
$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a633030303a3a2f34382d3438203d3e203338353135.roa
File: 323430323a3630303a633030303a3a2f34382d3438203d3e203338353135.roa (raw, json)
Hash identifier: gqoWHSegtPySb+QFxj0hQpETk33LY7+CpBWUUYn1fss=
Subject key identifier: FB:9F:C6:F5:DA:D7:ED:23:5A:21:00:6B:FB:9E:1D:79:28:AA:63:E8
Certificate issuer: /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Certificate serial: 60BCF792950FA5F693F96D50A9577221586677C6
Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a633030303a3a2f34382d3438203d3e203338353135.roa
Signing time: Wed 18 Mar 2026 05:00:01 +0000
ROA not before: Wed 18 Mar 2026 04:55:01 +0000
ROA not after: Wed 17 Mar 2027 05:00:01 +0000
asID: 38515
IP address blocks: 2402:600:c000::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 06:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:bc:f7:92:95:0f:a5:f6:93:f9:6d:50:a9:57:72:21:58:66:77:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Validity
Not Before: Mar 18 04:55:01 2026 GMT
Not After : Mar 17 05:00:01 2027 GMT
Subject: CN=FB9FC6F5DAD7ED235A21006BFB9E1D7928AA63E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:94:04:35:84:23:35:a0:4d:5a:b9:88:59:1a:
4f:4d:32:8b:76:b9:b2:1f:e8:a4:00:1b:48:10:aa:
25:69:32:f2:ec:ca:a3:a5:cb:64:37:02:d3:4e:c3:
17:e0:46:b5:29:c7:3a:9a:c6:82:9f:2a:27:16:7b:
78:69:4d:dc:be:50:0f:a2:a0:22:eb:f9:d5:42:45:
d8:65:58:9c:83:48:99:36:eb:77:44:21:96:2a:be:
54:02:d4:a9:68:71:d2:a2:ac:cc:38:5b:11:95:69:
ce:03:9a:b2:23:2f:2d:53:ee:65:19:2a:cc:d8:e5:
c0:52:6a:2d:d6:20:9b:12:14:f2:3e:cf:77:5c:fe:
f6:2d:e6:a2:af:e5:19:71:15:39:53:d9:50:1f:c3:
b4:77:d8:5b:b2:83:61:0b:2a:a0:5f:8f:89:b3:8a:
73:cd:e4:f1:08:bb:e0:44:c5:d4:3c:8e:51:10:b2:
16:dd:c6:98:55:7a:62:2e:0f:08:17:8a:2a:0e:40:
66:bb:48:38:98:f7:f9:ff:a4:fd:2a:36:ea:a6:4c:
ca:cd:93:e5:f4:5f:9d:23:c0:dc:a7:84:6c:e1:2a:
d0:6e:f2:1d:89:82:10:12:d3:e8:0c:92:03:44:01:
3b:b6:d5:8a:26:d5:d7:ad:e8:81:5a:17:0d:90:9f:
af:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9F:C6:F5:DA:D7:ED:23:5A:21:00:6B:FB:9E:1D:79:28:AA:63:E8
X509v3 Authority Key Identifier:
keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/323430323a3630303a633030303a3a2f34382d3438203d3e203338353135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:600:c000::/48
Signature Algorithm: sha256WithRSAEncryption
2b:6a:b7:e7:51:f8:a6:0c:20:7d:8b:77:66:f9:3e:a2:d8:38:
29:b2:e3:61:87:28:8e:58:e9:37:07:9d:35:83:52:c8:2a:dd:
