
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313030303a3a2f34382d3438203d3e203633383539.roa
File: 323430323a383738303a313030303a3a2f34382d3438203d3e203633383539.roa (raw, json)
Hash identifier: P/CRBCwgpqum8FYFDzwyHXHMI8YL0EQQHVLJv9xYjmQ=
Subject key identifier: D2:ED:24:F4:7E:C1:A3:BB:B0:D3:93:BD:EA:B2:D3:5F:93:08:BE:78
Certificate issuer: /CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Certificate serial: 790B075BD5A739EB98A538E2BF15D5A41BB30CBB
Authority key identifier: 63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313030303a3a2f34382d3438203d3e203633383539.roa
Signing time: Sun 03 May 2026 02:27:16 +0000
ROA not before: Sun 03 May 2026 02:22:16 +0000
ROA not after: Sun 02 May 2027 02:27:16 +0000
asID: 63859
IP address blocks: 2402:8780:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:0b:07:5b:d5:a7:39:eb:98:a5:38:e2:bf:15:d5:a4:1b:b3:0c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Validity
Not Before: May 3 02:22:16 2026 GMT
Not After : May 2 02:27:16 2027 GMT
Subject: CN=D2ED24F47EC1A3BBB0D393BDEAB2D35F9308BE78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b5:c9:49:6a:4a:a6:21:f0:db:81:8b:89:c2:
3b:00:5c:3b:77:55:75:35:62:39:ab:aa:9f:4e:4c:
7b:26:20:52:a0:0a:f1:32:98:17:9b:60:04:e9:cb:
52:b5:42:58:c2:3d:f0:61:08:b8:6d:0a:c7:37:bb:
56:6e:a7:4d:fd:3b:d4:3d:a7:3c:2e:be:a3:0e:86:
3a:8b:de:cb:55:a5:4a:9c:1c:31:34:c8:a6:4b:7e:
3e:0a:98:63:26:79:8f:ae:a9:67:11:0c:47:53:32:
e4:f1:11:41:88:12:a9:71:7b:f1:ef:2a:cc:89:e1:
65:f9:e7:63:48:86:8b:13:60:70:e7:eb:85:08:20:
1b:c1:00:ab:6c:11:e0:be:ad:5d:a0:72:6d:9a:39:
e0:b7:36:f5:1a:34:e8:a7:35:40:97:08:40:42:f5:
3c:fc:99:3c:48:3c:dd:f6:7e:14:25:c0:14:4d:95:
c7:e4:00:25:76:70:9b:6d:84:94:ce:49:02:37:33:
3b:dc:2b:84:66:80:4e:f3:2a:a6:0c:21:7e:f8:db:
1e:6d:b2:5e:5e:56:8d:f3:1b:c9:e5:5a:64:57:1a:
97:94:4d:ba:4a:da:10:61:60:ad:19:7e:60:a0:26:
4c:16:d9:78:4c:ee:aa:0d:10:ef:0e:40:45:a5:5c:
6b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:ED:24:F4:7E:C1:A3:BB:B0:D3:93:BD:EA:B2:D3:5F:93:08:BE:78
X509v3 Authority Key Identifier:
keyid:63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313030303a3a2f34382d3438203d3e203633383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:8780:1000::/48
Signature Algorithm: sha256WithRSAEncryption
58:5d:01:9e:97:86:07:64:21:eb:ab:f7:79:2d:74:61:7d:38:
29:65:85:dd:f3:8b:4d:41:48:af:08:e7:47:e7:58:6d:ad:18:
00:d9:e3:0e:c5:1e:60:ed:b3:ac:bd:56:5e:94:5b:9a:45:c3:
c3:dc:37:f6:da:95:cb:fc:a2:3c:cc:a9:9b:c9:d9:e3:15:62:
84:74:39:b6:0a:c7:e5:86:10:ba:96:7a:4a:f1:ed:64:c0:27:
a4:5d:55:eb:46:08:6a:a7:78:0d:11:b2:0f:21:0e:1d:81:30:
5e:5f:67:2c:2c:a2:b6:79:47:78:24:3f:d4:11:dd:b4:ae:9f:
07:9c:14:d3:41:eb:72:2e:5d:0f:05:00:03:e7:b9:f4:62:86:
14:81:79:5d:c8:5d:13:ff:fd:34:48:f7:00:22:dd:8e:16:e9:
df:6a:af:4a:60:92:48:cc:1e:45:38:5d:2e:9e:64:57:04:66:
fc:4e:e8:c3:7b:31:78:11:de:2b:0d:6d:fa:ab:15:6d:34:a4:
b7:d9:f3:ee:12:c8:e7:89:b6:ee:50:70:5f:40:c3:91:9b:d5:
d3:61:48:4a:65:38:04:0c:77:8d:bd:0e:8b:b3:28:98:c4:0d:
61:c4:7a:1a:f3:b3:ef:0e:ac:b3:9f:04:bf:fe:03:d2:9f:7b:
3c:00:8e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:44:20 2026 by rpki-client