
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/323430313a653438303a3a2f33322d3438203d3e203233393439.roa
File: 323430313a653438303a3a2f33322d3438203d3e203233393439.roa (raw, json)
Hash identifier: Tj1GCuxVuIwoJv3jzrY6G2gcMOfZzcLibiYAvCSsF9Y=
Subject key identifier: 5E:98:5C:64:10:4D:EE:14:40:D4:F2:E4:7C:74:31:8E:0A:AF:C5:B2
Certificate issuer: /CN=05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC
Certificate serial: 60796138718719E7552960B3DBF33DDDBEDB581C
Authority key identifier: 05:37:9F:0D:08:D0:5D:F8:DE:41:D2:AC:19:AD:0B:EF:87:3C:B1:DC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/323430313a653438303a3a2f33322d3438203d3e203233393439.roa
Signing time: Sun 03 May 2026 02:22:00 +0000
ROA not before: Sun 03 May 2026 02:17:00 +0000
ROA not after: Sun 02 May 2027 02:22:00 +0000
asID: 23949
IP address blocks: 2401:e480::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.crl
rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:79:61:38:71:87:19:e7:55:29:60:b3:db:f3:3d:dd:be:db:58:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC
Validity
Not Before: May 3 02:17:00 2026 GMT
Not After : May 2 02:22:00 2027 GMT
Subject: CN=5E985C64104DEE1440D4F2E47C74318E0AAFC5B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:38:96:59:5a:4f:aa:6c:3c:b4:fe:9c:93:38:
71:5c:50:09:22:5c:83:22:c5:eb:42:22:6d:d8:ab:
0c:c2:af:de:80:4f:07:56:de:52:14:37:5a:7f:78:
a7:19:7f:ac:7d:7e:d3:4b:3e:5c:3b:30:1b:e8:74:
2e:bb:d9:06:ca:72:da:b8:ec:32:63:fc:2c:bf:1a:
06:3b:a0:0f:e2:88:51:1d:98:60:40:a2:f5:5a:a8:
c1:75:0e:65:ab:5f:e9:ad:b1:a4:f9:ed:24:73:02:
ed:45:79:d0:14:ed:41:37:2d:34:26:0a:ef:39:e2:
73:41:1e:a9:35:7d:37:88:bd:81:e7:f8:5d:e2:11:
37:5e:01:dc:92:7e:25:cb:54:d3:6a:87:3c:cc:cf:
ba:56:3e:c6:15:ed:38:65:ac:23:31:bb:74:03:28:
d7:de:06:6c:ac:34:c9:55:78:ec:67:97:a1:7f:17:
ae:b1:94:1b:5f:db:33:81:f4:5b:69:a2:0e:da:64:
31:a6:64:62:b4:1a:b6:96:43:a2:76:5f:57:5d:8b:
d3:f0:63:3b:52:44:96:7f:8b:7d:6a:b7:6d:05:a5:
c9:80:b3:dc:d0:3e:7c:66:5b:e4:a2:3a:b5:60:a9:
fa:d3:1b:5f:49:c8:18:c6:77:93:79:4b:ed:d2:5a:
c3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:98:5C:64:10:4D:EE:14:40:D4:F2:E4:7C:74:31:8E:0A:AF:C5:B2
X509v3 Authority Key Identifier:
keyid:05:37:9F:0D:08:D0:5D:F8:DE:41:D2:AC:19:AD:0B:EF:87:3C:B1:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/05379F0D08D05DF8DE41D2AC19AD0BEF873CB1DC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/323430313a653438303a3a2f33322d3438203d3e203233393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:e480::/32
Signature Algorithm: sha256WithRSAEncryption
