
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/323430333a353763303a3a2f33322d3438203d3e20313333383135.roa
File: 323430333a353763303a3a2f33322d3438203d3e20313333383135.roa (raw, json)
Hash identifier: 3BwTC01USPfsaxqOFoR8OqcTiLHcsXU9wo2BTdmt5ZU=
Subject key identifier: EB:FC:36:52:7F:BF:39:DA:9B:93:28:AD:8F:F1:0B:AF:5F:86:39:74
Certificate issuer: /CN=EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479
Certificate serial: 2614D43A1DAB953A74A498433517C3C5BC93D082
Authority key identifier: EB:0B:E2:F2:F4:9F:0E:2E:D0:DC:A4:50:CC:7A:70:E3:7E:6C:44:79
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/323430333a353763303a3a2f33322d3438203d3e20313333383135.roa
Signing time: Sun 03 May 2026 02:21:44 +0000
ROA not before: Sun 03 May 2026 02:16:44 +0000
ROA not after: Sun 02 May 2027 02:21:44 +0000
asID: 133815
IP address blocks: 2403:57c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.crl
rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:41:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:14:d4:3a:1d:ab:95:3a:74:a4:98:43:35:17:c3:c5:bc:93:d0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479
Validity
Not Before: May 3 02:16:44 2026 GMT
Not After : May 2 02:21:44 2027 GMT
Subject: CN=EBFC36527FBF39DA9B9328AD8FF10BAF5F863974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d4:d2:6c:23:4d:ed:9f:55:90:13:69:4b:27:
f0:f6:a1:9c:40:d7:36:6b:be:2d:ac:9b:cc:16:2d:
72:39:4e:be:0b:ec:eb:19:f9:52:5c:ad:7d:92:8f:
7b:68:92:4e:10:8f:19:a7:86:1f:7c:a9:65:1f:b2:
2b:c7:7d:1e:61:5b:a1:e8:98:f8:5e:e9:51:f3:dc:
64:37:2e:98:57:17:50:c0:63:b9:f9:0e:93:06:25:
6e:44:31:ab:a9:c7:b0:7d:3e:09:f0:0b:9f:9e:94:
ee:19:fd:a3:0f:38:59:92:d9:9e:89:dd:6d:e7:6d:
2e:75:76:97:ac:a8:f5:f3:29:8e:52:da:65:96:48:
78:30:7f:7d:bc:64:6e:87:9b:01:a9:9d:6d:84:72:
74:0e:ce:32:c6:4b:2a:f2:81:4a:ba:f5:67:c2:7b:
4c:02:84:cb:e1:23:70:1f:26:a0:29:db:b9:0f:90:
fe:57:d9:43:c7:c4:49:7f:c4:4f:c6:fb:03:f8:ca:
f8:02:4c:ca:a5:84:1b:2e:b1:ad:ce:ae:4b:79:ea:
1b:d8:b7:d4:40:7d:8d:9b:5a:ed:a1:71:cd:fa:87:
ef:aa:88:66:de:f4:2b:e8:2d:4b:ee:be:13:37:26:
25:b1:4e:b7:2a:40:11:58:5c:3a:7d:00:ba:16:43:
23:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FC:36:52:7F:BF:39:DA:9B:93:28:AD:8F:F1:0B:AF:5F:86:39:74
X509v3 Authority Key Identifier:
keyid:EB:0B:E2:F2:F4:9F:0E:2E:D0:DC:A4:50:CC:7A:70:E3:7E:6C:44:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EB0BE2F2F49F0E2ED0DCA450CC7A70E37E6C4479.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/323430333a353763303a3a2f33322d3438203d3e20313333383135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:57c0::/32
