
rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl
rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 14:08:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:32:9e:df:9f:e2:9e:6b:d0:3d:be:fd:4d:6c:23:01:e5:ce:75:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C
Validity
Not Before: Apr 15 03:56:30 2026 GMT
Not After : Apr 14 04:01:30 2027 GMT
Subject: CN=F9FEECE3196570F7B48F34BCE6A3216EEB050FF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0d:7a:9f:da:a4:13:0b:8f:f4:0d:6d:9a:25:
78:3a:89:5f:0d:3f:eb:b6:8a:bd:12:83:30:8c:78:
8a:8d:2c:56:31:c2:39:52:b9:c3:fb:53:a4:28:c2:
73:43:d1:55:fb:98:70:b7:ac:54:3c:aa:91:bc:23:
cc:13:ca:38:7b:7c:d6:a0:1c:76:3d:b8:a0:f7:52:
83:ac:92:b0:40:69:f0:8d:74:bf:c0:d4:bd:01:30:
11:e5:3b:34:56:90:b9:c7:f7:23:86:19:ff:ce:1e:
33:4c:b2:9e:29:0f:42:3d:73:24:58:3b:7d:0d:27:
6b:5f:55:35:0f:ec:03:ab:00:d3:89:89:ef:2a:c2:
2f:dd:fa:00:05:f8:8d:8a:ff:a2:28:2a:7b:f9:fe:
96:a1:e9:5b:dd:e2:23:90:93:50:91:54:bf:77:b6:
59:f9:96:37:b2:a5:8f:13:2b:cd:49:9c:c9:9f:dc:
3c:37:12:19:96:b7:e3:98:e3:00:52:18:28:70:d5:
14:06:94:9d:b4:07:3c:ff:33:9b:ec:7b:2c:4e:97:
d8:e2:0d:61:6b:94:72:68:34:e2:6b:ac:f8:90:70:
22:d9:b2:78:a7:6a:cf:58:29:97:e6:d0:4a:91:91:
ea:82:75:dd:1e:10:e8:b7:8c:11:35:cc:db:10:7c:
3a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FE:EC:E3:19:65:70:F7:B4:8F:34:BC:E6:A3:21:6E:EB:05:0F:F6
X509v3 Authority Key Identifier:
keyid:16:0F:D2:1A:97:6A:19:A7:B8:1A:59:AA:FA:69:F6:A0:AF:E3:6D:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.cer
Subject Information Access:
Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/323830343a323639633a32653a3a2f34382d3438203d3e203631353735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:269c:2e::/48
Signature Algorithm: sha256WithRSAEncryption
21:23:f3:aa:5e:49:90:27:2a:39:c7:3b:2f:c1:31:de:09:dc:
de:29:78:53:87:f5:45:f8:ab:a5:3c:24:aa:1e:36:f4:81:0c:
d5:01:ab:d2:c1:c3:c6:77:ee:7b:b1:9b:b4:99:d4:4e:8b:b9:
af:1b:b9:a0:05:92:a4:8b:52:43:63:c7:ff:04:50:a7:89:2c:
e1:e0:57:62:e4:27:ab:22:86:76:79:47:ff:f9:0f:28:83:16:
d6:67:98:3b:12:fd:e5:15:fb:41:1e:c2:93:aa:4e:1e:89:4f:
14:7b:49:9b:0f:b0:e5:11:69:1f:a5:69:92:66:71:75:77:52:
f5:0c:6e:f3:06:c6:e2:dd:c5:8d:6f:8f:75:d9:d7:03:04:e9:
fa:46:78:6e:eb:48:6f:0b:53:1f:58:1a:74:3b:f7:6c:16:f1:
