
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/323430323a653130303a33383a3a2f34382d3438203d3e203538343835.roa
File: 323430323a653130303a33383a3a2f34382d3438203d3e203538343835.roa (raw, json)
Hash identifier: 8VioNKBine3nnTO3lIrgZ5P0mwfqaztVY9eBTGZLZpY=
Subject key identifier: 6F:2F:AD:32:F5:FB:B3:8A:5D:D6:A4:64:98:CB:17:5F:0B:81:2E:C2
Certificate issuer: /CN=66F96AEBF9C8A21337CB4A7815369BEC12FF9A04
Certificate serial: 49D6C187E6C0CE2FC79212C14425DD2DEB79C2BF
Authority key identifier: 66:F9:6A:EB:F9:C8:A2:13:37:CB:4A:78:15:36:9B:EC:12:FF:9A:04
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/323430323a653130303a33383a3a2f34382d3438203d3e203538343835.roa
Signing time: Sun 03 May 2026 02:23:16 +0000
ROA not before: Sun 03 May 2026 02:18:16 +0000
ROA not after: Sun 02 May 2027 02:23:16 +0000
asID: 58485
IP address blocks: 2402:e100:38::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.crl
rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:d6:c1:87:e6:c0:ce:2f:c7:92:12:c1:44:25:dd:2d:eb:79:c2:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66F96AEBF9C8A21337CB4A7815369BEC12FF9A04
Validity
Not Before: May 3 02:18:16 2026 GMT
Not After : May 2 02:23:16 2027 GMT
Subject: CN=6F2FAD32F5FBB38A5DD6A46498CB175F0B812EC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1b:c7:8d:6a:30:26:b8:4f:fe:ee:de:48:1d:
4a:0e:e9:51:2e:aa:f3:0f:f7:74:a3:61:a7:2f:99:
f3:ff:6e:33:94:87:e0:01:7f:f1:9a:5b:20:d1:94:
56:b5:8a:ce:b4:28:45:a9:6e:b5:45:90:23:29:90:
3c:c5:bd:1a:77:f5:6b:22:43:3e:99:c6:e4:9b:aa:
db:3a:7a:dd:3f:d1:da:ff:d0:65:b0:d4:8b:7b:c0:
b2:a9:38:20:d1:6b:22:f3:e3:c7:98:62:97:39:ae:
2d:30:60:fd:0c:72:44:ab:01:0d:f2:81:53:73:9a:
23:b7:b1:4e:aa:95:1e:5f:0a:9b:f3:14:c6:fb:65:
12:1e:98:6a:e1:45:b8:37:d4:fb:6c:43:54:0b:11:
84:76:bd:e9:cb:93:64:0a:eb:1b:f7:31:a6:f3:33:
64:78:c7:32:92:09:b6:29:aa:a4:aa:c1:b1:88:c4:
79:82:9c:8e:e4:45:df:f8:d5:94:34:24:f6:0b:cd:
e5:4a:bd:ba:fb:c3:fe:d1:a1:d1:51:6f:5e:ec:aa:
6c:26:ae:93:9a:2d:d6:ba:77:69:4d:64:9a:42:ec:
76:c8:59:1a:3f:9a:00:33:98:64:4e:95:40:21:4a:
79:08:65:ca:15:92:ad:4c:f8:25:24:bc:6c:b7:73:
30:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2F:AD:32:F5:FB:B3:8A:5D:D6:A4:64:98:CB:17:5F:0B:81:2E:C2
X509v3 Authority Key Identifier:
keyid:66:F9:6A:EB:F9:C8:A2:13:37:CB:4A:78:15:36:9B:EC:12:FF:9A:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/323430323a653130303a33383a3a2f34382d3438203d3e203538343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:e100:38::/48
Signature Algorithm: sha256WithRSAEncryption
3c:19:e3:4d:7b:34:7f:a5:df:e5:eb:8a:13:4b:ce:68:5a:29:
40:ba:1c:03:ab:3f:f9:2c:a5:24:04:cd:63:7a:86:c5:35:a2:
64:75:96:a9:3a:05:b5:bc:e6:46:39:0d:6d:db:5f:b2:d3:5f:
e9:7b:38:36:79:0e:cb:a1:df:a8:9a:e0:02:8f:40:35:78:71:
3b:44:75:05:5d:fc:e9:9d:63:6e:97:eb:bb:d7:0a:d3:4f:47:
09:c5:61:5e:33:e4:e9:b7:c2:e3:21:77:78:3c:f6:67:0b:c6:
6a:ad:90:f7:35:77:6c:bc:9e:88:2e:35:cc:66:af:f6:5d:7d:
71:55:28:c6:8d:31:a8:2a:77:7b:de:64:35:dd:f8:c1:c7:7c:
72:fe:6c:ab:dc:d1:86:3e:0e:a9:86:32:4c:de:e7:fc:d7:2e:
a6:2d:cb:da:5d:61:28:a9:51:6c:77:2c:cb:93:44:04:7f:cc:
d0:5e:c5:31:b5:54:b8:6c:57:c6:d6:af:2f:54:41:9f:b5:3f:
b4:59:d5:ee:75:25:d1:7a:0b:32:0b:95:b7:83:68:7d:0e:15:
a9:69:f2:52:ba:6e:67:df:8b:af:02:66:56:75:d8:48:b0:54:
7a:7e:5f:b7:d2:4d:e3:1c:48:2f:c1:c2:dc:b0:7a:86:3d:b0:
0d:66:4f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:23:00 2026 by rpki-client