
$ rpki-client -vvf rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a363a3a2f34382d3438203d3e20313337333330.roa
File: 323430323a616134303a363a3a2f34382d3438203d3e20313337333330.roa (raw, json)
Hash identifier: RrGdV1XJliqI0gjX2CQr8vQRm5fbhat+4A8nvsBfMc4=
Subject key identifier: 6F:2A:76:4D:35:F0:D8:A7:78:7F:6D:C5:4C:07:95:46:E3:5E:13:0E
Certificate issuer: /CN=42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1
Certificate serial: 0846AF01324B85F0D9EC45C8B1C7F91C40A59485
Authority key identifier: 42:BC:C9:3C:15:AC:4D:18:51:A2:24:0C:9F:7B:E2:F9:C9:F5:1E:F1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a363a3a2f34382d3438203d3e20313337333330.roa
Signing time: Sun 03 May 2026 02:12:53 +0000
ROA not before: Sun 03 May 2026 02:07:53 +0000
ROA not after: Sun 02 May 2027 02:12:53 +0000
asID: 137330
IP address blocks: 2402:aa40:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.crl
rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:46:af:01:32:4b:85:f0:d9:ec:45:c8:b1:c7:f9:1c:40:a5:94:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1
Validity
Not Before: May 3 02:07:53 2026 GMT
Not After : May 2 02:12:53 2027 GMT
Subject: CN=6F2A764D35F0D8A7787F6DC54C079546E35E130E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:96:26:1d:55:11:12:33:9e:71:41:43:ff:42:
d3:06:2d:06:ad:74:ee:52:bb:0d:98:2b:71:d2:0c:
57:67:26:f3:c9:16:b1:b3:bf:08:db:99:86:55:6e:
a3:49:e3:d3:44:1d:68:9d:9f:39:1e:2c:af:93:58:
b5:4f:8a:f3:6e:50:c9:c3:9d:8f:3c:29:68:46:63:
0f:19:01:05:93:90:8f:0f:cd:17:17:1e:d4:5b:53:
53:c4:49:7d:97:97:8d:1c:8d:86:b6:49:fb:7f:7f:
ca:cf:28:5b:79:4d:a7:92:cc:06:a8:b3:cc:97:c0:
59:dc:c1:48:79:da:1c:08:1f:56:be:a9:07:52:32:
9e:1f:78:60:47:cd:98:7a:2b:4d:02:db:f6:dc:9c:
c1:0d:2c:a3:4a:e3:6d:be:78:10:aa:ca:87:51:28:
de:69:39:26:b2:e7:f7:82:54:1d:3e:f9:1f:db:b4:
bc:f6:3b:fb:8c:82:9d:1f:51:ea:3a:80:0c:2b:a2:
1a:f7:d7:58:88:a3:af:6b:d6:de:4d:09:bb:38:6b:
cd:50:f4:17:d2:6b:f4:40:f4:c3:be:34:25:b4:02:
76:a2:7a:a6:e0:50:e7:bc:8d:4c:c4:1f:e3:84:56:
03:c6:1a:b6:6d:83:4a:1c:d2:21:e4:01:ad:93:a6:
01:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2A:76:4D:35:F0:D8:A7:78:7F:6D:C5:4C:07:95:46:E3:5E:13:0E
X509v3 Authority Key Identifier:
keyid:42:BC:C9:3C:15:AC:4D:18:51:A2:24:0C:9F:7B:E2:F9:C9:F5:1E:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42BCC93C15AC4D1851A2240C9F7BE2F9C9F51EF1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/323430323a616134303a363a3a2f34382d3438203d3e20313337333330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:aa40:6::/48
Signature Algorithm: sha256WithRSAEncryption
79:38:92:f6:51:41:bb:58:af:8d:a8:de:07:a9:c9:a7:78:62:
c7:4e:b6:48:89:cc:dd:e8:63:20:c0:9e:ed:f4:fa:50:7f:a2:
c1:79:09:67:05:04:73:db:08:91:38:c6:9b:75:ba:1a:2d:7b:
48:aa:6e:b6:5a:b7:ce:25:40:a0:e9:eb:d6:e0:b5:98:9d:7e:
d8:fc:e8:c3:c7:7a:ff:cd:51:be:fa:55:33:38:6b:67:c5:02:
23:78:84:64:ef:08:5b:76:33:90:52:f6:82:30:2d:1c:4e:59:
97:3c:69:af:ac:eb:2a:b9:9d:31:f8:7d:dc:ee:22:f3:fb:6c:
b5:0b:f0:ac:36:77:03:e8:42:6d:b4:3f:b8:c3:74:fa:e8:38:
e6:29:47:3b:f8:08:2a:8f:d6:e6:69:26:c1:4f:57:39:66:9b:
48:5c:42:fe:aa:bb:05:6f:76:15:93:0c:3d:4a:f0:a6:9a:d4:
36:da:62:61:7e:ae:46:ce:29:d3:04:f6:4f:f4:49:58:df:cd:
73:af:d8:f5:84:b9:e6:b5:8e:a5:d8:6d:a8:7e:cf:4d:89:eb:
b3:5d:1b:d7:7f:aa:eb:30:73:88:98:9e:e7:96:7d:24:cd:d7:
23:08:de:0a:6b:ef:8a:fa:37:1a:be:50:e8:18:a8:eb:f2:75:
ee:72:d2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:02:34 2026 by rpki-client