
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/323430363a633634303a3a2f33322d3332203d3e20313431313337.roa
File: 323430363a633634303a3a2f33322d3332203d3e20313431313337.roa (raw, json)
Hash identifier: pE41vn8Dt1qZrL/6IKcEElho8GXY6UXGVa22Zlk5Klg=
Subject key identifier: 19:CC:E9:71:7B:92:0B:2A:26:25:6A:87:2F:9C:EF:8E:D7:B3:7D:4E
Certificate issuer: /CN=AC861103DDC024E3BEB681351D66B027A8BA785A
Certificate serial: 3E754288F92467A1AF4845C895702465527DCB4C
Authority key identifier: AC:86:11:03:DD:C0:24:E3:BE:B6:81:35:1D:66:B0:27:A8:BA:78:5A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC861103DDC024E3BEB681351D66B027A8BA785A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/323430363a633634303a3a2f33322d3332203d3e20313431313337.roa
Signing time: Sun 03 May 2026 02:20:18 +0000
ROA not before: Sun 03 May 2026 02:15:18 +0000
ROA not after: Sun 02 May 2027 02:20:18 +0000
asID: 141137
IP address blocks: 2406:c640::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.crl
rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC861103DDC024E3BEB681351D66B027A8BA785A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:75:42:88:f9:24:67:a1:af:48:45:c8:95:70:24:65:52:7d:cb:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC861103DDC024E3BEB681351D66B027A8BA785A
Validity
Not Before: May 3 02:15:18 2026 GMT
Not After : May 2 02:20:18 2027 GMT
Subject: CN=19CCE9717B920B2A26256A872F9CEF8ED7B37D4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:03:94:a5:8b:be:4a:50:2a:30:44:6c:0b:9a:
d1:de:97:8e:7a:9c:db:4f:ae:32:f2:7c:4b:38:22:
bc:1a:be:9c:4d:3a:00:0f:eb:37:00:ad:1b:e9:fa:
c7:8f:bc:81:51:2a:55:89:82:14:7c:e2:92:fc:06:
92:b1:d3:82:3c:99:ff:4b:3f:65:8b:7e:63:b4:f7:
3f:d8:8c:30:cc:af:35:5d:bb:a1:f2:c6:fc:84:f3:
68:07:e9:02:ba:ed:27:e4:43:85:a7:a0:03:96:1a:
10:fe:18:b4:a4:69:f7:1a:9c:aa:6f:3e:08:d1:cd:
95:9d:d2:40:0b:aa:2f:52:57:57:76:ab:0d:e4:f9:
d0:8f:8a:3c:5e:44:ca:39:46:6b:31:e7:d5:3a:f7:
69:31:18:fc:f6:af:fc:ce:ee:da:c7:a1:b1:bb:2f:
fe:2a:9f:98:16:4b:34:2b:f1:01:5c:d5:db:89:94:
6d:e5:53:dd:cf:97:ad:58:44:ad:1e:bd:c6:11:c8:
1d:a3:20:45:52:88:3e:7f:a3:ac:2d:f5:ae:7d:ad:
b6:bd:e7:e3:3e:f1:5e:fd:95:35:e6:5e:b4:8d:a2:
1c:97:d0:eb:ef:05:85:b3:0e:9f:55:82:97:92:bc:
50:00:52:c3:7f:b0:37:73:ad:db:1d:55:5e:6c:65:
e9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CC:E9:71:7B:92:0B:2A:26:25:6A:87:2F:9C:EF:8E:D7:B3:7D:4E
X509v3 Authority Key Identifier:
keyid:AC:86:11:03:DD:C0:24:E3:BE:B6:81:35:1D:66:B0:27:A8:BA:78:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/AC861103DDC024E3BEB681351D66B027A8BA785A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC861103DDC024E3BEB681351D66B027A8BA785A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2490345e-2d57-4349-b78f-c8b18a442445/0/323430363a633634303a3a2f33322d3332203d3e20313431313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:c640::/32
Signature Algorithm: sha256WithRSAEncryption
90:9a:86:a9:80:02:c2:3a:db:e9:32:b5:48:f7:42:f2:3f:e3:
04:32:41:f7:1a:e5:ea:c5:b0:82:e5:ea:34:3b:75:2c:6d:2e:
e4:d4:76:a7:7f:59:27:ad:54:d4:8b:8f:b1:e4:6a:10:a9:58:
a1:2d:65:ab:bc:02:25:9a:a3:35:39:ac:3e:18:14:62:2a:35:
dc:68:2c:0c:d2:55:3c:ef:e8:c0:85:67:95:23:be:13:e0:13:
af:16:46:c6:61:2c:f5:c7:ce:5d:c8:55:0e:c3:ef:59:40:78:
a0:24:45:61:ad:2b:da:d5:ed:48:f5:77:17:b5:f2:e4:a5:b1:
5e:73:81:75:1f:e0:c3:62:b1:da:c8:15:76:f9:38:05:3a:fa:
ce:78:83:fb:3f:7b:56:38:0a:10:6d:69:3e:74:37:6c:d0:24:
00:88:df:86:af:95:1c:fe:63:cd:6d:46:23:a8:ad:99:2a:98:
34:d0:93:4f:13:b1:8a:72:2b:5f:5d:cc:e7:e4:3e:ad:bc:6a:
d9:f5:d3:0f:1c:05:b0:06:b1:83:68:60:5f:30:db:fd:01:2f:
4e:13:48:25:2a:25:4c:cf:29:22:78:be:c8:16:b0:f1:c1:9e:
09:55:f5:9e:8d:af:14:eb:5a:af:fa:85:0d:6e:04:95:ba:17:
bf:88:8d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:02:39 2026 by rpki-client