
$ rpki-client -vvf rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a363a3a2f34382d3438203d3e20313430343133.roa
File: 323430363a313363303a363a3a2f34382d3438203d3e20313430343133.roa (raw, json)
Hash identifier: GK7JrFFTMtRaVSiXERiAUwR8S0jPiNQeuHLwltAd/4o=
Subject key identifier: DE:E9:F0:81:29:CA:4F:F3:34:D7:21:FE:C6:CA:58:E1:D9:7C:B5:AE
Certificate issuer: /CN=0DED71031394AA16715F3D03F26571528F1A6B78
Certificate serial: 7FCB9FE3BC70999BFEABA78BAB492E38080C43B3
Authority key identifier: 0D:ED:71:03:13:94:AA:16:71:5F:3D:03:F2:65:71:52:8F:1A:6B:78
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a363a3a2f34382d3438203d3e20313430343133.roa
Signing time: Sun 03 May 2026 02:20:45 +0000
ROA not before: Sun 03 May 2026 02:15:45 +0000
ROA not after: Sun 02 May 2027 02:20:45 +0000
asID: 140413
IP address blocks: 2406:13c0:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.crl
rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:cb:9f:e3:bc:70:99:9b:fe:ab:a7:8b:ab:49:2e:38:08:0c:43:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DED71031394AA16715F3D03F26571528F1A6B78
Validity
Not Before: May 3 02:15:45 2026 GMT
Not After : May 2 02:20:45 2027 GMT
Subject: CN=DEE9F08129CA4FF334D721FEC6CA58E1D97CB5AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:64:70:c9:3b:e3:14:ae:b6:8b:77:1c:05:c3:
e3:cd:0f:6a:14:a8:56:c2:4d:a4:cf:f6:8b:40:db:
73:f8:3e:e6:64:e1:04:ae:f2:58:3b:5f:70:4d:23:
02:aa:f2:2b:9c:ad:d7:08:82:79:68:89:09:34:41:
94:dc:6c:e4:80:3a:9f:b2:8b:57:9d:e5:a4:24:61:
55:6b:53:ef:fb:9c:8c:0b:09:9a:ec:70:6f:1c:57:
8f:2d:56:10:57:fa:da:97:f9:52:ad:67:c5:80:e1:
80:49:e0:45:8f:8c:e6:c8:2a:57:55:7b:88:c4:4b:
5f:6c:85:af:15:44:f3:88:ee:91:2c:55:b0:35:3c:
b7:e5:61:c7:3b:ce:9a:6c:37:93:f3:d4:59:38:a7:
ff:9d:db:4e:b2:76:fc:6f:e5:39:81:c5:23:1f:c0:
b0:5a:81:74:90:b0:b5:51:71:09:46:82:2c:b5:2b:
5f:b8:2c:07:04:d1:47:35:26:90:27:94:1b:74:b2:
49:23:07:c2:46:2c:c9:a3:b3:1f:ab:d7:34:07:50:
9f:02:ed:05:df:f0:c9:18:98:79:8d:8e:bc:05:0d:
6e:7e:72:be:df:25:64:a4:c2:1f:0c:32:5f:20:9c:
cf:4f:8a:6a:53:87:a1:60:c2:6a:d1:01:2c:4f:6e:
13:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E9:F0:81:29:CA:4F:F3:34:D7:21:FE:C6:CA:58:E1:D9:7C:B5:AE
X509v3 Authority Key Identifier:
keyid:0D:ED:71:03:13:94:AA:16:71:5F:3D:03:F2:65:71:52:8F:1A:6B:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a363a3a2f34382d3438203d3e20313430343133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:13c0:6::/48
Signature Algorithm: sha256WithRSAEncryption
06:51:f2:34:bf:f5:32:4f:b8:4e:24:54:f6:70:27:14:b3:ea:
fb:e5:d0:84:f6:7d:77:59:85:b0:75:b9:db:b0:c0:0d:fb:ee:
93:10:c4:d6:02:71:a9:ea:4b:f7:3c:92:e8:e8:05:09:5e:a2:
86:54:53:64:79:4c:bc:78:d5:aa:c9:98:77:6d:f1:74:fe:17:
ed:ee:3e:b1:8f:88:43:2d:fa:14:73:2f:48:16:a9:9c:9d:ec:
cf:fe:c9:d6:9f:8d:ea:38:1c:36:ef:70:00:a9:c5:2f:34:7f:
e8:82:b0:89:7b:c3:98:5a:0d:78:a4:3d:8f:0e:d9:26:0d:7a:
b3:d6:71:fe:45:0e:fc:c9:c9:d6:a7:36:e2:0c:c0:ce:36:7d:
9f:5f:1f:12:a3:63:30:c5:4a:b4:a6:e2:db:8b:86:7b:c8:45:
bf:8d:fe:9b:b7:00:b9:b2:7f:c4:b4:26:1f:f1:af:9b:f0:ac:
66:10:4c:0a:d5:98:7c:29:2a:3e:14:6d:14:3c:8c:a7:d1:93:
d8:ac:6e:37:d8:d4:38:f1:48:ec:55:0c:a1:e5:13:d4:b1:99:
d3:fe:42:5e:11:70:e8:95:fb:ae:97:b9:3e:b6:d8:c7:0b:0e:
fd:16:e2:35:98:16:62:c5:f7:d0:71:31:03:02:e4:6c:53:44:
3b:d7:79:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:47:47 2026 by rpki-client