
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313030353a3a2f34382d3438203d3e203633383539.roa
File: 323430323a383738303a313030353a3a2f34382d3438203d3e203633383539.roa (raw, json)
Hash identifier: G3mpZmD64zWPzoaI+PEWGj9N85YGqwYb2GjVMXfv318=
Subject key identifier: 38:0E:94:66:31:A6:2D:D0:17:A0:B0:46:AA:47:A2:F0:7F:1C:BA:99
Certificate issuer: /CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Certificate serial: 0617FFCE9E16F9063C94AB981F7DA5CCE4ECD800
Authority key identifier: 63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313030353a3a2f34382d3438203d3e203633383539.roa
Signing time: Sun 03 May 2026 02:27:16 +0000
ROA not before: Sun 03 May 2026 02:22:16 +0000
ROA not after: Sun 02 May 2027 02:27:16 +0000
asID: 63859
IP address blocks: 2402:8780:1005::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:17:ff:ce:9e:16:f9:06:3c:94:ab:98:1f:7d:a5:cc:e4:ec:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Validity
Not Before: May 3 02:22:16 2026 GMT
Not After : May 2 02:27:16 2027 GMT
Subject: CN=380E946631A62DD017A0B046AA47A2F07F1CBA99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:5a:7e:3f:9f:92:41:2f:b7:de:f1:98:f7:
c9:9d:91:05:c7:47:ab:d4:48:b2:b6:87:b8:e3:f8:
7a:74:96:b9:1c:c4:5f:05:d9:8d:5b:7e:fa:40:7a:
ec:e2:3b:ce:d8:f4:20:04:dd:85:a8:2e:3b:1a:c1:
b6:08:00:38:73:80:b5:93:2d:b2:91:57:ab:bf:b0:
80:1a:86:87:c2:f9:2c:71:86:e6:39:69:50:ad:7c:
53:ab:38:18:53:55:c2:37:22:05:1b:a8:63:89:8a:
5f:97:ed:df:48:68:54:ad:99:a9:5e:69:ea:bf:e0:
03:ca:25:0a:ce:4c:c8:65:8a:32:22:b1:d0:25:32:
47:37:ea:ce:89:06:c2:61:11:0e:64:c5:71:08:78:
58:d8:bc:cf:a5:3c:fe:ea:0e:e2:de:19:7d:80:49:
25:8e:a9:a6:ac:1d:11:aa:eb:2b:01:12:68:54:1d:
8c:d1:c9:44:06:4c:9e:61:41:df:82:08:ae:43:be:
ce:80:b3:9d:a5:a1:6b:75:a7:d8:08:d7:b5:b0:21:
72:d6:a3:52:ca:1c:ba:5b:ea:c1:24:2f:2f:2a:28:
50:2a:0b:4b:fd:5d:df:a0:ed:08:99:a8:5b:5b:5d:
47:ac:86:52:3e:e2:bc:6f:d8:0c:fd:a3:4d:0b:7e:
7d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0E:94:66:31:A6:2D:D0:17:A0:B0:46:AA:47:A2:F0:7F:1C:BA:99
X509v3 Authority Key Identifier:
keyid:63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313030353a3a2f34382d3438203d3e203633383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:8780:1005::/48
Signature Algorithm: sha256WithRSAEncryption
6f:6f:18:77:53:f9:ea:ab:1b:8e:96:12:a0:09:28:72:b3:43:
aa:a1:51:0a:b1:93:0a:5e:ba:b2:7d:65:0c:92:73:b3:c6:7b:
b9:93:4b:c9:f6:65:89:8c:27:d7:11:fe:02:ab:55:2b:d2:11:
2b:f5:91:12:e4:9c:7a:13:70:ce:df:50:c0:e3:c2:46:04:69:
9f:97:5b:b4:2f:7b:2c:44:1c:b0:11:15:2c:63:91:19:de:16:
6c:0c:f2:bd:fd:55:ad:a2:a2:3e:13:4f:f7:bd:ac:ea:00:2a:
48:18:aa:6f:58:d9:fd:d9:62:9b:6e:ff:20:11:78:5c:c4:32:
a6:3d:b5:b4:1c:04:85:59:30:39:1a:cb:9a:3f:da:3f:78:3e:
cb:82:32:05:d3:b3:6e:51:0d:ad:73:04:1d:3b:66:c1:13:bd:
2b:3e:62:4e:18:ae:11:8b:69:b8:d4:b2:25:4e:e0:68:4c:68:
e2:87:57:1a:39:98:6f:b4:04:2a:fa:0e:48:6d:ab:9b:b5:8f:
af:6d:58:a2:e1:86:8c:b3:2d:92:95:8e:39:67:6e:ea:e8:98:
88:0e:53:7e:51:65:19:5a:ec:3d:2a:6b:ce:66:cb:44:e4:b1:
10:f7:ce:bf:6d:0f:da:17:dc:c3:a0:0b:0a:65:fe:ad:f9:d9:
f3:63:12:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:30 2026 by rpki-client