
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/323430333a653863303a3a2f33322d3332203d3e20313338303930.roa
File: 323430333a653863303a3a2f33322d3332203d3e20313338303930.roa (raw, json)
Hash identifier: P7Q50rkVGT+AyU73qRq9OrZJXv3luvKw8IaqC6IlSn8=
Subject key identifier: F1:A2:FB:FF:92:07:4F:93:B7:0A:36:F0:E7:1A:5F:DC:94:F1:E5:6A
Certificate issuer: /CN=9D25181C9096851A77EB95DA55649E08E3B7941B
Certificate serial: 0342A26E5B431B14FC876497F73AEE2A4856CFA6
Authority key identifier: 9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/323430333a653863303a3a2f33322d3332203d3e20313338303930.roa
Signing time: Thu 05 Mar 2026 01:00:00 +0000
ROA not before: Thu 05 Mar 2026 00:55:00 +0000
ROA not after: Thu 04 Mar 2027 01:00:00 +0000
asID: 138090
IP address blocks: 2403:e8c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl
rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 13:36:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:42:a2:6e:5b:43:1b:14:fc:87:64:97:f7:3a:ee:2a:48:56:cf:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D25181C9096851A77EB95DA55649E08E3B7941B
Validity
Not Before: Mar 5 00:55:00 2026 GMT
Not After : Mar 4 01:00:00 2027 GMT
Subject: CN=F1A2FBFF92074F93B70A36F0E71A5FDC94F1E56A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ac:46:17:50:d8:de:f3:17:54:1d:8d:22:2d:
91:d8:5d:e1:e0:06:a0:fa:5a:14:b1:67:b2:fb:1c:
7b:af:95:89:94:5a:e8:fd:84:ac:74:b5:89:8a:fd:
bd:18:7b:8e:da:8c:f6:c2:2d:90:60:b0:a5:ac:0d:
c7:86:6b:4f:ad:c3:e2:75:94:d7:6d:0f:55:0a:19:
87:b9:0c:a1:2b:bc:d0:a0:67:66:c9:4d:81:5f:de:
e7:34:f3:45:09:30:8d:43:10:a7:bb:d0:3b:1c:f1:
5e:a3:3c:63:b1:8b:c0:d3:cc:ea:6f:e3:f0:05:4b:
72:b2:d6:1a:39:8c:1e:9f:cd:45:50:e9:d1:2b:b8:
07:3e:8d:c9:de:c4:24:46:0a:12:f9:7b:d4:11:68:
05:a6:bc:e2:b1:9e:e9:ea:0d:b0:f9:c2:56:7a:9d:
2f:4c:09:3f:32:9f:c8:ac:b7:d8:13:34:dd:71:0c:
d5:a0:3f:6a:ee:ff:3d:93:54:2b:8d:61:ba:7e:94:
99:57:2f:90:c3:7d:c7:d0:43:e5:db:8e:37:68:b3:
27:82:27:1d:36:36:76:92:3f:12:fb:cf:d3:5d:5e:
62:ac:94:2f:55:73:f0:47:e9:13:0b:83:37:ce:de:
86:f2:f5:3d:4d:68:f6:67:ce:e1:5e:1c:bf:6a:9b:
16:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A2:FB:FF:92:07:4F:93:B7:0A:36:F0:E7:1A:5F:DC:94:F1:E5:6A
X509v3 Authority Key Identifier:
keyid:9D:25:18:1C:90:96:85:1A:77:EB:95:DA:55:64:9E:08:E3:B7:94:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/9D25181C9096851A77EB95DA55649E08E3B7941B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D25181C9096851A77EB95DA55649E08E3B7941B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e2c9285-c09a-4506-a320-fda1a07fd9ec/0/323430333a653863303a3a2f33322d3332203d3e20313338303930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:e8c0::/32
Signature Algorithm: sha256WithRSAEncryption
50:73:5b:35:79:ba:20:c0:e0:fd:cb:f0:41:60:b9:36:50:b5:
d3:a8:90:c9:3e:e6:d2:9e:2f:e3:bf:62:bb:5d:47:eb:80:4d:
a4:8d:59:97:33:c3:57:4e:df:b2:fb:4e:6d:fc:4a:cd:c8:0d:
c8:6b:e8:8a:7d:ab:62:e9:33:97:58:b8:72:68:9a:c9:f0:2d:
ec:f6:6e:7a:8f:a4:e4:65:f2:7d:6a:3d:20:79:23:e6:f7:df:
70:c5:00:c8:bb:9c:30:f5:43:8e:6f:7c:b3:d3:8b:1c:5f:b6:
ff:29:f7:d7:ca:6f:ea:f2:77:67:99:4f:e6:db:ab:98:12:28:
cd:02:4a:af:02:3f:8a:e2:24:cb:11:21:79:95:cb:29:b9:2b:
17:a0:42:6d:28:e7:75:d2:e2:6d:66:23:8b:de:6e:4d:9b:00:
ff:94:c7:f2:1c:6e:f3:66:48:a4:67:0a:a4:33:71:2e:1a:2b:
40:7b:71:33:ac:dc:a2:70:01:50:14:dc:1a:82:8a:90:9e:bc:
9e:09:ae:bb:ec:bf:eb:f0:66:f9:7f:21:91:f1:03:e0:d8:20:
63:93:54:a6:82:4b:92:3d:3c:54:07:a8:a9:7c:ea:d8:a9:0c:
35:20:5e:52:4a:12:4c:06:ee:57:cc:4a:a8:30:bb:b2:01:de:
cd:1e:f1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:53:03 2026 by rpki-client