
$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/3136302e32322e32362e302f32342d3234203d3e20313532383036.roa
File: 3136302e32322e32362e302f32342d3234203d3e20313532383036.roa (raw, json)
Hash identifier: t+VcXkUWUHKF6UOibDMpWswUlzEPH8qZz8XYAlMIEgc=
Subject key identifier: 42:14:A9:59:8E:FE:14:5F:4D:0E:C4:75:5F:D3:05:F7:AC:17:B0:AB
Certificate issuer: /CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C
Certificate serial: 6AC534B36031D2F5DC8AE102B4C034E6C938D6FA
Authority key identifier: BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/3136302e32322e32362e302f32342d3234203d3e20313532383036.roa
Signing time: Mon 13 Apr 2026 19:00:02 +0000
ROA not before: Mon 13 Apr 2026 18:55:02 +0000
ROA not after: Mon 12 Apr 2027 19:00:02 +0000
asID: 152806
IP address blocks: 160.22.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl
rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 23:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:c5:34:b3:60:31:d2:f5:dc:8a:e1:02:b4:c0:34:e6:c9:38:d6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C
Validity
Not Before: Apr 13 18:55:02 2026 GMT
Not After : Apr 12 19:00:02 2027 GMT
Subject: CN=4214A9598EFE145F4D0EC4755FD305F7AC17B0AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:23:de:a0:4a:c2:6b:a8:f3:6c:0c:6c:5f:fb:
f2:4d:5e:3a:b5:0d:20:82:8d:9e:21:35:93:8c:1c:
d4:59:6f:6a:52:bd:f2:27:58:14:6a:d8:be:00:78:
bd:6d:b3:9a:03:b8:ea:7e:3e:9a:93:a4:f8:6e:75:
75:f3:c5:71:e5:eb:e3:31:0f:32:f5:88:e4:11:23:
c6:9f:ae:b3:96:aa:b8:72:2f:09:7c:4d:36:41:66:
66:ad:d0:a7:4e:c1:a9:eb:f3:ec:40:a8:71:0b:06:
eb:18:ce:65:67:3a:9c:67:06:3b:5d:15:dd:a6:cb:
c1:bd:1a:2e:ac:a0:ec:0d:92:95:ab:f6:00:bd:c9:
3e:9a:31:66:05:df:6a:3d:cd:17:75:de:42:a9:ce:
ee:74:22:a5:fd:9f:67:de:67:2b:8c:e9:a4:50:01:
4a:e1:f5:7a:79:25:e8:20:ee:f3:08:0f:e4:9f:5b:
3c:88:26:ee:a3:b2:4d:ff:02:a8:de:db:a8:1c:43:
b8:7c:cd:eb:92:50:75:d4:b8:38:2d:d5:6f:a7:d0:
66:fc:6b:7a:bb:23:e2:f6:74:a9:17:ca:2c:38:c4:
2f:6b:ae:18:50:14:82:18:21:05:3a:a1:6f:13:28:
3b:76:a2:11:5e:18:44:28:5a:78:30:02:0d:a8:41:
52:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:14:A9:59:8E:FE:14:5F:4D:0E:C4:75:5F:D3:05:F7:AC:17:B0:AB
X509v3 Authority Key Identifier:
keyid:BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/3136302e32322e32362e302f32342d3234203d3e20313532383036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.26.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:80:75:5a:8f:81:5c:54:85:bf:d5:16:47:a8:4f:40:87:f9:
b5:52:d9:88:33:dc:a3:18:1b:31:12:67:77:c1:d4:1b:2b:cc:
d4:7f:2b:08:ec:08:95:d1:f3:23:80:79:ec:e2:f7:19:25:05:
b4:d7:a3:ba:8a:ee:67:b5:64:f0:6e:79:45:ae:41:ee:13:99:
cb:72:b9:1c:b7:88:15:66:ad:b3:26:87:f8:c9:2a:7f:ee:e5:
44:2f:4f:58:c1:eb:65:5c:04:fb:b9:2d:69:4c:67:9f:ab:f6:
0d:04:21:a6:e8:60:94:8c:06:ba:89:42:0a:ed:95:27:3c:e2:
2c:53:fa:b0:6d:d6:4d:58:a8:75:c1:22:10:f2:b8:34:a4:4a:
02:88:61:70:f6:24:a2:f4:ae:d2:56:a2:6f:e4:02:27:d1:b0:
6a:2e:71:43:37:04:af:27:37:0e:1c:bd:c1:94:0a:0e:fc:3e:
ec:34:02:d3:1b:6e:b3:ac:5d:94:22:d1:a1:f6:a7:a3:fb:c0:
d8:a8:fd:38:d3:28:88:52:64:3c:17:a6:af:b7:3a:bf:8e:92:
eb:ee:28:4a:87:8d:42:a6:7b:b9:4b:6d:d3:2d:e4:75:64:57:
ec:d6:ad:a0:51:bc:46:44:e3:00:d3:95:d0:b3:16:5b:c3:f3:
21:7f:ac:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:00:05 2026 by rpki-client