16:f6:e7:c3:73:a1:0a:48:56:86:9a:19:9d:de:9e:43:45:be:
97:d1:6a:e2:c0:2d:44:fd:4c:01:da:50:c5:98:1d:3e:f3:55:
dd:b8:fa:5e:bf:33:c7:ee:c3:b8:24:34:7f:bc:54:1d:8b:58:
37:cf:b0:07:43:fb:b9:8d:84:30:aa:0e:a6:aa:f0:dc:77:7a:
8e:c5:ed:39:38:0d:35:79:7a:dd:00:2d:d1:53:0d:75:82:e0:
7c:05:d6:8c
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUJDKe35/inmvQPb79TWwjAeXOdQkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTYwRkQyMUE5NzZBMTlBN0I4MUE1OUFBRkE2OUY2QTBB
RkUzNkQwQzAeFw0yNjA0MTUwMzU2MzBaFw0yNzA0MTQwNDAxMzBaMDMxMTAvBgNV
BAMTKEY5RkVFQ0UzMTk2NTcwRjdCNDhGMzRCQ0U2QTMyMTZFRUIwNTBGRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcDXqf2qQTC4/0DW2aJXg6iV8N
P+u2ir0SgzCMeIqNLFYxwjlSucP7U6QownND0VX7mHC3rFQ8qpG8I8wTyjh7fNag
HHY9uKD3UoOskrBAafCNdL/A1L0BMBHlOzRWkLnH9yOGGf/OHjNMsp4pD0I9cyRY
O30NJ2tfVTUP7AOrANOJie8qwi/d+gAF+I2K/6IoKnv5/pah6Vvd4iOQk1CRVL93
tln5ljeypY8TK81JnMmf3Dw3EhmWt+OY4wBSGChw1RQGlJ20Bzz/M5vseyxOl9ji
DWFrlHJoNOJrrPiQcCLZsninas9YKZfm0EqRkeqCdd0eEOi3jBE1zNsQfDq5AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQU+f7s4xllcPe0jzS85qMhbusFD/YwHwYDVR0j
BBgwFoAUFg/SGpdqGae4Glmq+mn2oK/jbQwwDgYDVR0PAQH/BAQDAgeAMH0GA1Ud
HwR2MHQwcqBwoG6GbHJzeW5jOi8va3JpbGwucGVlcmluZy5lZS5jb2x1bWJpYS5l
ZHUvcmVwby9saWZlbmctaGl0Y293aG9yc2UvMC8xNjBGRDIxQTk3NkExOUE3Qjgx
QTU5QUFGQTY5RjZBMEFGRTM2RDBDLmNybDCBhQYIKwYBBQUHAQEEeTB3MHUGCCsG
AQUFBzAChmlyc3luYzovL2tyaWxsLnBlZXJpbmcuZWUuY29sdW1iaWEuZWR1L3Jl
cG8vcGVlcmluZy10ZXN0YmVkLzAvMTYwRkQyMUE5NzZBMTlBN0I4MUE1OUFBRkE2
OUY2QTBBRkUzNkQwQy5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcw
C4Z+cnN5bmM6Ly9rcmlsbC5wZWVyaW5nLmVlLmNvbHVtYmlhLmVkdS9yZXBvL2xp
ZmVuZy1oaXRjb3dob3JzZS8wLzMyMzgzMDM0M2EzMjM2Mzk2MzNhMzI2NTNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDM2MzEzNTM3MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBCacAC4w
DQYJKoZIhvcNAQELBQADggEBACEj86peSZAnKjnHOy/BMd4J3N4peFOH9UX4q6U8
JKoeNvSBDNUBq9LBw8Z37nuxm7SZ1E6Lua8buaAFkqSLUkNjx/8EUKeJLOHgV2Lk
J6sihnZ5R//5DyiDFtZnmDsS/eUV+0EewpOqTh6JTxR7SZsPsOURaR+laZJmcXV3
UvUMbvMGxuLdxY1vj3XZ1wME6fpGeG7rSG8LUx9YGnQ792wW8Rb258NzoQpIVoaa
GZ3enkNFvpfRauLALUT9TAHaUMWYHT7zVd24+l6/M8fuw7gkNH+8VB2LWDfPsAdD
+7mNhDCqDqaq8Nx3eo7F7Tk4DTV5et0ALdFTDXWC4HwF1ow=
-----END CERTIFICATE-----
Generated at Sat Apr 18 07:13:25 2026 by rpki-client