
$ rpki-client -vvf rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/323430303a636438303a3a2f33322d3438203d3e203539323831.roa
File: 323430303a636438303a3a2f33322d3438203d3e203539323831.roa (raw, json)
Hash identifier: j1suU85D1/7FjlJvr2yGn6MbcsgwWHNmUCiTqlRJqgg=
Subject key identifier: 74:7F:E1:D0:27:22:8A:4C:55:30:36:48:8E:3E:79:3B:4E:43:5D:56
Certificate issuer: /CN=C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9
Certificate serial: 7682D9240C2324D7503094A597A31696A59D4149
Authority key identifier: C7:6F:AE:70:E7:14:64:49:6E:F4:FA:8E:EE:F0:DF:5C:93:12:C7:C9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/323430303a636438303a3a2f33322d3438203d3e203539323831.roa
Signing time: Sun 03 May 2026 02:15:50 +0000
ROA not before: Sun 03 May 2026 02:10:50 +0000
ROA not after: Sun 02 May 2027 02:15:50 +0000
asID: 59281
IP address blocks: 2400:cd80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.crl
rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:82:d9:24:0c:23:24:d7:50:30:94:a5:97:a3:16:96:a5:9d:41:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9
Validity
Not Before: May 3 02:10:50 2026 GMT
Not After : May 2 02:15:50 2027 GMT
Subject: CN=747FE1D027228A4C553036488E3E793B4E435D56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a6:fd:fe:a3:ab:66:86:17:2c:63:13:28:3c:
1d:b8:8d:77:19:83:3d:d9:b5:37:b8:87:94:4c:b5:
21:4a:b3:57:4c:d8:50:3b:27:fc:cc:3f:4b:12:8f:
a2:39:07:90:53:61:74:55:75:9c:09:bd:95:f4:9e:
31:6c:38:fb:f3:a8:c4:3f:88:1c:af:03:7f:46:f0:
3e:2d:31:0f:c1:9f:05:4a:33:41:b0:38:7d:2e:da:
94:9c:ee:44:af:96:0d:c7:99:26:b2:fc:8a:f7:41:
45:a0:6a:5d:dc:66:ca:09:6d:49:22:3c:eb:dd:2a:
72:7a:4e:f3:95:82:98:87:5d:b8:87:36:e6:12:c2:
d0:31:47:d5:e4:e1:b1:4a:f1:49:b2:2f:13:6c:70:
14:02:f6:96:db:45:e1:57:20:1c:3f:68:31:13:ba:
d4:0f:0c:63:d7:7c:99:fc:74:1f:2e:17:24:5b:2f:
a3:45:45:73:30:ca:01:c2:94:07:8d:c1:a4:65:e7:
cc:3f:a2:41:42:6e:22:6e:1a:a9:3e:6e:49:49:d2:
51:fc:2e:07:52:ec:da:bd:ee:ff:2d:a1:ab:48:15:
ac:8d:e7:f9:df:92:a6:01:09:bd:eb:92:47:37:d1:
79:e2:ac:eb:94:51:fa:c6:81:34:06:1c:34:59:c4:
c5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7F:E1:D0:27:22:8A:4C:55:30:36:48:8E:3E:79:3B:4E:43:5D:56
X509v3 Authority Key Identifier:
keyid:C7:6F:AE:70:E7:14:64:49:6E:F4:FA:8E:EE:F0:DF:5C:93:12:C7:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C76FAE70E71464496EF4FA8EEEF0DF5C9312C7C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/323430303a636438303a3a2f33322d3438203d3e203539323831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:cd80::/32
Signature Algorithm: sha256WithRSAEncryption
00:29:c7:32:1a:c7:8d:11:2b:f2:cf:97:78:7c:9c:7f:d7:f8:
75:86:9b:08:21:b3:59:b6:be:87:b9:0b:84:0e:7b:a0:7e:bf:
ae:4b:85:32:be:84:18:c9:b0:8e:b5:83:59:da:7a:1e:5e:0a:
38:9a:23:d1:60:2b:8d:9c:34:be:8b:ee:8e:2a:74:2f:92:83:
ee:a1:c5:26:45:54:5c:3b:bd:aa:1a:29:2f:a3:5c:f0:f1:fa:
22:8b:78:89:9a:fa:01:f3:3d:28:75:3e:98:8b:6d:75:ff:f5:
1d:71:09:ec:42:5f:27:45:d1:37:91:48:37:de:6f:f7:a3:a1:
bf:b0:a0:e0:04:19:d5:63:7e:2a:33:2b:dd:6c:52:c8:61:16:
9b:a4:fc:a7:b9:87:57:00:67:15:de:c6:cb:0a:58:7b:8c:bb:
a8:ab:14:64:d1:9a:28:47:c0:1a:f8:d7:14:ed:fa:72:5b:8b:
b5:73:07:08:70:1f:83:9b:79:ad:c8:7d:21:a3:93:b3:3b:7a:
84:d9:fb:df:33:0f:82:44:2f:c3:db:0b:d1:e3:48:5a:d2:8f:
dc:5b:a9:69:82:2a:cb:ac:62:a3:51:90:56:9e:4d:9a:84:81:
25:b6:98:de:d2:bc:71:c1:7b:e9:77:ff:b7:0d:7b:62:bb:c3:
28:9e:23:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:46:36 2026 by rpki-client