Signature Algorithm: sha256WithRSAEncryption
88:12:60:5b:c6:b4:12:fa:22:2c:4d:d2:db:a0:36:50:71:f1:
29:02:44:21:b5:07:44:2b:2f:b4:79:86:65:fb:b1:14:48:6c:
78:8e:26:ff:6f:0d:20:b4:c6:c7:05:00:b0:7c:c5:85:c6:38:
3d:7e:f8:a3:9c:66:93:3d:81:0f:5f:9d:57:28:67:1c:bb:a8:
96:a0:13:4d:75:82:85:85:b8:1c:97:c4:7e:b1:a2:1a:86:3d:
9a:c5:c2:95:b2:03:d6:55:0c:ad:14:5e:91:e2:41:39:45:ae:
59:9b:9d:ce:28:95:2a:ea:f9:c6:96:95:eb:a6:fc:1c:c8:74:
67:be:17:cd:15:e3:a3:1b:cd:81:fd:fc:db:27:09:eb:f3:1a:
ae:89:3b:21:1d:97:ee:ab:ba:5e:f2:c2:71:0e:86:78:f6:68:
ef:ff:00:41:2c:13:8c:a0:62:97:91:26:7d:e3:20:6a:78:10:
43:0a:ae:e8:ff:51:ec:5c:ce:f2:06:c1:37:52:d8:20:be:63:
d5:88:40:f1:af:cd:5e:91:1a:00:58:e0:c5:8d:53:88:15:e0:
e2:c6:5b:bb:0b:5e:69:b2:40:98:5f:17:e1:be:33:ca:7f:b6:
f6:36:74:a7:5c:f8:77:03:15:94:79:f9:7d:68:28:82:fc:a6:
06:0f:de:40
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUJhTUOh2rlTp0pJhDNRfDxbyT0IIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUIwQkUyRjJGNDlGMEUyRUQwRENBNDUwQ0M3QTcwRTM3
RTZDNDQ3OTAeFw0yNjA1MDMwMjE2NDRaFw0yNzA1MDIwMjIxNDRaMDMxMTAvBgNV
BAMTKEVCRkMzNjUyN0ZCRjM5REE5QjkzMjhBRDhGRjEwQkFGNUY4NjM5NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm1NJsI03tn1WQE2lLJ/D2oZxA
1zZrvi2sm8wWLXI5Tr4L7OsZ+VJcrX2Sj3tokk4Qjxmnhh98qWUfsivHfR5hW6Ho
mPhe6VHz3GQ3LphXF1DAY7n5DpMGJW5EMaupx7B9PgnwC5+elO4Z/aMPOFmS2Z6J
3W3nbS51dpesqPXzKY5S2mWWSHgwf328ZG6HmwGpnW2EcnQOzjLGSyrygUq69WfC
e0wChMvhI3AfJqAp27kPkP5X2UPHxEl/xE/G+wP4yvgCTMqlhBsusa3Orkt56hvY
t9RAfY2bWu2hcc36h++qiGbe9CvoLUvuvhM3JiWxTrcqQBFYXDp9ALoWQyMZAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQU6/w2Un+/Odqbkyitj/ELr1+GOXQwHwYDVR0j
BBgwFoAU6wvi8vSfDi7Q3KRQzHpw435sRHkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MmEzYWU0ODUtYTY1OC00YzVjLWFiZTItMWU3ZmQ4YjAzOGEwLzAvRUIwQkUyRjJG
NDlGMEUyRUQwRENBNDUwQ0M3QTcwRTM3RTZDNDQ3OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FQjBCRTJGMkY0OUYwRTJFRDBEQ0E0NTBDQzdBNzBFMzdFNkM0
NDc5LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJhM2FlNDg1LWE2NTgtNGM1Yy1h
YmUyLTFlN2ZkOGIwMzhhMC8wLzMyMzQzMDMzM2EzNTM3NjMzMDNhM2EyZjMzMzIy
ZDM0MzgyMDNkM2UyMDMxMzMzMzM4MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQDV8AwDQYJKoZI
hvcNAQELBQADggEBAIgSYFvGtBL6IixN0tugNlBx8SkCRCG1B0QrL7R5hmX7sRRI
bHiOJv9vDSC0xscFALB8xYXGOD1++KOcZpM9gQ9fnVcoZxy7qJagE011goWFuByX
xH6xohqGPZrFwpWyA9ZVDK0UXpHiQTlFrlmbnc4olSrq+caWleum/BzIdGe+F80V
46MbzYH9/NsnCevzGq6JOyEdl+6rul7ywnEOhnj2aO//AEEsE4ygYpeRJn3jIGp4
EEMKruj/UexczvIGwTdS2CC+Y9WIQPGvzV6RGgBY4MWNU4gV4OLGW7sLXmmyQJhf
F+G+M8p/tvY2dKdc+HcDFZR5+X1oKIL8pgYP3kA=
-----END CERTIFICATE-----
Generated at Wed May 13 14:47:07 2026 by rpki-client