
$ rpki-client -vvf rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a333030303a3a2f33362d3438203d3e20313430343233.roa
File: 323430363a323063303a333030303a3a2f33362d3438203d3e20313430343233.roa (raw, json)
Hash identifier: homieSZF5V1szau7ki2ssr0BNZ6bnwvtWUmv3xC0MNs=
Subject key identifier: 95:5F:82:75:9A:1D:3B:6F:C9:4F:66:65:D2:CB:95:A0:E6:23:41:66
Certificate issuer: /CN=5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73
Certificate serial: 409696BFF3360D6946077556DF8BE0DF463C8892
Authority key identifier: 5D:27:2E:F1:FF:5F:99:60:3D:FC:2A:2B:9C:5A:B1:A8:BF:32:2E:73
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a333030303a3a2f33362d3438203d3e20313430343233.roa
Signing time: Sun 03 May 2026 02:16:40 +0000
ROA not before: Sun 03 May 2026 02:11:40 +0000
ROA not after: Sun 02 May 2027 02:16:40 +0000
asID: 140423
IP address blocks: 2406:20c0:3000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.crl
rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:40:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:96:96:bf:f3:36:0d:69:46:07:75:56:df:8b:e0:df:46:3c:88:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73
Validity
Not Before: May 3 02:11:40 2026 GMT
Not After : May 2 02:16:40 2027 GMT
Subject: CN=955F82759A1D3B6FC94F6665D2CB95A0E6234166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9b:e4:74:28:5e:15:22:22:13:1a:b4:d6:fa:
ca:c8:9f:a1:9b:ee:e9:ea:80:9e:de:89:26:42:b6:
c0:a6:52:94:ed:ff:43:9d:81:e3:4c:28:88:5b:87:
ab:b3:28:46:55:fd:40:56:0f:ab:49:08:f1:87:b3:
d9:2a:7e:9d:36:20:95:9c:2f:3d:69:fb:cc:0d:b2:
af:05:88:2e:47:c5:a1:92:c0:2b:14:db:9d:86:e3:
45:c6:e5:e2:44:14:3a:5e:b0:48:5d:a4:3a:12:c0:
de:25:e5:8e:30:fe:c0:35:97:d3:55:64:13:91:18:
f3:52:c6:02:b9:1b:15:39:3f:90:03:43:68:7e:cf:
ec:87:05:82:32:6c:06:87:84:8b:18:97:c8:5a:00:
33:77:69:ae:72:22:fd:55:34:6b:96:00:c4:2b:4b:
fa:39:32:13:c2:0c:f6:da:82:49:70:55:2d:f8:f3:
a0:bd:e4:3c:b7:c3:e8:33:b9:45:11:d4:3f:17:b6:
7f:68:aa:62:31:ed:87:f6:16:58:7b:ea:40:75:d0:
84:54:58:16:e8:54:7e:c1:ca:e3:f8:cd:ed:cd:75:
e9:ee:a2:47:1a:e9:02:1c:84:95:55:ce:e9:98:8a:
4a:88:d9:f1:91:dc:c5:85:d8:46:69:e8:83:bc:dc:
c3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5F:82:75:9A:1D:3B:6F:C9:4F:66:65:D2:CB:95:A0:E6:23:41:66
X509v3 Authority Key Identifier:
keyid:5D:27:2E:F1:FF:5F:99:60:3D:FC:2A:2B:9C:5A:B1:A8:BF:32:2E:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a333030303a3a2f33362d3438203d3e20313430343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:20c0:3000::/36
Signature Algorithm: sha256WithRSAEncryption
91:3a:8e:78:5c:4a:db:4d:10:1f:ee:d1:96:bb:92:e5:e9:4f:
80:6a:1c:6b:83:e2:c0:0d:4e:23:11:c3:1a:60:21:0d:3a:6a:
bf:80:15:c7:07:de:a8:57:ef:4a:23:0c:44:1c:38:48:7e:61:
c6:d9:ec:34:16:5e:64:61:4f:e9:0c:ef:75:b9:d4:c6:6b:ba:
91:ac:c1:4c:04:98:86:33:0c:e6:cf:29:e4:96:34:11:d6:42:
44:ab:b7:f1:af:9a:eb:c9:d0:3f:72:2d:7a:da:e3:83:e6:74:
6d:06:e5:3f:55:f7:c9:78:d5:f1:41:5a:59:71:9b:37:28:ec:
a7:99:a3:4f:73:7b:b1:44:5b:75:57:f6:b4:5f:32:70:2e:82:
b4:58:b2:9c:db:0c:cd:23:11:5d:fa:14:03:fc:ca:e2:f9:7b:
cb:34:15:37:51:5b:41:28:b3:ae:cf:94:34:63:cc:b3:58:16:
7e:20:ef:95:03:7c:8d:9a:23:3f:ec:37:39:d6:dd:9a:80:ac:
68:f5:27:8a:c8:9a:95:7c:3f:3e:56:bf:78:f3:2a:f0:91:06:
5d:7a:fa:54:f0:cb:3e:12:9a:95:16:8b:80:10:26:c0:bc:3a:
f8:10:29:07:a5:cd:30:1b:3b:f8:be:03:4a:4e:4d:ab:31:87:
2c:8b:f7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:03:47 2026 by rpki-client