
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/323430363a326330303a3a2f33322d3332203d3e203138333933.roa
File: 323430363a326330303a3a2f33322d3332203d3e203138333933.roa (raw, json)
Hash identifier: +6LMxNljjmSqQzlNsxe2a6hd3poirAp065yPauK7pog=
Subject key identifier: AC:5F:04:A8:E3:09:B5:9C:D6:F3:1D:87:0D:19:69:D4:42:B8:DD:78
Certificate issuer: /CN=866AFE6346388B98BA78E4A5133074656D9B7AD1
Certificate serial: 19E00DABDC3298877BAA06AD3F16CC0DDF31F63A
Authority key identifier: 86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/323430363a326330303a3a2f33322d3332203d3e203138333933.roa
Signing time: Sun 03 May 2026 02:18:09 +0000
ROA not before: Sun 03 May 2026 02:13:09 +0000
ROA not after: Sun 02 May 2027 02:18:09 +0000
asID: 18393
IP address blocks: 2406:2c00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl
rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:54:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:e0:0d:ab:dc:32:98:87:7b:aa:06:ad:3f:16:cc:0d:df:31:f6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866AFE6346388B98BA78E4A5133074656D9B7AD1
Validity
Not Before: May 3 02:13:09 2026 GMT
Not After : May 2 02:18:09 2027 GMT
Subject: CN=AC5F04A8E309B59CD6F31D870D1969D442B8DD78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:57:03:24:34:a5:84:4a:6c:c8:ec:51:de:ed:
1b:98:ff:54:4a:2a:e0:91:92:9c:0b:4c:bf:1f:7a:
18:4f:23:f3:50:8f:96:ad:59:7e:10:a1:98:1a:c9:
4c:79:90:77:6c:55:16:27:24:3e:e0:be:d2:91:4e:
6b:32:17:d4:ae:d6:5d:12:5d:01:0d:40:4c:e1:c6:
cb:11:a1:93:67:b9:ba:b5:3e:60:f4:24:6b:15:ea:
f4:75:e2:21:82:4a:8e:e8:d2:a4:6a:64:c1:09:21:
3e:fa:3d:71:db:b5:86:c0:63:30:2b:a7:49:d2:8a:
fd:af:b0:f3:5a:a4:41:59:6c:4c:3c:36:c0:af:0e:
69:99:5c:3e:80:96:c5:84:19:91:4a:b1:1c:c5:00:
7c:5a:a0:35:4c:b7:f9:01:e0:af:20:fd:e4:57:d9:
5a:2d:e0:42:5a:cb:93:32:2a:5b:97:48:30:da:30:
b4:16:f3:2f:16:cf:79:6b:32:ae:07:90:5c:5e:cd:
2a:13:b1:f3:90:ed:2c:55:df:0b:cd:6f:92:8d:66:
35:99:af:12:f4:b6:46:63:c7:0d:6e:19:76:3a:4a:
da:95:65:f5:8c:d6:23:e8:a5:6f:5d:81:9e:70:40:
07:df:44:77:8b:1c:d4:9b:78:09:58:83:7d:0d:8e:
fe:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5F:04:A8:E3:09:B5:9C:D6:F3:1D:87:0D:19:69:D4:42:B8:DD:78
X509v3 Authority Key Identifier:
keyid:86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/323430363a326330303a3a2f33322d3332203d3e203138333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:2c00::/32
Signature Algorithm: sha256WithRSAEncryption
27:ea:80:42:6f:c4:df:1c:df:4d:10:77:bd:8f:87:ce:92:ea:
2c:67:19:2d:68:5c:53:0c:a7:30:d0:ed:f7:72:51:8e:c3:26:
e3:5b:26:0c:f2:f7:93:0f:80:ad:9c:78:2e:92:fb:fe:77:47:
09:f1:7d:fa:61:5a:c8:78:3f:d0:34:d8:34:b8:54:bb:bf:37:
04:90:56:31:ad:72:3e:c2:7e:b2:a3:8a:f4:8d:b5:5c:bb:99:
63:a7:bc:f3:e8:80:bb:b0:70:b1:6f:27:dd:ba:bf:75:44:67:
b9:e8:52:48:ef:72:d3:5e:0f:2d:b5:61:5d:50:25:ef:e9:44:
a8:ed:4b:d9:cf:aa:99:91:04:e8:3a:10:dd:94:89:19:cc:f1:
95:56:fa:23:09:d0:6e:41:4a:dc:67:20:a0:d4:6e:62:46:1d:
eb:b4:8e:80:64:68:4b:5d:fc:ec:8e:bd:0f:45:6d:ff:dc:f6:
4d:f6:9c:7b:23:1d:7a:51:46:70:b0:f6:67:56:ac:cd:c0:e8:
d7:5b:9a:94:ec:c2:92:c0:59:b3:55:24:d2:71:ee:e8:50:5c:
fc:60:dd:63:64:62:8b:eb:16:ed:d5:a5:26:a4:ea:04:62:dd:
3a:e4:89:d2:14:9d:4c:75:ff:86:e6:0f:61:66:db:3a:e6:ab:
41:d9:ab:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:09:08 2026 by rpki-client