
$ rpki-client -vvf rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a623a3a2f34382d3438203d3e20313430343133.roa
File: 323430363a313363303a623a3a2f34382d3438203d3e20313430343133.roa (raw, json)
Hash identifier: skBT3RdnJ+CBUwElmxoesrXpDa/Pn3QhE5o4dAxByQo=
Subject key identifier: 18:44:5A:B3:3E:39:8B:0E:CB:AC:D3:5B:D7:AD:EA:4D:0B:92:61:A0
Certificate issuer: /CN=0DED71031394AA16715F3D03F26571528F1A6B78
Certificate serial: 7F86FC0EA316A365BE07BB6506D443384F804E6D
Authority key identifier: 0D:ED:71:03:13:94:AA:16:71:5F:3D:03:F2:65:71:52:8F:1A:6B:78
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a623a3a2f34382d3438203d3e20313430343133.roa
Signing time: Sun 03 May 2026 02:20:41 +0000
ROA not before: Sun 03 May 2026 02:15:41 +0000
ROA not after: Sun 02 May 2027 02:20:41 +0000
asID: 140413
IP address blocks: 2406:13c0:b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.crl
rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:86:fc:0e:a3:16:a3:65:be:07:bb:65:06:d4:43:38:4f:80:4e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DED71031394AA16715F3D03F26571528F1A6B78
Validity
Not Before: May 3 02:15:41 2026 GMT
Not After : May 2 02:20:41 2027 GMT
Subject: CN=18445AB33E398B0ECBACD35BD7ADEA4D0B9261A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6e:8b:c9:8c:7e:fb:4c:53:57:21:80:37:4d:
21:ea:be:b3:19:7d:0f:4b:b0:f5:49:16:ea:74:4c:
0c:61:f2:d8:8f:de:19:de:34:c8:25:c9:f5:3e:9b:
dd:b3:fc:c2:02:71:89:eb:d1:d4:68:10:1e:8a:5c:
66:46:e3:66:42:37:77:3d:8c:15:a8:79:f7:7c:b8:
07:32:10:33:03:d4:4d:fc:70:81:64:e9:0e:37:d6:
d5:10:22:da:00:1b:39:77:bd:04:ba:78:78:d1:06:
ab:04:68:5c:4a:03:c2:b3:d3:88:3a:5c:d9:2c:51:
7c:32:21:a0:9c:df:9c:a1:3f:9f:88:0c:32:6d:44:
94:ca:e5:2d:e6:5a:7a:63:e0:be:28:2f:49:30:a9:
2b:24:33:67:64:88:68:83:ce:1c:9c:70:7b:8d:fd:
ab:1e:83:1f:03:77:6f:26:1a:e1:70:c1:b8:96:65:
75:a0:07:72:fc:62:aa:0a:04:83:60:1a:d5:70:33:
6b:36:68:44:3a:64:be:ab:c1:2e:77:ec:bf:8e:42:
e1:50:f6:6c:e7:13:1b:55:31:9e:47:20:9f:e8:d5:
dc:5a:14:c1:12:2b:e2:b2:33:15:1a:0a:3e:21:a7:
50:62:02:12:4b:08:5b:70:9d:77:3d:f4:d6:24:2a:
60:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:44:5A:B3:3E:39:8B:0E:CB:AC:D3:5B:D7:AD:EA:4D:0B:92:61:A0
X509v3 Authority Key Identifier:
keyid:0D:ED:71:03:13:94:AA:16:71:5F:3D:03:F2:65:71:52:8F:1A:6B:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a623a3a2f34382d3438203d3e20313430343133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:13c0:b::/48
Signature Algorithm: sha256WithRSAEncryption
65:01:13:6d:79:84:29:a9:11:c0:d5:c6:4f:29:ad:8c:17:9b:
