
$ rpki-client -vvf rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/323030313a6466303a663530303a3a2f34382d3438203d3e20313432333739.roa
File: 323030313a6466303a663530303a3a2f34382d3438203d3e20313432333739.roa (raw, json)
Hash identifier: u/f9pBg0fHFgqAdliz0CbmpL4V+/eW84b3JUz0/QPns=
Subject key identifier: 96:44:5A:03:63:A7:B1:78:21:37:35:1B:C6:0C:F7:9B:4A:60:BD:0B
Certificate issuer: /CN=ED63844C4B15010EA3F230F69A770C2B1C84C105
Certificate serial: 30D4F62D6C7017AEB3FF801391836B631D716727
Authority key identifier: ED:63:84:4C:4B:15:01:0E:A3:F2:30:F6:9A:77:0C:2B:1C:84:C1:05
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED63844C4B15010EA3F230F69A770C2B1C84C105.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/323030313a6466303a663530303a3a2f34382d3438203d3e20313432333739.roa
Signing time: Sun 03 May 2026 02:11:59 +0000
ROA not before: Sun 03 May 2026 02:06:59 +0000
ROA not after: Sun 02 May 2027 02:11:59 +0000
asID: 142379
IP address blocks: 2001:df0:f500::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.crl
rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED63844C4B15010EA3F230F69A770C2B1C84C105.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:d4:f6:2d:6c:70:17:ae:b3:ff:80:13:91:83:6b:63:1d:71:67:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED63844C4B15010EA3F230F69A770C2B1C84C105
Validity
Not Before: May 3 02:06:59 2026 GMT
Not After : May 2 02:11:59 2027 GMT
Subject: CN=96445A0363A7B1782137351BC60CF79B4A60BD0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e0:53:e6:4d:a6:bf:2b:48:d5:69:a6:fb:01:
57:64:5d:10:d7:4a:70:b2:a3:c0:f5:d5:8b:45:d5:
98:67:12:6a:9a:96:1e:3c:e2:ea:2c:82:a6:6b:b3:
54:c9:41:fb:fd:e8:29:8d:e9:6a:a2:63:d5:b1:a4:
92:71:f3:e8:6e:db:ee:1f:fb:29:0a:4e:3c:bc:7b:
98:7f:69:3a:7f:f9:fd:29:8c:c7:58:69:9a:c1:1e:
23:ff:3a:0a:fd:20:a0:f7:5e:43:9e:8d:d3:a2:b2:
8a:4a:73:4e:af:52:eb:9f:a2:14:ec:44:27:11:0a:
a3:2a:6b:da:0d:a1:23:a6:ce:a8:05:c1:3e:39:c6:
97:ff:d3:2c:08:a7:af:bb:9c:17:1f:82:04:79:a0:
3a:85:62:df:4f:20:b7:18:60:0f:fa:6f:53:27:73:
81:ef:df:40:a8:c9:aa:77:ea:f8:ba:f1:15:8e:1c:
ce:5c:9e:8d:4f:0f:27:6e:3c:b9:56:0a:0f:8a:53:
12:b2:f6:ee:6b:8b:4e:a8:35:04:21:9f:d0:e3:88:
c4:94:96:2b:ea:96:b9:19:a9:27:ed:30:1d:1c:91:
24:ca:32:e5:ef:24:eb:e8:38:50:ee:c2:d8:b0:13:
70:49:fb:67:47:a4:e4:12:b7:e9:d4:5c:b7:2a:51:
cd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:44:5A:03:63:A7:B1:78:21:37:35:1B:C6:0C:F7:9B:4A:60:BD:0B
X509v3 Authority Key Identifier:
keyid:ED:63:84:4C:4B:15:01:0E:A3:F2:30:F6:9A:77:0C:2B:1C:84:C1:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED63844C4B15010EA3F230F69A770C2B1C84C105.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/323030313a6466303a663530303a3a2f34382d3438203d3e20313432333739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:f500::/48
