
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323234353a3a2f34382d3438203d3e20313533303837.roa
File: 323430343a393763303a323234353a3a2f34382d3438203d3e20313533303837.roa (raw, json)
Hash identifier: TayR3/gKpyeEsEoWkzAUnlNV+0uABex4O9OmlbdoYbM=
Subject key identifier: 75:B2:ED:8C:85:94:B3:B3:03:5E:ED:E0:6F:E2:56:5D:43:6A:7B:0A
Certificate issuer: /CN=B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B
Certificate serial: 4EC4A9263ACE8A2E9F35C5C42F225F8F8228F9F2
Authority key identifier: B9:80:EF:D6:9D:A4:C8:AB:3F:C7:13:8F:57:BE:3C:DA:F8:02:23:8B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323234353a3a2f34382d3438203d3e20313533303837.roa
Signing time: Sun 03 May 2026 02:11:57 +0000
ROA not before: Sun 03 May 2026 02:06:57 +0000
ROA not after: Sun 02 May 2027 02:11:57 +0000
asID: 153087
IP address blocks: 2404:97c0:2245::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.crl
rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:c4:a9:26:3a:ce:8a:2e:9f:35:c5:c4:2f:22:5f:8f:82:28:f9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B
Validity
Not Before: May 3 02:06:57 2026 GMT
Not After : May 2 02:11:57 2027 GMT
Subject: CN=75B2ED8C8594B3B3035EEDE06FE2565D436A7B0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dd:c4:dd:f8:b3:52:49:f2:29:3d:17:ec:5d:
31:09:8f:4c:ac:e7:b5:46:9c:ce:51:89:ec:9f:0a:
71:02:ed:02:a9:77:dd:64:13:9b:dc:92:47:5f:90:
1a:c9:4e:7a:db:e2:9c:40:ae:f0:c8:8c:9d:4a:e6:
ca:4f:1b:93:5f:cd:c0:1a:04:17:37:cb:17:23:a9:
83:78:f5:aa:13:20:da:3c:e4:52:88:41:8d:64:13:
be:2e:db:11:3b:91:c8:06:54:16:1c:de:1b:a5:d8:
bd:36:bb:1c:b3:7a:20:57:74:44:d0:12:8c:70:9b:
59:56:5d:c3:b7:8e:90:94:e0:3e:71:44:83:1d:c0:
ea:68:9e:54:9e:57:38:0d:3f:07:8d:1a:e6:98:bb:
5a:62:36:48:6f:8f:b2:4a:5b:1f:22:c1:ea:c5:b9:
99:70:84:53:76:92:06:98:97:ce:1d:58:19:45:0e:
04:83:1c:f6:c3:e1:9b:a8:e1:e6:04:4b:ce:ea:77:
51:35:a1:95:e1:34:77:c7:8b:4d:eb:db:cb:ff:de:
a6:b0:c1:ac:d7:6d:14:94:63:01:49:34:d2:7a:9a:
94:26:86:ff:cc:dc:56:12:83:8f:c7:c2:83:7b:2e:
ae:9c:55:07:97:eb:5b:f1:2e:b6:41:01:fa:f1:ff:
e6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B2:ED:8C:85:94:B3:B3:03:5E:ED:E0:6F:E2:56:5D:43:6A:7B:0A
X509v3 Authority Key Identifier:
keyid:B9:80:EF:D6:9D:A4:C8:AB:3F:C7:13:8F:57:BE:3C:DA:F8:02:23:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323234353a3a2f34382d3438203d3e20313533303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:2245::/48
Signature Algorithm: sha256WithRSAEncryption
7c:6f:e2:a4:53:bf:ff:d3:ce:74:53:f4:c1:86:95:ce:ad:f5:
bc:41:9a:18:83:1f:dd:7e:7c:f4:e2:2f:0c:ab:08:04:5d:02:
e0:27:7b:33:ac:a4:5f:b2:8d:34:0c:07:2d:86:bc:19:fb:e9:
62:59:de:50:f5:81:9b:b2:47:15:cb:78:99:ce:c1:58:61:90:
2e:32:c0:a9:39:b1:c1:7c:49:cb:c4:1e:c4:9c:96:cf:8f:17:
22:ce:84:cc:26:4f:57:33:e6:0c:83:eb:62:1a:53:c7:7f:10:
4c:f7:04:df:b6:ec:49:e3:be:f5:2e:f8:4b:f9:0c:4b:ff:54:
f1:64:2a:e7:3a:4a:14:98:10:b9:ac:39:00:ee:0a:5e:d5:05:
e9:6b:e5:da:93:10:92:96:dc:37:81:e2:16:4b:ac:63:99:d5:
44:98:75:0e:31:0c:f8:38:4a:c2:bb:45:53:91:34:ca:60:0d:
72:4e:95:0d:6f:28:c9:a7:19:d2:45:98:41:df:d7:90:dc:4c:
4f:0b:49:6f:e7:ed:60:96:c5:4e:16:b7:c0:be:4f:fe:54:50:
54:d2:4b:fc:90:a7:d5:95:0f:2b:d8:13:30:32:04:0c:9e:8a:
d1:8a:81:2e:91:8f:42:d7:24:1e:84:fb:69:f0:cd:92:7e:25:
cf:ef:16:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:40:12 2026 by rpki-client