
$ rpki-client -vvf rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/323030313a6466303a39613a3a2f34382d3438203d3e203435363937.roa
File: 323030313a6466303a39613a3a2f34382d3438203d3e203435363937.roa (raw, json)
Hash identifier: Amg7n/J1kB55PVPfhSf4dolGpwcgp004+ynKN8Iqa0A=
Subject key identifier: 77:6D:34:2E:FD:2D:53:B6:F5:AF:3D:64:2E:30:C3:3A:E7:98:A0:21
Certificate issuer: /CN=C73043EA966F0F810C22E736459E7122F2FD0AE0
Certificate serial: 6BF6006CB9C810A05B5F0854087F0AD7CD42E7B4
Authority key identifier: C7:30:43:EA:96:6F:0F:81:0C:22:E7:36:45:9E:71:22:F2:FD:0A:E0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C73043EA966F0F810C22E736459E7122F2FD0AE0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/323030313a6466303a39613a3a2f34382d3438203d3e203435363937.roa
Signing time: Sun 03 May 2026 02:10:31 +0000
ROA not before: Sun 03 May 2026 02:05:31 +0000
ROA not after: Sun 02 May 2027 02:10:31 +0000
asID: 45697
IP address blocks: 2001:df0:9a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/C73043EA966F0F810C22E736459E7122F2FD0AE0.crl
rsync://rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/C73043EA966F0F810C22E736459E7122F2FD0AE0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C73043EA966F0F810C22E736459E7122F2FD0AE0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:f6:00:6c:b9:c8:10:a0:5b:5f:08:54:08:7f:0a:d7:cd:42:e7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C73043EA966F0F810C22E736459E7122F2FD0AE0
Validity
Not Before: May 3 02:05:31 2026 GMT
Not After : May 2 02:10:31 2027 GMT
Subject: CN=776D342EFD2D53B6F5AF3D642E30C33AE798A021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ac:e0:87:b0:8d:56:3e:cc:cd:03:7d:78:a9:
75:ce:6e:ea:f6:f0:f9:9e:f1:6d:d7:a4:23:16:a7:
0b:c8:a7:ae:59:4d:21:72:c9:4f:f2:20:b2:cd:b4:
1b:30:ea:6c:b1:69:b3:23:d7:4d:0a:f9:c0:0b:d8:
86:e9:68:88:99:1d:32:e0:11:a5:6d:3b:4b:13:de:
6c:d0:1a:29:26:93:f5:e2:07:c3:6d:01:bd:e2:ed:
20:f0:96:8e:cf:6c:5b:7a:59:13:0e:fc:1e:17:9f:
f8:36:1b:56:0e:fc:5b:0d:03:55:4c:8e:24:d1:bf:
90:d3:e3:ac:ad:e4:e6:cd:28:e0:5f:54:d0:c8:6f:
5f:48:af:c1:02:ce:a5:76:11:1e:53:0d:1e:86:36:
d0:20:80:bf:84:34:f0:1e:35:fe:83:7f:a1:e7:41:
05:d9:29:bb:6b:92:f4:df:6b:57:0f:ce:69:9f:c4:
db:23:db:b0:cb:24:79:d8:e8:fe:48:5c:9b:77:6d:
55:e7:82:5c:8a:d0:45:b8:d2:c6:5f:ff:f1:57:e9:
c9:5e:21:63:6b:5c:87:6d:7c:bf:df:25:19:71:2c:
3d:bb:20:47:7a:36:a2:1a:49:a3:23:cb:a1:62:4f:
a1:a0:20:4f:b4:1e:78:01:9f:44:3a:90:5b:90:6e:
77:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6D:34:2E:FD:2D:53:B6:F5:AF:3D:64:2E:30:C3:3A:E7:98:A0:21
X509v3 Authority Key Identifier:
keyid:C7:30:43:EA:96:6F:0F:81:0C:22:E7:36:45:9E:71:22:F2:FD:0A:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/C73043EA966F0F810C22E736459E7122F2FD0AE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C73043EA966F0F810C22E736459E7122F2FD0AE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/323030313a6466303a39613a3a2f34382d3438203d3e203435363937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:9a::/48
Signature Algorithm: sha256WithRSAEncryption
aa:78:c7:f8:d0:69:d0:82:51:e5:90:8c:59:6d:19:9d:c0:c7:
e6:02:4a:55:05:a0:08:7b:d9:11:a5:a1:a5:e8:e8:4c:36:c5:
02:c1:ed:65:cd:11:75:d8:2a:eb:69:6e:79:f9:57:49:63:37:
c5:7b:b0:4c:e7:9b:4e:d7:12:3a:65:97:54:47:95:16:6a:4f:
ff:28:35:86:35:ab:31:02:ca:f3:87:e7:6c:ea:59:99:a0:01:
92:29:af:ac:da:69:71:eb:0d:11:d6:24:0d:9c:ed:c9:ce:6b:
88:52:2b:01:a1:5a:7b:68:89:ac:9b:61:b8:a8:12:be:b7:3b:
0f:06:0c:3f:bb:43:a6:84:77:38:48:4e:6f:42:fe:eb:66:42:
23:aa:b0:81:be:7b:ad:f5:76:ac:f9:16:c3:15:21:47:12:e9:
69:2a:c2:3f:8d:b1:c4:7e:81:5f:b2:30:3f:2b:b8:a9:31:33:
76:57:fd:1c:ef:93:ea:5d:87:78:46:74:b7:67:cf:bc:c2:e6:
72:83:ae:8c:4e:92:b0:ec:28:be:72:fe:47:cc:b1:0c:1d:e0:
0a:50:ae:eb:6d:33:ac:7f:dc:04:6e:2f:29:5a:b1:45:d0:af:
18:d8:b2:9e:1f:9a:46:90:a0:a1:93:11:cb:e2:0c:9e:d6:92:
95:74:f4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:39:33 2026 by rpki-client