
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313030333a3a2f34382d3438203d3e203633383539.roa
File: 323430323a383738303a313030333a3a2f34382d3438203d3e203633383539.roa (raw, json)
Hash identifier: 2QQzbibx13e9OznQwDFFooXULfjO91bpIYzgasoVnLs=
Subject key identifier: E2:8C:81:24:E2:B8:4D:5D:61:F2:42:94:AC:97:14:3F:C0:F4:C4:81
Certificate issuer: /CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Certificate serial: 6E7A093875E31D22DE98C82B6CCD6CC13AA802E9
Authority key identifier: 63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313030333a3a2f34382d3438203d3e203633383539.roa
Signing time: Sun 03 May 2026 02:27:14 +0000
ROA not before: Sun 03 May 2026 02:22:14 +0000
ROA not after: Sun 02 May 2027 02:27:14 +0000
asID: 63859
IP address blocks: 2402:8780:1003::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:7a:09:38:75:e3:1d:22:de:98:c8:2b:6c:cd:6c:c1:3a:a8:02:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Validity
Not Before: May 3 02:22:14 2026 GMT
Not After : May 2 02:27:14 2027 GMT
Subject: CN=E28C8124E2B84D5D61F24294AC97143FC0F4C481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:37:b6:97:0e:02:5f:7d:de:4a:4f:47:7c:79:
a4:81:a8:45:52:da:56:a6:fe:d6:4c:d3:94:82:a8:
a3:0d:4c:a9:f7:2f:55:13:9b:69:fa:f3:e5:f2:1a:
1d:fb:ee:93:bb:e2:e2:d8:53:f9:25:1d:a7:fd:70:
f2:ff:5e:2e:c5:1e:b2:8c:42:97:0c:5a:a6:29:f9:
55:d0:48:e1:ed:45:5e:5a:af:55:90:32:1e:9c:ed:
67:48:59:3b:1a:84:42:e5:4d:ce:ae:f2:21:dc:b3:
bd:4f:b6:f7:84:56:ac:70:c5:d6:1a:98:d6:3f:95:
d6:93:4d:b0:4b:44:bd:d6:df:39:8b:16:bc:20:38:
d8:79:ba:17:3b:f7:cf:b6:e5:85:27:29:dc:3f:b6:
b9:c0:0a:8e:19:79:6d:44:b8:6d:c5:e6:84:51:34:
83:eb:6c:70:6e:d6:90:1b:26:fd:a8:9b:42:d4:c6:
65:de:d4:2f:f7:1c:4c:d3:e0:18:13:83:53:f8:e3:
70:db:b8:fb:40:3e:a7:bb:99:4a:e5:e8:0e:3c:75:
a8:3a:7f:3d:65:18:1c:81:2b:cd:e5:15:f8:75:cc:
ab:b2:d3:7d:14:46:72:08:36:4a:a0:65:98:62:84:
d4:37:71:4b:3d:36:ec:48:6e:ad:9b:a0:85:c8:ee:
02:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8C:81:24:E2:B8:4D:5D:61:F2:42:94:AC:97:14:3F:C0:F4:C4:81
X509v3 Authority Key Identifier:
keyid:63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313030333a3a2f34382d3438203d3e203633383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:8780:1003::/48
Signature Algorithm: sha256WithRSAEncryption
25:6c:fb:90:bf:5e:0d:6f:f6:b4:b0:e7:3f:8d:68:ad:ea:86:
40:3f:f7:05:b4:74:0e:45:7b:5d:6a:57:ba:66:63:34:a9:cc:
