
$ rpki-client -vvf rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/323030313a6466363a353930303a3a2f34382d3438203d3e20313338303536.roa
File: 323030313a6466363a353930303a3a2f34382d3438203d3e20313338303536.roa (raw, json)
Hash identifier: 4neWrZ2U5Ifz5ZV+5kk+4b2Vcx4ltU0Zb9JXxN912Dk=
Subject key identifier: A8:2E:67:9F:1A:A6:C4:B2:0B:E9:A0:20:8B:4F:1F:2E:20:AB:85:DF
Certificate issuer: /CN=B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0
Certificate serial: 4D77A1D1FE2902565C01A748F578DE23551150E1
Authority key identifier: B5:6B:A6:6A:CB:6B:28:A7:5C:F8:B9:26:29:F3:89:88:E6:BC:E5:F0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/323030313a6466363a353930303a3a2f34382d3438203d3e20313338303536.roa
Signing time: Sun 03 May 2026 02:14:52 +0000
ROA not before: Sun 03 May 2026 02:09:52 +0000
ROA not after: Sun 02 May 2027 02:14:52 +0000
asID: 138056
IP address blocks: 2001:df6:5900::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.crl
rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:77:a1:d1:fe:29:02:56:5c:01:a7:48:f5:78:de:23:55:11:50:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0
Validity
Not Before: May 3 02:09:52 2026 GMT
Not After : May 2 02:14:52 2027 GMT
Subject: CN=A82E679F1AA6C4B20BE9A0208B4F1F2E20AB85DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ef:b0:c3:ff:0f:34:f9:6f:41:58:27:2f:3f:
ac:57:6a:2a:47:3a:90:a1:bc:bd:34:c8:ce:97:e3:
37:d8:c7:2d:d9:21:a3:3f:d1:bb:dd:3a:8d:8b:4d:
62:82:75:e5:3a:3b:84:76:a6:9f:57:e0:0f:b5:75:
ee:97:c4:07:8f:ee:cf:4c:0f:38:48:28:91:37:96:
e8:0f:8a:1d:8b:1c:05:04:85:c1:17:7c:18:8c:61:
56:7b:c0:63:87:45:1e:ad:40:2e:ee:fb:e1:3f:5a:
fb:26:4b:f5:4b:22:99:96:a7:77:83:d4:09:5d:4a:
fc:f6:91:f8:1c:cc:09:a5:69:fe:1f:87:6c:16:4c:
f0:98:87:2d:a2:9d:67:dd:4b:b2:d0:68:26:b1:77:
22:1b:04:92:e8:9b:b8:f0:be:9a:22:36:0f:5e:d2:
74:ed:22:32:fe:4f:50:88:7d:f3:6f:46:e9:35:61:
15:91:b0:57:8b:e4:a7:48:98:2d:3b:26:bc:41:b4:
6a:ca:e9:27:da:03:ea:9e:bf:a5:ee:dd:4a:60:72:
8d:f1:93:11:12:1c:93:54:e5:a1:45:77:c4:aa:b3:
32:2c:a4:d8:8d:81:5f:ca:7d:ca:21:2a:68:47:e3:
28:79:56:76:8b:64:3b:70:6e:f0:a7:d7:ab:ef:89:
8c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2E:67:9F:1A:A6:C4:B2:0B:E9:A0:20:8B:4F:1F:2E:20:AB:85:DF
X509v3 Authority Key Identifier:
keyid:B5:6B:A6:6A:CB:6B:28:A7:5C:F8:B9:26:29:F3:89:88:E6:BC:E5:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B56BA66ACB6B28A75CF8B92629F38988E6BCE5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/323030313a6466363a353930303a3a2f34382d3438203d3e20313338303536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:5900::/48
Signature Algorithm: sha256WithRSAEncryption
