
$ rpki-client -vvf rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a633135303a3a2f34342d3434203d3e203538333639.roa
File: 323430333a666438303a633135303a3a2f34342d3434203d3e203538333639.roa (raw, json)
Hash identifier: TM6NpAuHrmBKS7I6ZBAJWVYPW0AvjOjO5M7e4c63DSk=
Subject key identifier: 8A:9D:FC:F3:67:33:14:60:82:7D:F4:D2:9E:E4:F9:95:C4:11:3F:CA
Certificate issuer: /CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Certificate serial: 700B3F401629320C46BB1DB8472531E7A9A1E59F
Authority key identifier: 4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a633135303a3a2f34342d3434203d3e203538333639.roa
Signing time: Sun 03 May 2026 02:15:29 +0000
ROA not before: Sun 03 May 2026 02:10:29 +0000
ROA not after: Sun 02 May 2027 02:15:29 +0000
asID: 58369
IP address blocks: 2403:fd80:c150::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:0b:3f:40:16:29:32:0c:46:bb:1d:b8:47:25:31:e7:a9:a1:e5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Validity
Not Before: May 3 02:10:29 2026 GMT
Not After : May 2 02:15:29 2027 GMT
Subject: CN=8A9DFCF367331460827DF4D29EE4F995C4113FCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:74:b7:60:a4:c6:c7:da:ff:6c:c6:30:2b:59:
cf:d7:18:d2:a7:56:a6:a8:37:3d:ca:d2:d7:0e:15:
bb:64:57:7f:54:c3:4d:b9:36:1e:98:a0:ac:08:37:
1e:99:e8:ec:8d:95:00:ce:aa:cc:4a:b4:fc:56:43:
88:d1:3b:96:74:b2:a2:ed:fa:39:cb:1f:23:43:e5:
e1:4b:4d:1d:1a:24:3a:06:7e:1f:e0:7e:13:3a:d0:
d6:d3:e2:07:e1:cb:ec:e5:fb:41:00:08:bb:81:20:
99:8b:23:c7:df:92:0e:6c:71:dd:93:36:0e:b7:67:
ce:ba:63:7d:83:3c:ed:4f:25:db:2c:7d:82:68:07:
3c:30:f5:54:c2:1c:53:be:86:99:fc:e2:6e:aa:1a:
e6:5a:72:2f:f5:97:5e:f6:c3:10:50:59:74:ab:81:
8e:d1:f7:91:62:31:ad:86:21:44:24:d3:ef:08:62:
d3:87:d0:c6:c5:4c:4f:3f:ba:fa:1c:6b:96:f5:fd:
3a:c9:cf:2a:b7:70:d5:cc:e1:11:a5:a5:78:2b:45:
ca:52:5a:c1:dc:b3:79:74:dc:e2:be:36:ce:5c:0b:
d4:31:4d:5c:b3:bf:f5:3a:e6:3b:3a:46:ee:cb:a5:
13:8a:9b:97:e4:b1:90:52:11:7c:59:97:bd:f3:3b:
b9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9D:FC:F3:67:33:14:60:82:7D:F4:D2:9E:E4:F9:95:C4:11:3F:CA
X509v3 Authority Key Identifier:
keyid:4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a633135303a3a2f34342d3434203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:fd80:c150::/44
Signature Algorithm: sha256WithRSAEncryption
c9:7f:23:eb:27:a4:25:e6:20:8a:11:24:71:1f:6b:26:e8:08:
ce:99:26:30:8b:0a:71:5c:14:6a:69:e7:dc:d6:aa:4e:43:2a:
6c:b2:f4:ba:f2:65:84:3a:77:e2:3c:0c:dc:64:e3:b8:41:53:
d5:20:00:12:ed:95:c2:0e:87:7b:1a:52:ef:94:34:09:51:ce:
e2:9c:fd:64:6f:f0:36:2f:eb:1c:3d:5c:f8:2e:c7:51:21:62:
b2:57:36:6e:19:3c:66:c1:9f:2f:95:af:80:be:7e:6e:85:b2:
1b:c5:a4:fd:7f:8b:b2:8a:ee:0d:b5:e7:89:b3:eb:b1:67:5f:
1c:9a:a0:c8:d4:e2:01:f7:55:8f:e4:6f:f5:2b:02:60:65:a9:
df:d0:51:3c:d4:e9:3a:11:e1:ee:e0:45:6f:05:2a:e0:6a:a9:
c2:aa:b5:26:66:5d:27:ab:4b:6a:6a:50:eb:1e:1e:8e:84:48:
29:f2:4a:e4:19:d1:0d:f2:b8:33:33:0f:20:28:12:db:2d:21:
c2:c1:39:88:27:23:ae:50:26:ed:cc:b6:70:d2:40:d8:5c:72:
e5:e4:45:42:94:b7:5e:19:6a:f4:82:bf:f5:50:3e:a5:f6:de:
57:98:85:99:8a:38:c9:de:a3:08:4e:22:f9:7b:5e:8f:a5:1e:
40:dc:6c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:42:30 2026 by rpki-client