Signature Algorithm: sha256WithRSAEncryption
81:4b:1b:9d:c9:c2:f0:03:e5:3a:bc:0a:cd:c3:1c:24:c8:b5:
3b:d2:d3:91:4f:34:ed:67:2a:2a:25:cd:2a:14:ff:0c:ba:4b:
7a:83:e3:f2:ee:d4:ed:0e:19:1b:3a:02:78:9f:63:22:f4:62:
96:83:e0:55:d3:29:de:52:fe:8c:65:ed:08:df:6e:6a:8e:8d:
23:c3:26:49:90:bb:d6:b4:e3:37:2c:66:17:91:74:cb:b7:d9:
40:77:03:0d:1e:36:12:74:d4:3a:85:25:4d:1d:56:3c:64:f1:
ae:48:df:1f:dd:a4:3d:f5:41:db:16:15:16:5d:14:9f:9b:bd:
0a:a5:6b:0a:96:ad:d9:c8:48:71:2a:40:a4:98:a2:cb:d5:ae:
b7:bb:8b:15:af:5a:38:c3:5c:67:83:0e:a9:05:8a:99:9b:61:
67:f8:63:7f:be:c4:2f:ec:0f:d8:b9:8c:22:be:a8:13:51:9b:
59:14:65:b6:c2:aa:ae:53:17:10:22:8f:89:c5:54:41:68:9e:
c1:e9:eb:bc:40:2e:73:1e:ad:ee:ec:79:13:30:45:c4:b1:39:
86:67:76:ee:6e:56:3a:9a:7c:25:24:ec:b4:ef:d6:59:68:51:
72:77:59:c4:d6:17:3d:54:33:e1:be:37:9f:62:81:0a:e0:d4:
51:3d:aa:0b
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUMNT2LWxwF66z/4ATkYNrYx1xZycwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQ2Mzg0NEM0QjE1MDEwRUEzRjIzMEY2OUE3NzBDMkIx
Qzg0QzEwNTAeFw0yNjA1MDMwMjA2NTlaFw0yNzA1MDIwMjExNTlaMDMxMTAvBgNV
BAMTKDk2NDQ1QTAzNjNBN0IxNzgyMTM3MzUxQkM2MENGNzlCNEE2MEJEMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC64FPmTaa/K0jVaab7AVdkXRDX
SnCyo8D11YtF1ZhnEmqalh484uosgqZrs1TJQfv96CmN6WqiY9WxpJJx8+hu2+4f
+ykKTjy8e5h/aTp/+f0pjMdYaZrBHiP/Ogr9IKD3XkOejdOisopKc06vUuufohTs
RCcRCqMqa9oNoSOmzqgFwT45xpf/0ywIp6+7nBcfggR5oDqFYt9PILcYYA/6b1Mn
c4Hv30Coyap36vi68RWOHM5cno1PDyduPLlWCg+KUxKy9u5ri06oNQQhn9DjiMSU
livqlrkZqSftMB0ckSTKMuXvJOvoOFDuwtiwE3BJ+2dHpOQSt+nUXLcqUc17AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUlkRaA2OnsXghNzUbxgz3m0pgvQswHwYDVR0j
BBgwFoAU7WOETEsVAQ6j8jD2mncMKxyEwQUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDZhNzY2NWEtYjUwYi00YTQ1LWE4ZjktMGQ2OWJkN2Q3NDNkLzAvRUQ2Mzg0NEM0
QjE1MDEwRUEzRjIzMEY2OUE3NzBDMkIxQzg0QzEwNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FRDYzODQ0QzRCMTUwMTBFQTNGMjMwRjY5QTc3MEMyQjFDODRD
MTA1LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA2YTc2NjVhLWI1MGItNGE0NS1h
OGY5LTBkNjliZDdkNzQzZC8wLzMyMzAzMDMxM2E2NDY2MzAzYTY2MzUzMDMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMyMzMzNzM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN
8PUAMA0GCSqGSIb3DQEBCwUAA4IBAQCBSxudycLwA+U6vArNwxwkyLU70tORTzTt
ZyoqJc0qFP8Mukt6g+Py7tTtDhkbOgJ4n2Mi9GKWg+BV0yneUv6MZe0I325qjo0j
wyZJkLvWtOM3LGYXkXTLt9lAdwMNHjYSdNQ6hSVNHVY8ZPGuSN8f3aQ99UHbFhUW
XRSfm70KpWsKlq3ZyEhxKkCkmKLL1a63u4sVr1o4w1xngw6pBYqZm2Fn+GN/vsQv
7A/YuYwivqgTUZtZFGW2wqquUxcQIo+JxVRBaJ7B6eu8QC5zHq3u7HkTMEXEsTmG
Z3bublY6mnwlJOy079ZZaFFyd1nE1hc9VDPhvjefYoEK4NRRPaoL
-----END CERTIFICATE-----
Generated at Wed May 13 13:00:47 2026 by rpki-client