
$ rpki-client -vvf rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a613a3a2f34382d3438203d3e20313430343133.roa
File: 323430363a313363303a613a3a2f34382d3438203d3e20313430343133.roa (raw, json)
Hash identifier: 7SOOVpEkvhM8jKS5ml9tavuy6fhlwX85TRg6uRnySPg=
Subject key identifier: B6:42:90:88:58:E9:AD:B5:58:9F:92:DD:C7:0E:01:C2:C1:5E:6A:FC
Certificate issuer: /CN=0DED71031394AA16715F3D03F26571528F1A6B78
Certificate serial: 03800C484BAFF1DDA5125B48076614BCAC5816E0
Authority key identifier: 0D:ED:71:03:13:94:AA:16:71:5F:3D:03:F2:65:71:52:8F:1A:6B:78
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a613a3a2f34382d3438203d3e20313430343133.roa
Signing time: Sun 03 May 2026 02:20:42 +0000
ROA not before: Sun 03 May 2026 02:15:42 +0000
ROA not after: Sun 02 May 2027 02:20:42 +0000
asID: 140413
IP address blocks: 2406:13c0:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.crl
rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:80:0c:48:4b:af:f1:dd:a5:12:5b:48:07:66:14:bc:ac:58:16:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DED71031394AA16715F3D03F26571528F1A6B78
Validity
Not Before: May 3 02:15:42 2026 GMT
Not After : May 2 02:20:42 2027 GMT
Subject: CN=B642908858E9ADB5589F92DDC70E01C2C15E6AFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:45:fd:d3:b1:58:b4:3c:3c:fe:70:96:53:28:
1b:62:c3:da:a2:bf:ae:70:d7:5b:d8:fe:e7:59:28:
d1:dc:39:24:87:34:38:89:50:7b:18:91:2c:e9:cc:
52:43:26:84:7d:12:e5:60:0a:b6:4e:54:eb:84:d6:
73:bd:5b:b8:9d:7f:25:21:8c:21:f4:71:95:df:4c:
40:84:24:08:d4:49:48:be:d8:16:24:4b:d7:e0:cb:
2d:c1:21:3d:d2:19:83:2b:b3:bb:e3:ad:e7:d2:16:
ec:85:77:6a:65:34:af:bb:9e:c8:28:89:98:35:44:
e9:95:84:9e:ac:85:b9:12:d9:5f:fd:bf:43:e7:40:
2e:7b:86:f2:73:11:e9:dd:1a:5a:fb:c2:b9:d4:61:
22:0c:4e:25:2a:da:df:72:b7:14:0c:54:ba:64:43:
89:38:dc:ef:c5:5c:f1:3d:3c:19:5b:9e:21:0f:5d:
d1:ff:cf:a0:9d:5d:05:53:7a:89:3c:42:be:6e:f1:
8a:24:bb:53:c8:68:0d:11:8a:b2:07:55:ee:ef:6c:
07:85:80:65:ab:a5:95:fb:7f:bd:04:c7:52:a7:84:
de:84:ad:54:23:89:be:cb:97:f5:f2:06:40:3f:b0:
cf:ac:19:fc:aa:65:a2:5e:fa:12:4b:2c:a7:9a:4b:
fc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:42:90:88:58:E9:AD:B5:58:9F:92:DD:C7:0E:01:C2:C1:5E:6A:FC
X509v3 Authority Key Identifier:
keyid:0D:ED:71:03:13:94:AA:16:71:5F:3D:03:F2:65:71:52:8F:1A:6B:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a613a3a2f34382d3438203d3e20313430343133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:13c0:a::/48
Signature Algorithm: sha256WithRSAEncryption
59:bd:9f:dc:9a:15:ce:fb:e8:b1:ee:80:84:bf:d7:1b:b1:ff:
e3:73:84:ca:7d:a6:fa:71:9d:ca:bf:69:5c:df:1e:a1:f8:9f:
01:14:ef:73:43:c3:a3:31:6e:9c:76:fd:64:64:ca:c1:e6:ae:
58:82:44:af:4e:94:80:37:f4:50:c1:af:af:12:66:52:ba:ca:
5f:f6:22:32:00:ac:fa:3d:08:3b:19:89:58:0b:19:d4:4e:6d:
db:08:2a:9a:95:03:35:04:a0:0c:41:e9:7e:23:af:b5:13:62:
82:fe:3e:38:55:a3:78:7e:9c:5b:d4:db:dd:77:58:de:4a:4e:
ca:81:3a:48:f6:ea:1c:3f:be:26:da:31:06:1f:fb:4f:de:ec:
57:d6:42:15:aa:c5:79:92:94:f6:37:15:20:ae:9a:83:cd:f4:
ff:a4:97:4f:7c:e1:d2:e3:60:2d:64:7d:eb:09:a9:7e:5d:b8:
5c:9e:05:8e:05:b7:73:65:b7:65:3c:eb:57:97:69:99:80:7f:
b9:f1:28:4f:1f:03:38:32:94:aa:f3:d7:10:12:29:d2:ab:5d:
4d:da:62:4b:3c:71:d3:4e:aa:bc:85:2f:85:e5:51:c8:a1:5d:
e7:83:d6:95:63:94:50:39:d1:56:78:ef:c4:d9:a7:f4:f5:54:
df:0c:98:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:11:42 2026 by rpki-client