
$ rpki-client -vvf rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a653a3a2f34382d3438203d3e20313430343133.roa
File: 323430363a313363303a653a3a2f34382d3438203d3e20313430343133.roa (raw, json)
Hash identifier: 6P/gtrzHwkH3kENiz3/is/cjoDAJlGYuJTJreGDj0WI=
Subject key identifier: 58:1C:9B:50:EA:DF:67:24:2A:4B:98:D4:20:F6:AD:E5:03:04:FC:1B
Certificate issuer: /CN=0DED71031394AA16715F3D03F26571528F1A6B78
Certificate serial: 1B6C10F854844A7FB035258189891E7D14F60B30
Authority key identifier: 0D:ED:71:03:13:94:AA:16:71:5F:3D:03:F2:65:71:52:8F:1A:6B:78
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a653a3a2f34382d3438203d3e20313430343133.roa
Signing time: Sun 03 May 2026 02:20:49 +0000
ROA not before: Sun 03 May 2026 02:15:49 +0000
ROA not after: Sun 02 May 2027 02:20:49 +0000
asID: 140413
IP address blocks: 2406:13c0:e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.crl
rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:6c:10:f8:54:84:4a:7f:b0:35:25:81:89:89:1e:7d:14:f6:0b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DED71031394AA16715F3D03F26571528F1A6B78
Validity
Not Before: May 3 02:15:49 2026 GMT
Not After : May 2 02:20:49 2027 GMT
Subject: CN=581C9B50EADF67242A4B98D420F6ADE50304FC1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c3:81:de:65:e9:7f:df:96:b4:15:7a:5a:58:
8a:55:41:1b:89:42:05:4b:9c:68:d2:67:a6:c2:56:
f9:d4:53:bd:f0:07:c2:ac:e2:cb:d5:3d:8b:88:d4:
c4:3f:8b:a2:0b:89:61:75:df:88:1d:4a:41:e7:68:
2d:91:7f:ea:e3:3c:ad:43:f9:50:fa:8a:fa:17:38:
7f:25:ca:bd:7d:42:c4:fd:6e:5b:4e:e7:03:57:09:
82:37:75:db:0a:c9:c6:78:06:be:ed:4b:07:3c:bc:
f0:92:a1:23:4b:86:5c:65:0f:51:9a:69:e0:27:6e:
3f:18:0e:0e:f5:9f:d6:8a:39:37:86:f2:49:d9:74:
33:f2:c6:e9:b9:bf:fc:72:f3:60:c7:23:67:53:36:
3a:cc:fb:50:9d:81:2b:d5:7f:9c:57:b8:f9:a6:d5:
7c:fd:f2:a0:43:ab:8e:16:35:6b:15:ef:ea:3d:b7:
d2:86:38:a8:d2:72:b3:d3:2b:eb:5f:40:27:39:80:
3a:c7:12:94:0a:05:6e:dd:fc:a3:81:a1:e3:21:5e:
71:4e:b6:dc:81:ae:49:8c:1c:ea:e3:da:1a:0a:c4:
cd:e0:a4:bb:3a:1a:17:06:97:2d:fc:a4:e0:d7:94:
16:08:83:4c:c1:e3:fa:75:5f:d9:e2:ba:8f:a1:de:
b6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1C:9B:50:EA:DF:67:24:2A:4B:98:D4:20:F6:AD:E5:03:04:FC:1B
X509v3 Authority Key Identifier:
keyid:0D:ED:71:03:13:94:AA:16:71:5F:3D:03:F2:65:71:52:8F:1A:6B:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/0DED71031394AA16715F3D03F26571528F1A6B78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0DED71031394AA16715F3D03F26571528F1A6B78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/26d7ede1-3fd0-4624-bef8-0e73e84994bc/0/323430363a313363303a653a3a2f34382d3438203d3e20313430343133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:13c0:e::/48
Signature Algorithm: sha256WithRSAEncryption
87:e2:42:9d:12:23:38:39:3f:30:22:a5:e9:ce:53:aa:04:ec:
fb:f6:c0:79:12:b8:d7:e6:f6:b2:97:b7:dd:9f:ac:a5:4c:04:
64:66:95:e5:e4:78:f2:1b:cd:bd:25:ec:a0:e5:a4:6c:17:46:
73:12:29:89:f9:5a:eb:ee:e1:ef:b0:8f:b7:19:f1:2b:92:30:
d3:fe:44:47:02:bc:1d:4e:fc:4a:96:8e:dd:6c:a0:48:88:a9:
5f:ec:f0:0d:78:b5:54:ac:b0:61:0d:c9:2b:16:00:fe:03:53:
61:87:80:44:22:31:1a:75:c6:79:06:7c:02:b7:e1:8d:02:82:
7f:6d:46:95:d8:79:fd:a8:81:f6:63:2a:f3:cd:be:5f:70:6a:
35:21:0d:26:5c:f8:87:3d:9d:f7:7f:5b:14:fb:ff:6a:68:97:
5c:75:3c:b1:f0:42:90:bc:fd:57:67:86:18:f1:b7:00:52:34:
5b:39:35:57:e2:d1:64:ce:ef:bb:12:a2:c8:ff:8f:5d:e9:e2:
13:ae:8e:31:63:18:79:a7:98:96:65:b9:93:e4:e1:c5:e7:de:
c5:77:ed:0f:9a:cf:de:27:75:64:b4:ef:fc:0b:2b:ea:bf:57:
f3:fd:b2:10:c8:aa:48:9a:6a:e1:11:72:e8:73:8b:ad:7d:e8:
7b:e3:f5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:47:29 2026 by rpki-client