b3:d8:4b:a5:b5:b6:e9:06:d3:16:84:8d:7b:e1:4c:03:e3:19:
29:c8:c4:05:4f:83:77:2e:f3:a9:93:31:20:80:ac:81:f6:f4:
74:f8:10:06:c1:91:3e:40:d9:fa:b7:34:28:46:aa:ad:d0:e1:
12:13:a9:5d:70:ab:1d:c7:84:30:aa:c9:13:ae:81:1a:50:a1:
b1:94:3b:30:10:3f:ea:e8:09:0d:33:50:ee:f0:d7:6a:e5:5b:
7c:14:9b:77:e1:57:fc:d8:27:34:3e:41:a3:b0:84:e5:c1:c4:
e5:88:3a:df:45:ed:6a:16:6c:3a:33:1f:4c:4d:f5:4a:de:a2:
14:d7:90:1d:ca:88:68:32:93:c6:f1:89:a7:d9:77:ca:e1:4d:
08:96:41:d5:fb:14:9b:20:70:73:be:ec:70:a4:9d:21:15:34:
d2:10:c0:f5:74:8c:4a:9f:2b:6f:ab:a6:63:91:93:61:7a:e2:
15:09:48:85:88:75:06:6a:b7:a7:c2:d2:94:6e:35:60:25:3d:
79:6c:e5:9e:7a:6e:2f:3f:a1:79:1a:28:75:30:3e:47:a0:ac:
97:df:f1:b6
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUbnoJOHXjHSLemMgrbM1swTqoAukwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjNDNDI1MDRGNzA0RTUzNkFEREY0RDQxREYwMjc5NjVB
NjJGN0IxMTAeFw0yNjA1MDMwMjIyMTRaFw0yNzA1MDIwMjI3MTRaMDMxMTAvBgNV
BAMTKEUyOEM4MTI0RTJCODRENUQ2MUYyNDI5NEFDOTcxNDNGQzBGNEM0ODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAN7aXDgJffd5KT0d8eaSBqEVS
2lam/tZM05SCqKMNTKn3L1UTm2n68+XyGh377pO74uLYU/klHaf9cPL/Xi7FHrKM
QpcMWqYp+VXQSOHtRV5ar1WQMh6c7WdIWTsahELlTc6u8iHcs71PtveEVqxwxdYa
mNY/ldaTTbBLRL3W3zmLFrwgONh5uhc798+25YUnKdw/trnACo4ZeW1EuG3F5oRR
NIPrbHBu1pAbJv2om0LUxmXe1C/3HEzT4BgTg1P443DbuPtAPqe7mUrl6A48dag6
fz1lGByBK83lFfh1zKuy030URnIINkqgZZhihNQ3cUs9NuxIbq2boIXI7gIbAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU4oyBJOK4TV1h8kKUrJcUP8D0xIEwHwYDVR0j
BBgwFoAUY8QlBPcE5Tat301B3wJ5ZaYvexEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2JiYjI3MzQtZTVmYS00MGViLTg1OTgtYjdjZDEwMTM0M2NhLzEvNjNDNDI1MDRG
NzA0RTUzNkFEREY0RDQxREYwMjc5NjVBNjJGN0IxMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82M0M0MjUwNEY3MDRFNTM2QURERjRENDFERjAyNzk2NUE2MkY3
QjExLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04
NTk4LWI3Y2QxMDEzNDNjYS8xLzMyMzQzMDMyM2EzODM3MzgzMDNhMzEzMDMwMzMz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAKH
gBADMA0GCSqGSIb3DQEBCwUAA4IBAQAlbPuQv14Nb/a0sOc/jWit6oZAP/cFtHQO
RXtdale6ZmM0qcyz2EultbbpBtMWhI174UwD4xkpyMQFT4N3LvOpkzEggKyB9vR0
+BAGwZE+QNn6tzQoRqqt0OESE6ldcKsdx4QwqskTroEaUKGxlDswED/q6AkNM1Du
8Ndq5Vt8FJt34Vf82Cc0PkGjsITlwcTliDrfRe1qFmw6Mx9MTfVK3qIU15Adyoho
MpPG8Ymn2XfK4U0IlkHV+xSbIHBzvuxwpJ0hFTTSEMD1dIxKnytvq6ZjkZNheuIV
CUiFiHUGarenwtKUbjVgJT15bOWeem4vP6F5Gih1MD5HoKyX3/G2
-----END CERTIFICATE-----
Generated at Wed May 13 05:55:05 2026 by rpki-client