
$ rpki-client -vvf rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a613030303a3a2f33362d3336203d3e203538333639.roa
File: 323430333a666438303a613030303a3a2f33362d3336203d3e203538333639.roa (raw, json)
Hash identifier: aBV1ADUfNr1dn25v7bCxvnaKTo1blUFKL0axvXPrgvU=
Subject key identifier: A8:4D:15:25:51:43:86:27:A8:9F:E8:DB:6B:5E:F2:27:38:C8:77:A3
Certificate issuer: /CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Certificate serial: 4B45EED784CC01190512CACD85681D33992CFD86
Authority key identifier: 4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a613030303a3a2f33362d3336203d3e203538333639.roa
Signing time: Sun 03 May 2026 02:15:30 +0000
ROA not before: Sun 03 May 2026 02:10:30 +0000
ROA not after: Sun 02 May 2027 02:15:30 +0000
asID: 58369
IP address blocks: 2403:fd80:a000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:45:ee:d7:84:cc:01:19:05:12:ca:cd:85:68:1d:33:99:2c:fd:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Validity
Not Before: May 3 02:10:30 2026 GMT
Not After : May 2 02:15:30 2027 GMT
Subject: CN=A84D152551438627A89FE8DB6B5EF22738C877A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:7b:9c:f0:94:6d:e0:b7:34:81:ca:27:65:
24:4d:84:68:5d:8b:ab:ed:9f:b4:d6:61:9f:54:5e:
cf:7e:e1:74:9b:a2:c4:f0:4a:19:78:4a:bd:4e:f3:
60:fd:bb:97:58:14:22:d0:ff:ab:f9:9d:59:9e:7c:
3f:2e:ae:dd:ae:c6:98:c2:40:ff:b6:db:a4:c8:66:
08:a9:cb:c7:3d:70:5f:b7:5b:6f:5e:34:ad:0c:e2:
32:f0:ad:4f:e5:10:89:7c:ae:96:51:b5:10:33:b4:
48:74:40:4e:ad:2c:ae:15:10:ba:d9:7b:ec:8e:13:
83:e2:9b:9a:1a:91:de:4d:13:09:14:37:07:40:d4:
28:ee:7f:ca:3b:be:eb:53:1d:c4:8a:12:da:54:34:
55:f8:2b:98:44:b3:8b:02:15:31:5e:37:da:5b:db:
33:64:22:5c:c7:1d:5c:40:a3:a8:c1:a1:ac:b2:f8:
b3:1c:5e:68:45:8f:8d:94:66:2a:4a:34:42:48:1d:
eb:2e:0f:81:76:26:97:9a:c9:87:97:88:2d:09:65:
73:71:8d:57:1b:be:bd:7a:f6:7c:00:b5:6d:91:77:
67:3a:c8:3e:0b:3b:7c:f6:30:89:ec:c8:91:1a:e9:
e0:52:35:56:7b:3b:47:00:3b:47:09:9b:27:37:c3:
11:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4D:15:25:51:43:86:27:A8:9F:E8:DB:6B:5E:F2:27:38:C8:77:A3
X509v3 Authority Key Identifier:
keyid:4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a613030303a3a2f33362d3336203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:fd80:a000::/36
Signature Algorithm: sha256WithRSAEncryption
48:88:82:18:0d:cd:e8:24:79:9f:f0:5b:62:8c:17:c9:de:49:
ce:26:c7:3f:8a:16:a1:19:f7:35:f6:08:37:1f:f5:55:44:76:
4f:dd:01:b4:6e:46:f0:c9:fa:1c:49:45:18:ae:3a:34:aa:01:
b3:3c:5b:97:a8:ee:4e:b9:6d:e9:cf:8d:69:3f:f9:3c:5a:7b:
47:f1:7d:8f:b8:81:9c:15:e7:2a:2d:77:d7:dc:b7:e1:0e:66:
cf:ba:60:e1:c2:70:b7:a6:a3:f6:31:19:4d:22:be:31:63:84:
12:da:09:6a:34:78:59:a3:b0:d5:bc:f5:42:a3:38:32:fc:48:
3a:03:42:4f:58:cd:0f:7c:e2:7b:73:6e:7a:27:3c:08:8d:12:
db:77:a2:ab:7a:93:51:71:8f:f8:1f:a5:21:9e:2d:d2:40:da:
03:c3:2d:36:cb:aa:b2:c2:bc:87:47:98:dd:15:3a:77:a3:03:
1e:6c:c0:87:fb:62:85:63:ca:91:be:84:80:54:50:4c:64:2b:
c4:21:98:98:ec:07:f6:0a:08:af:b7:60:3a:a4:f3:d8:ff:f0:
4d:29:56:d9:f3:0f:c8:5a:a2:30:f9:d5:b4:eb:87:2e:75:c1:
fd:0a:43:bd:e1:15:7d:42:ec:4e:dc:d8:d3:b6:85:6a:45:4a:
84:08:8c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:30:31 2026 by rpki-client