ce:92:5a:7e:1a:bc:cf:43:c6:af:49:26:d2:dc:e7:44:94:06:
83:98:cc:81:5f:c0:0e:3b:7f:2a:7c:e3:42:4e:f3:ff:77:9d:
6f:01:d1:e7:bf:c9:08:03:d1:ad:59:a7:1d:05:96:3d:0c:09:
32:61:3d:c2:19:96:7f:5a:33:86:a3:5d:a2:fd:23:d6:fb:3b:
45:3e:54:68:c3:9c:35:ef:73:d1:dd:36:ba:b5:aa:93:f6:17:
bc:ea:c1:00:2f:a4:f1:96:65:37:87:88:ce:86:f4:78:2c:32:
b2:7f:eb:32:5c:f3:51:06:75:9a:92:92:80:a7:a1:cf:d2:13:
4e:2e:c5:85:dc:c3:4a:3f:fb:99:b7:d4:7e:ba:ed:b4:e8:d7:
e3:0d:ad:4f:c9:d1:2d:8b:f7:58:e9:c4:de:e0:31:81:91:be:
81:1d:58:27:ca:7a:6f:b7:da:d8:ef:c4:cc:2f:af:ec:85:cb:
b2:7d:b0:af:45:5b:97:f5:44:8d:f2:a1:2a:2f:45:fb:ce:04:
84:5a:79:36:aa:43:90:4d:ba:9d:12:b4:be:04:fe:71:cf:ea:
09:2a:cf:99:99:f4:57:80:5d:43:b4:63:0c:9a:d1:b6:07:94:
5b:67:f6:df:df:08:81:ae:64:29:4b:18:1f:48:7e:b6:6c:1c:
6a:a8:8c:87
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUTXeh0f4pAlZcAadI9XjeI1URUOEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjU2QkE2NkFDQjZCMjhBNzVDRjhCOTI2MjlGMzg5ODhF
NkJDRTVGMDAeFw0yNjA1MDMwMjA5NTJaFw0yNzA1MDIwMjE0NTJaMDMxMTAvBgNV
BAMTKEE4MkU2NzlGMUFBNkM0QjIwQkU5QTAyMDhCNEYxRjJFMjBBQjg1REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC977DD/w80+W9BWCcvP6xXaipH
OpChvL00yM6X4zfYxy3ZIaM/0bvdOo2LTWKCdeU6O4R2pp9X4A+1de6XxAeP7s9M
DzhIKJE3lugPih2LHAUEhcEXfBiMYVZ7wGOHRR6tQC7u++E/WvsmS/VLIpmWp3eD
1AldSvz2kfgczAmlaf4fh2wWTPCYhy2inWfdS7LQaCaxdyIbBJLom7jwvpoiNg9e
0nTtIjL+T1CIffNvRuk1YRWRsFeL5KdImC07JrxBtGrK6SfaA+qev6Xu3Upgco3x
kxESHJNU5aFFd8SqszIspNiNgV/KfcohKmhH4yh5VnaLZDtwbvCn16vviYxZAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUqC5nnxqmxLIL6aAgi08fLiCrhd8wHwYDVR0j
BBgwFoAUtWumastrKKdc+LkmKfOJiOa85fAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTRlZjE5MjAtODUyMy00ZWQ0LWIzNTctOWRlOWEwYzkxNzEwLzAvQjU2QkE2NkFD
QjZCMjhBNzVDRjhCOTI2MjlGMzg5ODhFNkJDRTVGMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CNTZCQTY2QUNCNkIyOEE3NUNGOEI5MjYyOUYzODk4OEU2QkNF
NUYwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE0ZWYxOTIwLTg1MjMtNGVkNC1i
MzU3LTlkZTlhMGM5MTcxMC8wLzMyMzAzMDMxM2E2NDY2MzYzYTM1MzkzMDMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM4MzAzNTM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN
9lkAMA0GCSqGSIb3DQEBCwUAA4IBAQDOklp+GrzPQ8avSSbS3OdElAaDmMyBX8AO
O38qfONCTvP/d51vAdHnv8kIA9GtWacdBZY9DAkyYT3CGZZ/WjOGo12i/SPW+ztF
PlRow5w173PR3Ta6taqT9he86sEAL6TxlmU3h4jOhvR4LDKyf+syXPNRBnWakpKA
p6HP0hNOLsWF3MNKP/uZt9R+uu206NfjDa1PydEti/dY6cTe4DGBkb6BHVgnynpv
t9rY78TML6/shcuyfbCvRVuX9USN8qEqL0X7zgSEWnk2qkOQTbqdErS+BP5xz+oJ
Ks+ZmfRXgF1DtGMMmtG2B5RbZ/bf3wiBrmQpSxgfSH62bBxqqIyH
-----END CERTIFICATE-----
Generated at Wed May 13 10:29:48 2026 by rpki-client