
$ rpki-client -vvf rpki-rsync.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/323030313a6466353a353238303a3a2f34382d3438203d3e20313431313237.roa
File: 323030313a6466353a353238303a3a2f34382d3438203d3e20313431313237.roa (raw, json)
Hash identifier: y6c9d5I2X9TgLwiQ6/FSp7aNwbosfjWCWkEcd+1p7Q4=
Subject key identifier: FD:DE:D8:36:8B:8F:2C:1E:7B:B8:CA:79:94:3B:9B:56:95:7A:6B:39
Certificate issuer: /CN=F369E66B61D5402A7A72C94237FB69A9A071899A
Certificate serial: 42965E22C00FA7F78BC6591A333C4CDA63922564
Authority key identifier: F3:69:E6:6B:61:D5:40:2A:7A:72:C9:42:37:FB:69:A9:A0:71:89:9A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F369E66B61D5402A7A72C94237FB69A9A071899A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/323030313a6466353a353238303a3a2f34382d3438203d3e20313431313237.roa
Signing time: Sun 03 May 2026 02:14:14 +0000
ROA not before: Sun 03 May 2026 02:09:14 +0000
ROA not after: Sun 02 May 2027 02:14:14 +0000
asID: 141127
IP address blocks: 2001:df5:5280::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/F369E66B61D5402A7A72C94237FB69A9A071899A.crl
rsync://rpki-rsync.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/F369E66B61D5402A7A72C94237FB69A9A071899A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F369E66B61D5402A7A72C94237FB69A9A071899A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:96:5e:22:c0:0f:a7:f7:8b:c6:59:1a:33:3c:4c:da:63:92:25:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369E66B61D5402A7A72C94237FB69A9A071899A
Validity
Not Before: May 3 02:09:14 2026 GMT
Not After : May 2 02:14:14 2027 GMT
Subject: CN=FDDED8368B8F2C1E7BB8CA79943B9B56957A6B39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b0:c9:99:34:48:47:cf:5d:67:5e:01:3d:68:
81:0b:c8:73:2e:1e:ed:b6:b4:64:6f:e2:86:e1:24:
cb:85:96:a3:06:07:35:98:37:eb:8f:a5:1a:a5:da:
e8:ee:2c:7b:28:af:b0:e3:78:e5:da:6f:86:36:9c:
b0:29:ae:19:53:ef:01:b3:31:a7:e4:cd:1f:46:97:
a5:5a:f6:20:21:ab:e8:f7:ea:2e:7a:62:64:21:7a:
b0:c4:56:08:be:23:99:2a:38:0f:a7:db:53:d6:7b:
7d:95:46:8f:93:f8:c0:7f:19:a1:05:02:86:6d:2b:
1f:7b:08:c7:80:fb:0f:25:1d:6f:85:52:dd:6e:fd:
ff:5a:84:2f:e4:53:aa:a6:ed:20:b5:92:81:85:81:
69:da:72:98:99:30:8f:cb:9d:ce:2d:ec:5c:59:fa:
f8:4a:88:de:d8:32:b8:3c:5f:21:89:c6:88:a0:09:
9e:73:6b:83:14:72:ff:aa:da:fd:f8:da:b2:1f:de:
74:d2:9a:22:d8:11:20:57:e5:ab:f8:69:5d:14:f5:
5f:15:15:2c:a0:be:0d:ef:cf:10:9a:01:b1:36:e6:
1c:f4:80:77:4d:44:60:43:bf:de:1a:be:ec:ab:a6:
af:1b:de:52:7e:e4:18:fe:80:00:d8:0d:b4:81:a6:
df:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DE:D8:36:8B:8F:2C:1E:7B:B8:CA:79:94:3B:9B:56:95:7A:6B:39
X509v3 Authority Key Identifier:
keyid:F3:69:E6:6B:61:D5:40:2A:7A:72:C9:42:37:FB:69:A9:A0:71:89:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/F369E66B61D5402A7A72C94237FB69A9A071899A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F369E66B61D5402A7A72C94237FB69A9A071899A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/323030313a6466353a353238303a3a2f34382d3438203d3e20313431313237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:5280::/48
Signature Algorithm: sha256WithRSAEncryption
41:73:41:2a:ab:84:70:f6:0b:66:85:43:02:9b:91:66:30:08:
9a:f9:86:73:6a:0b:a6:f7:78:4f:e4:2e:e9:c1:be:07:d6:c8:
3b:74:04:76:ca:2d:f7:2d:c4:db:1d:48:9d:e0:63:45:40:b6:
d6:ff:89:b5:4a:54:8d:25:9d:a8:63:d3:21:31:b5:6a:95:91:
c1:04:4e:09:85:fb:f7:73:8f:ac:df:68:bd:40:87:43:72:da:
e3:12:69:7c:ef:03:03:19:e4:50:81:36:2d:b2:18:9c:fe:b4:
2e:c0:25:6e:62:f6:d9:3f:9b:5b:a2:01:19:26:e4:0a:30:eb:
b4:27:c9:a1:74:39:58:a5:39:0a:50:f8:6f:12:6d:68:a5:c5:
1c:33:40:8c:0c:b5:3f:d1:40:95:ba:4e:be:09:44:d4:9f:77:
c5:a7:dc:ef:26:1c:0f:4e:1d:fb:56:d8:ac:8d:7d:f8:81:a1:
a5:9d:34:b3:67:0e:27:28:6d:2e:af:2d:43:a5:c2:cc:06:31:
5d:5a:58:8a:fa:63:63:24:bc:ec:20:30:61:0d:ea:34:2c:54:
e6:a2:17:9e:2b:65:85:8d:58:fb:82:a7:34:16:1c:84:72:2f:
63:50:0e:86:0b:fe:11:b8:8e:d8:81:77:c3:81:12:c9:cb:69:
a8:59:b4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:45:58 2026 by rpki-client