
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323235303a3a2f34382d3438203d3e20313533303837.roa
File: 323430343a393763303a323235303a3a2f34382d3438203d3e20313533303837.roa (raw, json)
Hash identifier: c9v4O1MXuO/H/EmN4bZfYBUDR7wlBJsRCeSUNzc0ONE=
Subject key identifier: 93:1C:BA:B5:AF:37:D4:84:59:C5:78:95:A1:5F:38:7F:FE:14:BC:76
Certificate issuer: /CN=B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B
Certificate serial: 6E54B8EA920AA6DDC1EB0B20D90D4348EF45F37E
Authority key identifier: B9:80:EF:D6:9D:A4:C8:AB:3F:C7:13:8F:57:BE:3C:DA:F8:02:23:8B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323235303a3a2f34382d3438203d3e20313533303837.roa
Signing time: Sun 03 May 2026 02:11:55 +0000
ROA not before: Sun 03 May 2026 02:06:55 +0000
ROA not after: Sun 02 May 2027 02:11:55 +0000
asID: 153087
IP address blocks: 2404:97c0:2250::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.crl
rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:54:b8:ea:92:0a:a6:dd:c1:eb:0b:20:d9:0d:43:48:ef:45:f3:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B
Validity
Not Before: May 3 02:06:55 2026 GMT
Not After : May 2 02:11:55 2027 GMT
Subject: CN=931CBAB5AF37D48459C57895A15F387FFE14BC76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f2:30:1a:c1:6f:91:4d:7b:f1:11:7e:fb:74:
00:a4:a0:05:00:d4:c6:21:7f:f4:2e:a4:84:ac:3e:
a4:d1:0e:ec:d9:64:01:4c:ff:d9:cb:a2:96:e1:a7:
9f:c9:06:82:cb:30:97:74:29:02:15:3d:8d:0e:e7:
65:79:72:b3:2e:9a:9f:41:0a:ef:8c:5c:94:85:2f:
b4:ed:b7:f1:18:da:22:fb:32:8a:86:21:60:eb:a1:
75:21:6a:26:9c:27:fc:5f:02:8d:e7:32:45:0c:f0:
2e:d6:0e:c4:f9:ac:b0:83:df:f2:fb:4f:b3:52:17:
94:a6:94:a0:29:69:d1:29:66:09:62:ba:29:b1:b2:
ae:9d:4c:ec:25:90:f9:4d:0e:62:e9:3f:b3:0c:ec:
6d:32:9a:ce:4f:1d:ac:c6:3e:36:20:c1:13:b2:76:
ac:bc:6f:7d:44:19:da:2d:41:e9:17:f7:ea:77:7b:
1c:31:4c:f2:42:56:e2:84:2c:ae:c5:4c:66:a9:c1:
93:32:f0:94:a8:8d:4a:bc:1a:13:16:03:9d:18:36:
04:14:5c:de:61:eb:ae:59:e7:60:e4:e6:01:e4:5c:
b0:d7:d9:30:c4:be:e1:14:5f:4e:ce:26:36:3d:e5:
08:6f:c8:da:57:ad:a2:aa:b8:36:df:4d:2a:38:d1:
e5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1C:BA:B5:AF:37:D4:84:59:C5:78:95:A1:5F:38:7F:FE:14:BC:76
X509v3 Authority Key Identifier:
keyid:B9:80:EF:D6:9D:A4:C8:AB:3F:C7:13:8F:57:BE:3C:DA:F8:02:23:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B980EFD69DA4C8AB3FC7138F57BE3CDAF802238B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323235303a3a2f34382d3438203d3e20313533303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:2250::/48
Signature Algorithm: sha256WithRSAEncryption
0f:23:1d:ba:a4:16:40:13:7d:ed:ac:ec:fb:61:bd:7a:cb:8a:
25:1a:d7:c9:ce:55:c7:0b:b2:8b:92:13:e5:af:d8:6d:52:88:
41:0e:ef:d6:ed:f8:b4:95:61:a5:ed:40:35:73:7c:0c:72:66:
93:26:22:62:e4:b4:5a:28:66:51:31:aa:69:0c:01:7a:f3:0b:
39:5a:c7:ff:80:86:08:11:a8:26:83:a6:50:05:bf:d6:77:a0:
1a:53:74:a8:8f:98:0a:7c:4c:90:40:49:9a:0f:80:7c:96:00:
1b:74:e9:ca:1f:c8:72:ed:a9:3b:fb:72:4a:28:88:16:e0:f5:
eb:23:07:7b:72:ad:6a:57:de:78:fa:73:60:d8:f6:54:dc:72:
94:0b:35:2d:b1:42:e5:59:18:b6:cf:04:34:e5:1d:04:79:ce:
24:48:2b:18:25:a0:44:92:48:ce:18:b6:ff:ac:6e:c0:f4:c4:
28:18:0f:23:4d:1d:4f:60:44:59:ba:a1:8f:dd:36:23:77:50:
0e:88:f6:18:16:b7:1a:1d:59:f2:17:fb:4a:5d:0d:1c:57:33:
f6:d5:3a:98:ad:73:24:f8:0e:11:66:76:a4:61:74:15:92:0f:
a2:be:35:c9:1b:f4:69:ac:d7:ed:d5:3b:44:5b:da:42:f0:ff:
79:ec:ec:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:58:41 2026 by rpki-client