27:c1:55:41:16:60:a7:b8:b8:24:db:65:aa:75:dc:f4:a1:2a:
bf:86:8b:64:1f:a7:81:07:ed:84:d9:53:6b:3b:1a:48:17:7f:
e2:17:2c:48:52:77:d3:60:bb:3b:e6:5a:22:62:b6:aa:2c:59:
63:d0:75:05:37:d4:b9:f1:72:24:02:12:50:d4:75:35:0a:fa:
19:e0:78:27:26:e4:9e:3a:e1:b7:30:b2:c1:7d:76:7c:41:60:
d2:65:af:72:18:3b:7d:05:3b:19:5f:f9:31:3e:5b:f8:b2:14:
ba:db:23:bc:f3:93:20:f4:a7:cb:be:d5:5a:b6:6f:b9:58:92:
05:f6:36:96:5a:2d:a4:66:70:f4:d3:cd:3f:e3:9b:26:30:0e:
7f:4a:c0:b9:90:6f:be:42:6f:52:78:a7:0b:66:a9:7f:81:c1:
5e:39:bb:48:4f:fb:f8:5c:53:49:70:ea:56:0a:e9:df:2e:18:
b8:ae:6d:19:96:11:62:ce:54:5f:04:08:14:96:43:d3:bf:a7:
d7:a0:fb:e7:82:29:99:40:45:2a:b2:48:f7:4a:8e:d6:80:12:
6e:19:fd:f2:25:1b:85:35:a2:1f:5b:f0:41:12:6e:16:df:9f:
9b:9a:34:c2
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUf4b8DqMWo2W+B7tlBtRDOE+ATm0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMERFRDcxMDMxMzk0QUExNjcxNUYzRDAzRjI2NTcxNTI4
RjFBNkI3ODAeFw0yNjA1MDMwMjE1NDFaFw0yNzA1MDIwMjIwNDFaMDMxMTAvBgNV
BAMTKDE4NDQ1QUIzM0UzOThCMEVDQkFDRDM1QkQ3QURFQTREMEI5MjYxQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzbovJjH77TFNXIYA3TSHqvrMZ
fQ9LsPVJFup0TAxh8tiP3hneNMglyfU+m92z/MICcYnr0dRoEB6KXGZG42ZCN3c9
jBWoefd8uAcyEDMD1E38cIFk6Q431tUQItoAGzl3vQS6eHjRBqsEaFxKA8Kz04g6
XNksUXwyIaCc35yhP5+IDDJtRJTK5S3mWnpj4L4oL0kwqSskM2dkiGiDzhyccHuN
/asegx8Dd28mGuFwwbiWZXWgB3L8YqoKBINgGtVwM2s2aEQ6ZL6rwS537L+OQuFQ
9mznExtVMZ5HIJ/o1dxaFMESK+KyMxUaCj4hp1BiAhJLCFtwnXc99NYkKmC7AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUGERasz45iw7LrNNb163qTQuSYaAwHwYDVR0j
BBgwFoAUDe1xAxOUqhZxXz0D8mVxUo8aa3gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjZkN2VkZTEtM2ZkMC00NjI0LWJlZjgtMGU3M2U4NDk5NGJjLzAvMERFRDcxMDMx
Mzk0QUExNjcxNUYzRDAzRjI2NTcxNTI4RjFBNkI3OC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wREVENzEwMzEzOTRBQTE2NzE1RjNEMDNGMjY1NzE1MjhGMUE2
Qjc4LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzI2ZDdlZGUxLTNmZDAtNDYyNC1i
ZWY4LTBlNzNlODQ5OTRiYy8wLzMyMzQzMDM2M2EzMTMzNjMzMDNhNjIzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMxMzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBhPAAAsw
DQYJKoZIhvcNAQELBQADggEBAGUBE215hCmpEcDVxk8prYwXmyfBVUEWYKe4uCTb
Zap13PShKr+Gi2Qfp4EH7YTZU2s7GkgXf+IXLEhSd9NguzvmWiJitqosWWPQdQU3
1LnxciQCElDUdTUK+hngeCcm5J464bcwssF9dnxBYNJlr3IYO30FOxlf+TE+W/iy
FLrbI7zzkyD0p8u+1Vq2b7lYkgX2NpZaLaRmcPTTzT/jmyYwDn9KwLmQb75Cb1J4
pwtmqX+BwV45u0hP+/hcU0lw6lYK6d8uGLiubRmWEWLOVF8ECBSWQ9O/p9eg++eC
KZlARSqySPdKjtaAEm4Z/fIlG4U1oh9b8EESbhbfn5uaNMI=
-----END CERTIFICATE-----
Generated at Wed May 13 04:47:34 2026 by rpki-client