
$ rpki-client -vvf repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a3a2f33322d3438203d3e203338313538.roa
File: 323430323a393830303a3a2f33322d3438203d3e203338313538.roa (raw, json)
Hash identifier: YuhlhGpBa/rvdjFiICmkr20uOyD33Y2ob8cJ0jjldVM=
Subject key identifier: 6C:33:95:34:2F:9B:F6:99:BE:01:25:42:D2:C1:3F:18:50:1E:D2:1F
Certificate issuer: /CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E
Certificate serial: 53DAF86DE8E268FB0A6E8FF149206C8FFE4E9726
Authority key identifier: FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a3a2f33322d3438203d3e203338313538.roa
Signing time: Mon 02 Jun 2025 02:04:40 +0000
ROA not before: Mon 02 Jun 2025 01:59:40 +0000
ROA not after: Mon 01 Jun 2026 02:04:40 +0000
asID: 38158
IP address blocks: 2402:9800::/32 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl
rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Oct 2025 23:10:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:da:f8:6d:e8:e2:68:fb:0a:6e:8f:f1:49:20:6c:8f:fe:4e:97:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E
Validity
Not Before: Jun 2 01:59:40 2025 GMT
Not After : Jun 1 02:04:40 2026 GMT
Subject: CN=6C3395342F9BF699BE012542D2C13F18501ED21F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8b:ba:04:26:69:9e:28:86:99:8b:e5:e1:07:
09:d4:c5:1d:a7:46:ca:94:0d:3f:2e:c7:86:a5:20:
e4:e7:9f:de:89:3f:ce:44:db:f5:41:27:89:fe:24:
cb:f5:8e:cd:a0:a2:7a:b0:74:4f:cf:a1:b5:2a:73:
38:d0:a7:47:b8:2c:09:37:42:c9:31:58:ac:b4:72:
02:13:25:fb:e3:0c:86:dd:a1:87:6e:ca:53:d0:6a:
0d:19:86:ec:75:5b:9a:35:0c:ed:d4:1e:3f:04:ce:
87:8b:cc:f1:88:39:48:25:43:59:93:07:65:e1:ee:
bc:4b:cd:2a:2b:35:50:9a:eb:be:26:aa:76:42:98:
c1:38:4a:5f:37:d5:24:6e:ea:22:58:f9:60:f6:e5:
e8:7a:03:4b:82:23:c8:f1:6c:88:19:46:20:24:f6:
e8:6f:1f:69:aa:b5:1c:4d:03:7c:69:de:8b:50:81:
f9:ab:5d:ec:ed:d6:58:31:97:d3:77:f3:1d:5c:5d:
38:35:6b:b3:c3:be:a7:0a:2c:af:51:85:f1:5c:a9:
d7:81:41:d2:73:b7:2b:10:cc:54:cf:bc:a2:15:e6:
8f:53:d9:60:84:28:89:c7:8f:2c:7a:93:43:0b:75:
cb:6c:15:94:24:12:b4:17:45:d2:51:08:d0:60:49:
50:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:33:95:34:2F:9B:F6:99:BE:01:25:42:D2:C1:3F:18:50:1E:D2:1F
X509v3 Authority Key Identifier:
keyid:FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a3a2f33322d3438203d3e203338313538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:9800::/32
Signature Algorithm: sha256WithRSAEncryption
c7:4d:9a:fc:04:66:f8:2e:99:33:ea:5a:32:7b:d9:92:55:95:
d1:04:ee:c4:ef:4d:1b:ee:15:89:5e:5d:ea:4c:3e:59:7f:9c:
fe:68:e0:f8:16:03:f0:95:76:b8:ab:93:85:fb:98:1d:39:a4:
e0:a9:75:de:db:61:7c:29:6b:44:4c:ca:06:51:51:35:70:1f:
b3:a3:d3:e2:2e:55:19:cf:48:1b:4c:04:09:0b:87:f3:c6:7b:
bb:7c:a0:7b:b6:3b:60:38:22:7a:6e:b9:7c:81:ef:6f:3e:e2:
7e:79:f8:31:9c:9a:57:8e:ee:ed:54:52:98:8f:bb:93:82:01:
8f:0d:34:9e:03:82:b0:26:1d:e5:43:e7:3a:b1:86:97:58:92:
d8:ce:3a:48:27:e8:5b:66:b0:0e:bd:65:a4:d6:91:d6:79:ab:
ac:ff:86:d6:d6:b6:0a:da:0a:42:4a:3b:79:c8:2b:c7:1c:09:
5f:bd:21:06:df:b7:8f:99:77:77:b0:ec:89:6a:1f:04:51:17:
48:60:07:17:b9:7c:7b:b6:81:7a:c9:8c:f4:c7:39:c4:93:bf:
f2:fd:87:9c:20:ee:15:75:b1:b2:2a:a5:4b:d0:04:58:ba:af:
06:de:69:ab:2a:6d:a4:ac:e1:2a:9f:ef:58:52:29:62:56:17:
60:b7:bd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:02:36 2025 by rpki-client