
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/3136302e32352e34362e302f32332d3233203d3e20313533303539.roa
File: 3136302e32352e34362e302f32332d3233203d3e20313533303539.roa (raw, json)
Hash identifier: 3Bd79FcZzbMku5kiCcswF+pzWGDe5uW4Tc9yOqMC/ZA=
Subject key identifier: 19:A9:CA:5F:9C:90:DC:FD:12:AF:C8:F1:6D:D3:5A:50:A0:88:07:FD
Certificate issuer: /CN=C69451771D2C519C2269EA17115B3E600E9CF809
Certificate serial: 3F619ECA4AB4596504E95250F0B7F9A51EF4D14F
Authority key identifier: C6:94:51:77:1D:2C:51:9C:22:69:EA:17:11:5B:3E:60:0E:9C:F8:09
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C69451771D2C519C2269EA17115B3E600E9CF809.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/3136302e32352e34362e302f32332d3233203d3e20313533303539.roa
Signing time: Mon 22 Dec 2025 05:03:09 +0000
ROA not before: Mon 22 Dec 2025 04:58:09 +0000
ROA not after: Mon 21 Dec 2026 05:03:09 +0000
asID: 153059
IP address blocks: 160.25.46.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.crl
rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C69451771D2C519C2269EA17115B3E600E9CF809.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 21:08:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:61:9e:ca:4a:b4:59:65:04:e9:52:50:f0:b7:f9:a5:1e:f4:d1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C69451771D2C519C2269EA17115B3E600E9CF809
Validity
Not Before: Dec 22 04:58:09 2025 GMT
Not After : Dec 21 05:03:09 2026 GMT
Subject: CN=19A9CA5F9C90DCFD12AFC8F16DD35A50A08807FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6e:7a:67:ef:e8:3f:7f:c0:34:6d:23:63:3d:
9f:2c:20:b3:e4:09:f9:d5:ab:94:a9:f5:5f:c3:e5:
f6:36:b7:9e:05:e5:4e:08:43:55:dc:be:8f:bf:ba:
26:5a:fa:bc:2b:69:89:f0:bb:3f:72:60:50:f4:d0:
c5:2f:0c:73:2d:18:ac:e8:29:74:5e:5a:c1:e7:90:
f9:e7:46:91:a2:04:fe:6a:8b:3c:15:93:ea:04:95:
9e:03:82:9c:aa:24:fe:a3:98:50:51:37:1f:9e:19:
ed:2b:80:ad:64:bf:17:35:57:d6:44:31:7f:e7:fa:
bf:d5:81:26:f4:af:f7:91:2a:ee:06:a7:4e:d8:36:
6a:ec:19:3b:e7:5a:d6:88:8a:a3:44:f0:7a:49:87:
a9:85:ed:88:9a:fa:de:49:f9:f2:35:06:cc:1d:7b:
c6:ed:7a:90:45:c9:35:42:e7:48:e8:38:85:ea:34:
7c:c7:f0:a2:21:36:b8:50:e2:5e:2c:4f:32:a2:71:
cc:5e:b5:b2:e4:b5:19:a3:07:e1:d0:44:1e:aa:7f:
33:5d:f4:18:3d:62:5c:1c:10:8f:b6:2f:92:6e:59:
4a:be:f9:d2:36:16:7e:e5:4b:6d:be:0d:3d:c1:94:
45:00:6c:77:7a:56:1b:60:0b:89:bb:12:a1:bb:31:
a4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A9:CA:5F:9C:90:DC:FD:12:AF:C8:F1:6D:D3:5A:50:A0:88:07:FD
X509v3 Authority Key Identifier:
keyid:C6:94:51:77:1D:2C:51:9C:22:69:EA:17:11:5B:3E:60:0E:9C:F8:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/C69451771D2C519C2269EA17115B3E600E9CF809.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C69451771D2C519C2269EA17115B3E600E9CF809.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea143a19-217a-49ef-8cb1-593012d2b759/0/3136302e32352e34362e302f32332d3233203d3e20313533303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.46.0/23
Signature Algorithm: sha256WithRSAEncryption
01:e0:b2:cb:14:d3:d0:8e:84:d8:1a:db:33:88:c5:f5:6d:91:
b3:dc:ab:b2:ea:ac:0e:93:59:30:67:09:eb:d4:37:71:9f:e4:
e6:49:53:2a:91:4f:03:e1:b7:6e:26:aa:5b:15:47:44:03:ee:
df:98:dc:8b:2f:9c:e8:a8:28:0c:db:68:42:33:62:98:09:e6:
18:22:35:ee:02:cb:d4:9b:41:3f:cc:0b:1b:71:0f:3f:fc:1d:
34:d1:a0:58:3d:00:ca:0a:f3:51:89:db:f1:54:34:9f:fa:da:
5a:a7:3f:17:2f:77:b4:fc:3d:87:b8:0b:ab:3b:f1:9e:73:d4:
66:7e:e5:7d:d2:05:34:d5:8f:18:ce:ca:4d:a8:08:c1:16:5b:
53:b2:8d:ff:c5:d1:b5:cf:e3:cb:ce:06:92:cb:ee:7a:a5:3b:
b5:22:05:00:8a:39:6b:e8:d6:8d:21:7f:d9:fd:49:c7:d4:54:
47:cf:f0:d1:cc:4e:2c:87:00:a2:e1:12:59:e2:dc:03:f0:0f:
32:80:a5:07:9e:16:b8:58:c1:9b:a1:39:04:ce:b6:da:61:12:
8f:aa:30:99:3c:07:4b:b6:60:1e:07:35:84:09:ff:f4:45:94:
ae:29:8a:13:d2:74:1a:78:88:13:65:25:ea:8d:36:bf:02:ab:
ba:5f:d0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:06:22 2026 by rpki-client