
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323138323a3a2f34382d3438203d3e20313533303837.roa
File: 323430343a393763303a323138323a3a2f34382d3438203d3e20313533303837.roa (raw, json)
Hash identifier: m++CHSj4sapObk5vnmQlOtA1gMqhk4/luEDVS+TH7Mw=
Subject key identifier: A0:69:0D:74:7F:0E:5E:F8:80:72:73:15:FB:F4:A9:04:40:8B:61:8C
Certificate issuer: /CN=B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B
Certificate serial: 425FDA35BD85B678A501CB94ADF4ED278A1A9992
Authority key identifier: B9:80:EF:D6:9D:A4:C8:AB:3F:C7:13:8F:57:BE:3C:DA:F8:02:23:8B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323138323a3a2f34382d3438203d3e20313533303837.roa
Signing time: Sun 03 May 2026 02:11:48 +0000
ROA not before: Sun 03 May 2026 02:06:48 +0000
ROA not after: Sun 02 May 2027 02:11:48 +0000
asID: 153087
IP address blocks: 2404:97c0:2182::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.crl
rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:5f:da:35:bd:85:b6:78:a5:01:cb:94:ad:f4:ed:27:8a:1a:99:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B
Validity
Not Before: May 3 02:06:48 2026 GMT
Not After : May 2 02:11:48 2027 GMT
Subject: CN=A0690D747F0E5EF880727315FBF4A904408B618C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d2:b8:b5:c6:87:23:ee:47:17:d0:b3:19:19:
16:fb:0c:e3:c9:b7:3d:1d:08:59:ca:60:ef:55:40:
84:63:53:e4:8c:fe:62:60:5b:2f:86:dc:3c:82:1d:
e4:8e:92:7d:7a:75:56:a7:96:13:e4:b2:a0:c4:05:
45:10:cb:7c:f5:8e:dd:94:9d:a8:13:7a:f4:2a:e2:
20:e7:a9:9e:f1:a7:cd:bd:41:2f:66:9b:db:24:77:
9d:c3:76:21:25:e3:ea:72:b3:d7:ec:af:f2:07:a1:
e8:e8:a4:3d:4e:51:c2:7a:90:a3:e4:d9:1a:7c:e6:
4e:81:15:9f:1c:7a:77:90:9a:58:07:97:43:ba:fe:
a3:ea:8d:a5:b3:d5:b9:00:8b:8c:c0:c8:8a:37:87:
ee:80:91:d2:9a:f1:ba:c8:ed:19:42:26:6a:8a:70:
18:f8:17:f1:0d:a2:3b:f3:a5:b3:ee:8c:0c:2d:6c:
5d:47:9e:fa:40:88:d7:bb:1b:9a:04:ea:b1:61:7e:
e1:8c:45:28:13:1f:19:c6:fc:3a:5c:57:9b:18:5c:
14:a3:83:01:a9:f7:42:c6:5c:0a:a2:c4:0f:0e:c7:
a0:c9:9f:a1:d4:6b:ab:3a:82:72:27:51:73:37:7c:
4c:c3:58:92:79:49:51:7a:93:d8:3f:c2:0b:75:3d:
e3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:69:0D:74:7F:0E:5E:F8:80:72:73:15:FB:F4:A9:04:40:8B:61:8C
X509v3 Authority Key Identifier:
keyid:B9:80:EF:D6:9D:A4:C8:AB:3F:C7:13:8F:57:BE:3C:DA:F8:02:23:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323138323a3a2f34382d3438203d3e20313533303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:2182::/48
Signature Algorithm: sha256WithRSAEncryption
93:52:77:03:6f:42:cd:1f:6e:06:42:75:f6:f8:11:c0:80:af:
ac:9c:94:79:00:47:d7:39:5e:4d:05:27:5f:21:a2:1b:af:09:
c7:b9:07:eb:22:5c:00:aa:1b:3c:a7:86:aa:bb:82:47:9d:9f:
59:17:c7:51:09:9f:06:ca:02:b3:45:b4:4f:4d:29:ac:bb:51:
f0:98:82:c4:b6:10:06:f4:dc:13:5b:da:68:9c:1f:5a:b6:6d:
1f:30:f2:5a:14:78:b2:39:30:5f:90:3a:7c:3d:44:45:84:a3:
71:14:50:1c:f5:c2:5a:28:5d:3f:f0:64:89:26:b4:b5:5b:4d:
6f:94:1e:22:d8:8d:25:52:d9:16:68:75:57:13:e9:33:d9:62:
aa:6c:bf:41:f4:61:6c:43:00:d1:09:d4:60:5e:5c:31:78:23:
46:2e:4e:b2:4a:9a:bb:9c:77:45:31:c8:46:66:f0:c3:32:37:
05:d3:27:83:4b:66:9e:9b:2d:fe:65:5e:c1:6c:8c:c3:a4:72:
e7:69:cb:c8:b6:7b:37:63:a3:c0:62:7d:0e:06:37:44:06:1f:
37:5e:53:d7:8e:52:b6:57:e9:b9:01:4a:5c:8c:0f:29:e5:ea:
de:1c:7c:b4:2e:66:11:07:80:9f:7f:00:b5:a4:8f:e6:0f:c0:
9a:e9:ad:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:56:57 2026 by rpki-client