
$ rpki-client -vvf rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a373030303a3a2f33362d3438203d3e20313430343233.roa
File: 323430363a323063303a373030303a3a2f33362d3438203d3e20313430343233.roa (raw, json)
Hash identifier: A0iKimPBe5FHTwF9ZBavCc6lcL3pnQfd10Ynmjdk5YQ=
Subject key identifier: C7:98:6D:6C:26:4F:EB:0D:46:36:83:27:DC:79:1F:8E:1F:07:AB:B3
Certificate issuer: /CN=5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73
Certificate serial: A8759CC78DAE2AAD4A14D09ED0159E65FEABF7
Authority key identifier: 5D:27:2E:F1:FF:5F:99:60:3D:FC:2A:2B:9C:5A:B1:A8:BF:32:2E:73
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a373030303a3a2f33362d3438203d3e20313430343233.roa
Signing time: Sun 03 May 2026 02:16:42 +0000
ROA not before: Sun 03 May 2026 02:11:42 +0000
ROA not after: Sun 02 May 2027 02:16:42 +0000
asID: 140423
IP address blocks: 2406:20c0:7000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.crl
rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:40:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
a8:75:9c:c7:8d:ae:2a:ad:4a:14:d0:9e:d0:15:9e:65:fe:ab:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73
Validity
Not Before: May 3 02:11:42 2026 GMT
Not After : May 2 02:16:42 2027 GMT
Subject: CN=C7986D6C264FEB0D46368327DC791F8E1F07ABB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:18:29:46:7e:01:32:e1:6d:18:a4:4d:42:be:
08:90:61:63:3c:18:21:fc:f3:90:e3:0d:24:3d:de:
ee:48:c9:76:b0:ff:0e:7a:2b:e0:6b:cd:e0:b4:5c:
9e:3d:a1:2b:47:6e:64:37:96:f2:f2:4b:2f:69:fb:
8a:45:f2:9e:56:28:d0:31:80:d8:08:87:56:e8:85:
f6:93:5e:c6:25:82:de:b7:b9:18:9b:f3:72:23:b1:
f4:fc:64:e4:dc:6b:cf:86:b8:0b:63:c3:73:93:f0:
cc:77:7e:b3:90:99:1c:71:4b:b9:f6:6e:9b:2e:20:
8a:53:73:df:f1:38:d0:3e:9a:da:24:9e:74:48:43:
79:23:07:00:a5:1f:c2:f8:cd:e6:f2:68:a4:89:14:
cc:89:91:4d:54:56:ba:64:3a:5d:b2:52:9f:63:2b:
e4:a3:8f:b9:cf:82:ce:a2:6b:62:71:21:d3:0e:f8:
8e:31:d5:04:c9:91:ff:9c:40:0a:18:dc:70:7f:42:
0a:9f:46:65:14:98:d6:26:aa:86:26:a4:df:25:02:
6c:13:7b:0c:9a:3c:11:4e:b0:d9:10:be:6a:4d:64:
51:c3:c0:d0:1a:ba:f2:b4:24:72:78:44:94:ad:7f:
b1:c8:cf:c7:aa:39:a1:5e:fd:27:9c:a4:6d:fe:f5:
05:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:98:6D:6C:26:4F:EB:0D:46:36:83:27:DC:79:1F:8E:1F:07:AB:B3
X509v3 Authority Key Identifier:
keyid:5D:27:2E:F1:FF:5F:99:60:3D:FC:2A:2B:9C:5A:B1:A8:BF:32:2E:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D272EF1FF5F99603DFC2A2B9C5AB1A8BF322E73.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a373030303a3a2f33362d3438203d3e20313430343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:20c0:7000::/36
