
$ rpki-client -vvf rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a3a2f33322d3336203d3e203538333639.roa
File: 323430333a666438303a3a2f33322d3336203d3e203538333639.roa (raw, json)
Hash identifier: nbQcRBwGGLqKTg+LDcXd+o7eRQ+KQ5zumpzuatEfuPU=
Subject key identifier: 8A:D5:D4:45:22:73:5B:25:B6:BA:CD:E6:82:FF:C5:42:D3:18:66:EE
Certificate issuer: /CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Certificate serial: 1DFC3057B711996CDA21F556EC0FD69855FA455E
Authority key identifier: 4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a3a2f33322d3336203d3e203538333639.roa
Signing time: Sun 03 May 2026 02:15:31 +0000
ROA not before: Sun 03 May 2026 02:10:31 +0000
ROA not after: Sun 02 May 2027 02:15:31 +0000
asID: 58369
IP address blocks: 2403:fd80::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:fc:30:57:b7:11:99:6c:da:21:f5:56:ec:0f:d6:98:55:fa:45:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Validity
Not Before: May 3 02:10:31 2026 GMT
Not After : May 2 02:15:31 2027 GMT
Subject: CN=8AD5D44522735B25B6BACDE682FFC542D31866EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:db:d7:1f:67:d2:50:a3:d7:57:04:0d:7f:d9:
75:d0:c9:55:17:1a:f2:ec:37:26:ce:b3:04:bf:4e:
56:7e:2d:65:36:25:ba:75:68:7d:e3:ae:e8:88:ca:
a6:cc:11:b9:fa:99:69:a5:30:f1:79:aa:27:0c:bd:
bd:f1:b6:ef:cb:24:88:59:83:72:39:84:eb:87:db:
47:ba:20:52:f9:63:ad:b6:6d:03:e6:a7:45:98:e7:
67:82:6b:d6:3d:b6:dc:38:57:73:ae:1d:7c:f8:1c:
e0:6e:ce:84:5e:30:39:ea:b6:91:11:6e:cb:6e:fb:
4a:01:7e:70:02:66:db:f5:bd:62:68:49:2b:58:f4:
e5:b2:be:ce:09:45:da:9c:41:36:13:30:64:fe:d5:
e6:01:b8:e0:95:50:64:b7:c6:73:46:dd:49:e1:19:
89:0b:47:50:69:b0:0a:f9:14:19:39:6d:bd:21:22:
14:b1:60:c2:6b:77:80:99:38:41:6a:94:bd:9a:7f:
05:df:02:a3:20:43:c1:70:02:4f:4b:ad:ac:0b:35:
e7:de:05:a6:58:6c:20:5a:81:ca:e1:fb:90:76:8c:
64:6c:bf:72:b1:bd:ba:07:a8:19:15:06:ec:c6:e6:
86:35:4e:3b:5d:3f:05:99:be:1d:ca:2b:f0:c6:67:
71:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D5:D4:45:22:73:5B:25:B6:BA:CD:E6:82:FF:C5:42:D3:18:66:EE
X509v3 Authority Key Identifier:
keyid:4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a3a2f33322d3336203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:fd80::/32
Signature Algorithm: sha256WithRSAEncryption
c0:87:14:80:c5:a6:47:0d:b6:b2:6f:99:21:9a:c4:a7:e4:06:
7e:29:f9:72:c5:83:9f:a7:82:13:8e:c7:f6:e6:e1:8c:42:23:
f8:3f:bf:03:7e:cb:d5:62:25:4b:03:ab:8d:1d:29:79:06:3f:
47:bb:39:08:a4:eb:36:42:25:4d:23:42:75:7b:9a:6b:48:6b:
43:d2:6f:4d:52:e4:9a:47:ff:67:d4:32:57:96:98:54:8e:40:
36:f8:bb:b2:0e:e3:4a:e6:3b:56:73:fd:a6:46:6e:6f:fe:22:
33:fb:48:b6:7a:24:2e:4b:29:16:a6:1e:34:b1:22:bf:bf:f0:
52:ba:98:bd:fc:fe:5d:19:3a:d9:16:97:56:a3:b8:73:50:af:
18:52:bb:db:89:6b:1e:f2:16:48:51:dc:b9:9b:71:64:56:d2:
fb:f5:0d:0a:f3:cd:3e:99:d2:c6:30:ec:a6:44:8c:e6:2c:5b:
3f:ed:7d:32:09:af:fc:4e:f1:7f:7d:d2:cf:11:7e:30:26:f0:
97:66:c0:2d:ae:ff:86:af:d5:79:cf:c3:bd:a4:e7:d8:16:7e:
0e:31:ca:8d:30:f4:e0:de:be:5c:e7:72:0e:40:b4:21:6f:fe:
a6:d0:12:44:74:67:f0:f4:13:da:2c:4d:c3:61:60:b2:45:a8:
1d:cb:0f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:08:41 2026 by rpki-client