
$ rpki-client -vvf rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/323430353a623034303a3a2f33322d3332203d3e20313339393531.roa
File: 323430353a623034303a3a2f33322d3332203d3e20313339393531.roa (raw, json)
Hash identifier: PA4mCIJ4WVxoHasll6BuHuPox/sleuIONJ29Vq08rHw=
Subject key identifier: 83:06:70:3C:FE:C8:90:EE:3E:72:28:A8:F7:AB:70:2A:B8:CE:24:A5
Certificate issuer: /CN=C3DFB49CD70E52E4450CF2FE5E7212A855B99F25
Certificate serial: 088D21BD8FAD493A9D1581CE7D1F2F9143811542
Authority key identifier: C3:DF:B4:9C:D7:0E:52:E4:45:0C:F2:FE:5E:72:12:A8:55:B9:9F:25
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/323430353a623034303a3a2f33322d3332203d3e20313339393531.roa
Signing time: Sun 03 May 2026 02:20:35 +0000
ROA not before: Sun 03 May 2026 02:15:35 +0000
ROA not after: Sun 02 May 2027 02:20:35 +0000
asID: 139951
IP address blocks: 2405:b040::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.crl
rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:14:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:8d:21:bd:8f:ad:49:3a:9d:15:81:ce:7d:1f:2f:91:43:81:15:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3DFB49CD70E52E4450CF2FE5E7212A855B99F25
Validity
Not Before: May 3 02:15:35 2026 GMT
Not After : May 2 02:20:35 2027 GMT
Subject: CN=8306703CFEC890EE3E7228A8F7AB702AB8CE24A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:cd:3d:66:fd:cb:b7:eb:b3:7d:5a:fb:f4:16:
44:be:04:78:32:b5:5b:ad:dd:e5:87:06:80:78:16:
8f:a5:a3:c6:21:76:8f:ee:d9:a5:4e:2b:01:b5:ef:
7e:fd:bc:6b:a6:77:e5:aa:48:b8:b0:94:b4:e2:ce:
39:f4:05:ea:31:55:38:42:11:25:1e:d9:94:2c:64:
82:02:8a:89:e3:b6:3e:fb:a8:29:78:43:ab:8f:73:
c9:74:53:82:d7:87:8c:20:a3:66:47:0c:83:19:e8:
67:fc:f1:12:5b:b1:dd:89:24:ce:54:49:e0:18:e3:
63:e1:b8:88:82:24:9b:f1:0d:a0:d7:aa:4e:b7:b3:
e3:59:08:e4:58:ff:54:14:de:3d:6e:15:1c:ba:fe:
08:ac:65:f9:97:70:59:2d:9e:61:e3:e1:fe:ba:40:
56:2e:ed:73:a5:98:a5:19:de:d2:a1:bb:1c:80:c3:
65:e9:60:01:8e:3f:0e:26:c8:0b:e4:46:a0:22:23:
54:37:c4:f3:25:b4:ab:5f:4c:03:30:f2:98:a7:97:
45:1e:9d:ef:1b:99:c9:28:4a:f5:04:78:7d:ef:52:
c3:81:58:67:c2:03:bb:4d:6d:c6:89:7b:70:dd:75:
6d:eb:f5:67:ff:90:72:07:7f:f9:ac:fa:23:d8:a8:
ea:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:06:70:3C:FE:C8:90:EE:3E:72:28:A8:F7:AB:70:2A:B8:CE:24:A5
X509v3 Authority Key Identifier:
keyid:C3:DF:B4:9C:D7:0E:52:E4:45:0C:F2:FE:5E:72:12:A8:55:B9:9F:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3DFB49CD70E52E4450CF2FE5E7212A855B99F25.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/323430353a623034303a3a2f33322d3332203d3e20313339393531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:b040::/32
Signature Algorithm: sha256WithRSAEncryption
ba:ad:fa:69:42:68:f1:f0:e9:1f:bf:a0:ed:9d:f0:31:d9:33:
39:8d:89:c4:a4:32:d8:35:38:8c:27:a4:d3:3a:95:08:44:2b:
35:70:ee:44:05:d9:a1:cd:36:00:30:b8:de:25:93:15:8c:6b:
13:17:59:da:61:ab:ef:21:11:86:89:b7:d4:38:8d:02:ed:8e:
bb:32:43:07:3d:c3:e5:01:9e:0a:38:40:c6:f2:14:69:52:e8:
6c:69:cd:0d:af:40:df:a0:6f:01:d1:01:52:bf:4d:fa:1c:a5:
bd:90:6c:58:3c:0b:f2:0e:eb:ea:37:78:14:30:ef:e1:02:c2:
e7:a9:f0:4d:d7:b5:df:70:13:24:77:6a:c3:45:fd:9a:17:20:
cf:98:50:b0:f8:ff:83:1b:12:56:e4:15:0c:09:ef:01:7e:12:
1c:9b:0d:0e:0c:f4:18:43:8b:4a:c5:87:24:b0:03:c1:2a:61:
7c:a2:bf:8d:6f:af:51:c1:51:16:0d:66:c0:cd:6b:d7:50:4e:
cc:3f:95:5c:b4:93:4c:30:b5:a4:52:e1:18:22:de:50:c7:3b:
76:b2:2b:32:ce:ae:cd:ba:59:fb:2c:85:6f:12:59:a6:53:55:
7a:85:34:36:46:c0:ac:62:e3:db:8b:1b:a4:ad:97:14:e6:27:
f6:85:1c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:46:31 2026 by rpki-client