Signature Algorithm: sha256WithRSAEncryption
37:c1:90:e8:26:e0:bc:f7:32:02:e9:3e:2f:f7:ad:1b:5c:05:
fa:ab:9d:58:dc:cf:79:a6:79:94:0b:34:8a:af:14:5b:87:60:
a7:63:aa:55:f1:b3:d1:d7:da:56:20:84:3a:50:a4:dd:6b:df:
92:f0:0a:9f:89:41:a3:84:39:84:1a:a7:54:8b:1e:8c:b0:44:
60:ed:8e:85:7c:96:b7:36:18:91:da:3b:ec:2e:76:7e:de:62:
1e:09:92:ec:5c:c6:5e:71:a5:46:a6:2b:d3:b2:41:6f:27:dd:
54:c1:85:6a:68:4b:59:71:98:c6:b6:8d:a2:1e:1b:dd:8a:27:
01:8f:e5:0b:3b:c7:96:fa:3b:8e:13:41:c6:0d:50:b1:0a:ad:
ad:c4:c9:3e:1b:d6:bc:85:3e:ba:29:b2:e7:8e:d7:fc:cd:7c:
a8:e8:92:1b:22:87:c7:e1:5f:a3:28:28:94:b3:99:5d:d4:8d:
bf:c7:a9:e9:49:dc:d9:84:7d:fd:4e:e1:96:c1:ea:2f:66:fb:
65:0f:90:03:81:38:5c:4c:fe:ff:8e:69:d8:db:77:cb:f2:dc:
4e:cc:14:ac:26:c2:40:62:ec:91:e5:0c:31:df:ea:8f:d6:47:
a3:f6:18:b1:2b:fa:e9:06:03:24:34:43:95:37:75:68:6c:84:
34:58:5b:98
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIUAKh1nMeNriqtShTQntAVnmX+q/cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQyNzJFRjFGRjVGOTk2MDNERkMyQTJCOUM1QUIxQThC
RjMyMkU3MzAeFw0yNjA1MDMwMjExNDJaFw0yNzA1MDIwMjE2NDJaMDMxMTAvBgNV
BAMTKEM3OTg2RDZDMjY0RkVCMEQ0NjM2ODMyN0RDNzkxRjhFMUYwN0FCQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVGClGfgEy4W0YpE1CvgiQYWM8
GCH885DjDSQ93u5IyXaw/w56K+BrzeC0XJ49oStHbmQ3lvLySy9p+4pF8p5WKNAx
gNgIh1bohfaTXsYlgt63uRib83IjsfT8ZOTca8+GuAtjw3OT8Mx3frOQmRxxS7n2
bpsuIIpTc9/xONA+mtoknnRIQ3kjBwClH8L4zebyaKSJFMyJkU1UVrpkOl2yUp9j
K+Sjj7nPgs6ia2JxIdMO+I4x1QTJkf+cQAoY3HB/QgqfRmUUmNYmqoYmpN8lAmwT
ewyaPBFOsNkQvmpNZFHDwNAauvK0JHJ4RJStf7HIz8eqOaFe/SecpG3+9QUvAgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQUx5htbCZP6w1GNoMn3Hkfjh8Hq7MwHwYDVR0j
BBgwFoAUXScu8f9fmWA9/CornFqxqL8yLnMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTlhMDAzNjktNjg0MC00YTk1LTg5YjEtYTQ4NTE4Zjk4ZGM3LzAvNUQyNzJFRjFG
RjVGOTk2MDNERkMyQTJCOUM1QUIxQThCRjMyMkU3My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81RDI3MkVGMUZGNUY5OTYwM0RGQzJBMkI5QzVBQjFBOEJGMzIy
RTczLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04
OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhMzczMDMwMzAz
YTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMyMzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk
BiDAcDANBgkqhkiG9w0BAQsFAAOCAQEAN8GQ6CbgvPcyAuk+L/etG1wF+qudWNzP
eaZ5lAs0iq8UW4dgp2OqVfGz0dfaViCEOlCk3WvfkvAKn4lBo4Q5hBqnVIsejLBE
YO2OhXyWtzYYkdo77C52ft5iHgmS7FzGXnGlRqYr07JBbyfdVMGFamhLWXGYxraN
oh4b3YonAY/lCzvHlvo7jhNBxg1QsQqtrcTJPhvWvIU+uimy547X/M18qOiSGyKH
x+FfoygolLOZXdSNv8ep6Unc2YR9/U7hlsHqL2b7ZQ+QA4E4XEz+/45p2Nt3y/Lc
TswUrCbCQGLskeUMMd/qj9ZHo/YYsSv66QYDJDRDlTd1aGyENFhbmA==
-----END CERTIFICATE-----
Generated at Wed May 13 15:39:05 2026 by rpki-client