2f:96:be:98:ff:c5:8f:fb:71:78:b8:11:d9:65:cd:d7:e2:8c:
7d:ae:0a:88:1b:22:e5:d9:5a:4c:cb:6c:b2:38:bf:74:50:a9:
00:ef:d2:19:2c:9b:4e:99:96:b8:ca:8d:67:65:b0:1d:00:92:
68:2a:c0:90:5b:a9:91:4c:5a:35:0e:25:7b:0b:14:d6:b1:84:
8b:99:7d:b0:67:f6:70:2f:04:8e:50:84:92:49:6b:23:f2:67:
c1:c6:82:bc:44:36:8e:50:f5:f9:73:e7:e8:a0:a9:7d:51:2d:
5f:54:6d:cc:f0:46:b8:33:2f:ac:72:c8:27:11:46:3f:8c:38:
46:54:d0:1d:25:50:7f:bc:07:15:1e:5d:c7:91:11:9e:76:82:
d7:3e:83:6d:30:04:eb:e7:5d:a9:3b:d5:5f:b7:58:e1:d4:38:
9b:8c:1d:14:40:f3:21:e7:b4:aa:3a:2d:51:e2:7d:d5:f8:93:
7c:0a:7b:53:99:5e:f9:73:a7:e0:6d:02:9c:d8:82:20:89:02:
a5:31:3f:f6:07:5c:11:be:24:34:7a:fb:c5:fe:5f:c1:74:44:
0f:64:55:6e:e0:95:fd:d1:6c:15:f8:2b:4c:fd:7e:44:de:97:
04:69:3a:09:a6:8a:74:08:50:84:31:2a:48:c0:e5:a5:58:b1:
b8:f6:da:83
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIUYHlhOHGHGedVKWCz2/M93b7bWBwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDUzNzlGMEQwOEQwNURGOERFNDFEMkFDMTlBRDBCRUY4
NzNDQjFEQzAeFw0yNjA1MDMwMjE3MDBaFw0yNzA1MDIwMjIyMDBaMDMxMTAvBgNV
BAMTKDVFOTg1QzY0MTA0REVFMTQ0MEQ0RjJFNDdDNzQzMThFMEFBRkM1QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUOJZZWk+qbDy0/pyTOHFcUAki
XIMixetCIm3YqwzCr96ATwdW3lIUN1p/eKcZf6x9ftNLPlw7MBvodC672QbKctq4
7DJj/Cy/GgY7oA/iiFEdmGBAovVaqMF1DmWrX+mtsaT57SRzAu1FedAU7UE3LTQm
Cu854nNBHqk1fTeIvYHn+F3iETdeAdySfiXLVNNqhzzMz7pWPsYV7ThlrCMxu3QD
KNfeBmysNMlVeOxnl6F/F66xlBtf2zOB9Ftpog7aZDGmZGK0GraWQ6J2X1ddi9Pw
YztSRJZ/i31qt20FpcmAs9zQPnxmW+SiOrVgqfrTG19JyBjGd5N5S+3SWsMFAgMB
AAGjggIxMIICLTAdBgNVHQ4EFgQUXphcZBBN7hRA1PLkfHQxjgqvxbIwHwYDVR0j
BBgwFoAUBTefDQjQXfjeQdKsGa0L74c8sdwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MmI2OTgyMmMtMmUyMi00OGJlLThiYTItNjM0ZjU4MmMyZWNiLzAvMDUzNzlGMEQw
OEQwNURGOERFNDFEMkFDMTlBRDBCRUY4NzNDQjFEQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wNTM3OUYwRDA4RDA1REY4REU0MUQyQUMxOUFEMEJFRjg3M0NC
MURDLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJiNjk4MjJjLTJlMjItNDhiZS04
YmEyLTYzNGY1ODJjMmVjYi8wLzMyMzQzMDMxM2E2NTM0MzgzMDNhM2EyZjMzMzIy
ZDM0MzgyMDNkM2UyMDMyMzMzOTM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAeSAMA0GCSqGSIb3
DQEBCwUAA4IBAQAvlr6Y/8WP+3F4uBHZZc3X4ox9rgqIGyLl2VpMy2yyOL90UKkA
79IZLJtOmZa4yo1nZbAdAJJoKsCQW6mRTFo1DiV7CxTWsYSLmX2wZ/ZwLwSOUISS
SWsj8mfBxoK8RDaOUPX5c+fooKl9US1fVG3M8Ea4My+scsgnEUY/jDhGVNAdJVB/
vAcVHl3HkRGedoLXPoNtMATr512pO9Vft1jh1DibjB0UQPMh57SqOi1R4n3V+JN8
CntTmV75c6fgbQKc2IIgiQKlMT/2B1wRviQ0evvF/l/BdEQPZFVu4JX90WwV+CtM
/X5E3pcEaToJpop0CFCEMSpIwOWlWLG49tqD
-----END CERTIFICATE-----
Generated at Wed May 13 07:59:43 2026 by rpki-client