9b:c1:bb:50:c6:50:34:81:69:fe:64:45:2c:5a:49:e5:2c:ed:
22:63:03:1e:8c:5b:be:62:88:d8:04:43:1d:25:ef:1e:c2:94:
43:25:2a:a2:4d:43:21:bb:94:06:97:1d:a0:9b:47:c1:c3:7e:
90:8e:ab:c0:c7:65:48:14:48:c6:16:c4:67:b4:0c:67:67:3a:
4f:e3:75:b8:a8:1b:9d:73:0b:fe:36:27:16:97:77:a3:a2:99:
2b:77:16:0c:29:88:08:66:39:f2:75:69:e6:a0:48:cb:3f:c0:
65:ed:35:3e:02:de:db:5d:3a:b7:73:15:11:b4:35:c8:fd:50:
4a:fe:e4:44:fe:39:63:f4:2b:da:4e:6d:9f:db:5f:7b:8a:95:
fe:1e:62:71:9c:38:4d:a5:09:ee:44:2c:3c:b6:7e:2e:42:5a:
10:2f:2e:c3:0f:a0:86:59:37:09:c4:6d:a4:ed:cf:ee:41:7e:
d4:b7:85:e4:f1:3d:2b:a2:c7:7b:68:da:3b:e5:cc:a1:81:f0:
23:39:c0:0b:09:a1:70:29:f0:36:ba:da:86:19:11:63:52:36:
a6:02:86:45
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUYLz3kpUPpfaT+W1QqVdyIVhmd8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEy
RERGRDhGMzAeFw0yNjAzMTgwNDU1MDFaFw0yNzAzMTcwNTAwMDFaMDMxMTAvBgNV
BAMTKEZCOUZDNkY1REFEN0VEMjM1QTIxMDA2QkZCOUUxRDc5MjhBQTYzRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+lAQ1hCM1oE1auYhZGk9NMot2
ubIf6KQAG0gQqiVpMvLsyqOly2Q3AtNOwxfgRrUpxzqaxoKfKicWe3hpTdy+UA+i
oCLr+dVCRdhlWJyDSJk263dEIZYqvlQC1KlocdKirMw4WxGVac4DmrIjLy1T7mUZ
KszY5cBSai3WIJsSFPI+z3dc/vYt5qKv5RlxFTlT2VAfw7R32Fuyg2ELKqBfj4mz
inPN5PEIu+BExdQ8jlEQshbdxphVemIuDwgXiioOQGa7SDiY9/n/pP0qNuqmTMrN
k+X0X50jwNynhGzhKtBu8h2JghAS0+gMkgNEATu21Yom1det6IFaFw2Qn6/ZAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU+5/G9drX7SNaIQBr+54deSiqY+gwHwYDVR0j
BBgwFoAUk12y1EiPriwR4b873yDYKi3f2PMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
YzRjNjRhOS0zNTM3LTRiYzctODYxMy04ZTk4MTYyOWU0Y2EvMC85MzVEQjJENDQ4
OEZBRTJDMTFFMUJGM0JERjIwRDgyQTJEREZEOEYzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTM1REIyRDQ0ODhGQUUyQzExRTFCRjNCREYyMEQ4MkEyRERG
RDhGMy5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjNGM2NGE5LTM1MzctNGJjNy04
NjEzLThlOTgxNjI5ZTRjYS8wLzMyMzQzMDMyM2EzNjMwMzAzYTYzMzAzMDMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzMzODM1MzEzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQCBgDA
ADANBgkqhkiG9w0BAQsFAAOCAQEAK2q351H4pgwgfYt3Zvk+otg4KbLjYYcojljp
NwedNYNSyCrdm8G7UMZQNIFp/mRFLFpJ5SztImMDHoxbvmKI2ARDHSXvHsKUQyUq
ok1DIbuUBpcdoJtHwcN+kI6rwMdlSBRIxhbEZ7QMZ2c6T+N1uKgbnXML/jYnFpd3
o6KZK3cWDCmICGY58nVp5qBIyz/AZe01PgLe2106t3MVEbQ1yP1QSv7kRP45Y/Qr
2k5tn9tfe4qV/h5icZw4TaUJ7kQsPLZ+LkJaEC8uww+ghlk3CcRtpO3P7kF+1LeF
5PE9K6LHe2jaO+XMoYHwIznACwmhcCnwNrrahhkRY1I2pgKGRQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:00:09 2026 by rpki-client