
$ rpki-client -vvf rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/323030313a6466333a643663303a3a2f34382d3438203d3e20313531363030.roa
File: 323030313a6466333a643663303a3a2f34382d3438203d3e20313531363030.roa (raw, json)
Hash identifier: pgEEArXd9XP8zXa/DdMQKaPdRhF2qiIImHSr7qGevFs=
Subject key identifier: 48:FA:91:16:76:22:18:B0:34:25:90:8D:E0:63:C1:E1:5A:C5:A5:46
Certificate issuer: /CN=F95181B95098159C2587D2AE64AA15ECF6F7BA45
Certificate serial: 5714300653A7463591DC8B7F53353417C53DE875
Authority key identifier: F9:51:81:B9:50:98:15:9C:25:87:D2:AE:64:AA:15:EC:F6:F7:BA:45
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F95181B95098159C2587D2AE64AA15ECF6F7BA45.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/323030313a6466333a643663303a3a2f34382d3438203d3e20313531363030.roa
Signing time: Sun 03 May 2026 02:15:47 +0000
ROA not before: Sun 03 May 2026 02:10:47 +0000
ROA not after: Sun 02 May 2027 02:15:47 +0000
asID: 151600
IP address blocks: 2001:df3:d6c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.crl
rsync://rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F95181B95098159C2587D2AE64AA15ECF6F7BA45.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:09:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:14:30:06:53:a7:46:35:91:dc:8b:7f:53:35:34:17:c5:3d:e8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F95181B95098159C2587D2AE64AA15ECF6F7BA45
Validity
Not Before: May 3 02:10:47 2026 GMT
Not After : May 2 02:15:47 2027 GMT
Subject: CN=48FA9116762218B03425908DE063C1E15AC5A546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:8a:7e:3a:ce:07:5f:00:bd:fe:5d:b4:52:de:
c7:4d:51:c2:d1:9a:17:12:5c:84:42:56:44:dc:e0:
aa:43:3c:f5:ff:e3:8a:e2:25:2c:2d:11:36:74:61:
ab:5b:34:6f:10:bc:cc:d6:13:f2:92:13:f1:e6:f3:
75:ad:79:9a:d1:9c:9f:89:81:50:ee:ba:27:a1:eb:
fc:73:b8:e0:1c:81:b3:f0:f7:a7:3b:06:b9:41:08:
94:5b:b2:47:c8:ca:9c:e2:f5:e5:68:f6:fd:96:11:
ff:5b:d0:0b:11:d3:af:0a:07:53:ad:5d:46:00:4c:
dd:63:6c:5d:41:08:15:a6:75:6c:13:ff:ca:5b:43:
64:36:6e:8f:c9:41:f3:e5:5c:fc:fe:ef:8a:9b:0e:
ca:83:30:65:8b:76:96:aa:e6:cb:b8:c6:d2:f5:f0:
16:e2:aa:59:3e:5b:6d:e2:02:e7:79:e1:98:28:d8:
dc:e9:74:f9:5e:49:bb:4e:e2:04:6f:e2:09:cc:35:
81:8e:1a:74:c8:f0:a0:dd:1b:91:1d:b9:96:12:e9:
f2:6d:cf:82:df:3c:fc:42:32:38:2c:b2:86:e1:9c:
7e:3b:3c:0b:e6:aa:51:65:75:7e:fa:7c:e2:98:7d:
37:ba:1d:9a:11:d6:1a:e2:a4:8c:2e:15:63:55:70:
ed:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FA:91:16:76:22:18:B0:34:25:90:8D:E0:63:C1:E1:5A:C5:A5:46
X509v3 Authority Key Identifier:
keyid:F9:51:81:B9:50:98:15:9C:25:87:D2:AE:64:AA:15:EC:F6:F7:BA:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/F95181B95098159C2587D2AE64AA15ECF6F7BA45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F95181B95098159C2587D2AE64AA15ECF6F7BA45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/323030313a6466333a643663303a3a2f34382d3438203d3e20313531363030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:d6c0::/48
Signature Algorithm: sha256WithRSAEncryption
6b:53:a3:b8:0f:f7:be:f3:5b:0e:93:c0:6a:e9:7f:4f:27:5a:
64:3f:bc:4e:ff:61:c4:53:e5:ed:ea:c2:bf:30:c7:a9:77:53:
93:37:56:8c:21:1d:68:49:e9:b9:a0:bb:c1:7e:98:f4:4d:ab:
c7:66:19:6f:d3:59:eb:00:79:d2:4a:2b:cc:95:1f:0e:c7:ab:
b0:ab:73:67:1c:fd:b0:48:23:c0:c6:c1:42:c1:0b:78:c0:2a:
b8:9a:c0:bf:43:0f:71:a5:40:b8:e2:8a:0e:83:3f:b2:8b:84:
e0:e4:bc:42:f6:d6:49:55:e5:9c:c7:ec:00:32:31:f5:59:12:
ac:4b:88:8f:31:01:31:39:77:d8:0a:8e:e4:c8:5d:d2:d4:52:
97:cd:07:3a:40:cd:cf:57:5d:6a:bf:56:a4:4e:62:0f:88:2a:
70:d6:a3:67:f4:8f:1c:bc:af:d1:ce:b9:e0:bf:81:81:6e:4c:
fc:57:e8:ae:c6:6e:d7:ed:64:14:86:ac:da:53:ea:3c:ba:c0:
9e:7b:98:c6:06:a6:97:c5:3e:2c:cf:29:48:90:56:e7:9f:67:
f6:2a:83:2d:75:fc:94:00:60:1c:3c:8d:5b:46:19:ba:95:5b:
cc:a7:ef:63:8d:96:79:62:ff:c3:5f:5c:a1:48:11:5c:1d:e5:
e8:95:c4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:51:22 2026 by rpki-client