
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313030393a3a2f34382d3438203d3e203633383539.roa
File: 323430323a383738303a313030393a3a2f34382d3438203d3e203633383539.roa (raw, json)
Hash identifier: 5hgqs02RXm1ZntrYSk4tQ5/RQyJ8uqBgUr+Y2soYwvI=
Subject key identifier: 11:76:C1:28:D1:63:BB:1A:1F:37:98:60:22:06:43:EC:DF:C4:84:8E
Certificate issuer: /CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Certificate serial: 615018E1453516B8FBE6C1EFE1291E8FF94F22D0
Authority key identifier: 63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313030393a3a2f34382d3438203d3e203633383539.roa
Signing time: Sun 03 May 2026 02:27:12 +0000
ROA not before: Sun 03 May 2026 02:22:12 +0000
ROA not after: Sun 02 May 2027 02:27:12 +0000
asID: 63859
IP address blocks: 2402:8780:1009::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:50:18:e1:45:35:16:b8:fb:e6:c1:ef:e1:29:1e:8f:f9:4f:22:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Validity
Not Before: May 3 02:22:12 2026 GMT
Not After : May 2 02:27:12 2027 GMT
Subject: CN=1176C128D163BB1A1F379860220643ECDFC4848E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:f4:1c:9e:78:30:db:32:c8:db:42:1f:46:
14:3a:32:1f:04:c7:41:9e:10:6a:11:79:8c:4d:f0:
da:3c:3a:dd:ee:00:a5:1d:84:bf:7a:f9:08:0f:6e:
ab:8f:ac:26:7b:4c:da:e7:21:bc:eb:58:c1:b2:30:
56:39:67:8f:e2:bd:8a:96:ba:20:66:82:06:e8:a4:
70:00:5a:ef:b5:fe:26:90:99:fb:fe:d6:28:9f:0f:
72:90:3d:7b:c2:3f:35:80:fd:25:99:aa:89:54:9a:
2e:ae:e1:da:69:22:ff:f9:5e:1e:67:da:92:c9:78:
7f:0e:e3:86:04:d5:51:49:b1:42:07:08:8d:d0:32:
22:78:aa:d5:b4:86:5f:c4:ef:61:2c:7f:f0:10:7d:
2b:39:5c:a8:01:6d:75:4f:56:73:b4:d9:a9:ec:3b:
f3:0a:b6:b1:30:38:7e:4d:94:70:5e:f5:a0:10:e2:
db:49:42:8d:40:a5:50:dd:9f:3b:26:b4:a6:70:29:
a2:d8:08:06:fa:45:89:03:0c:c8:da:cf:63:df:fe:
89:51:6d:6f:3a:37:11:e8:dd:99:c8:b0:7a:84:dd:
d2:c2:e4:54:26:84:32:00:60:09:d6:bd:dc:f8:fd:
9f:51:de:8c:68:57:81:5e:d4:0b:0a:6b:4e:b7:c7:
4b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:76:C1:28:D1:63:BB:1A:1F:37:98:60:22:06:43:EC:DF:C4:84:8E
X509v3 Authority Key Identifier:
keyid:63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313030393a3a2f34382d3438203d3e203633383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:8780:1009::/48
Signature Algorithm: sha256WithRSAEncryption
67:0c:1a:e2:15:c2:1c:0a:99:82:a8:85:13:c8:3f:f3:92:08:
45:54:f6:cf:66:1a:ad:1e:93:3c:bc:fe:ac:e3:30:11:b6:56:
8d:76:03:46:17:0b:20:58:d0:3a:62:b0:16:bc:b1:73:a3:0f:
47:6f:30:25:cc:74:e2:dd:8a:3c:75:c7:95:e2:e8:41:a1:4e:
d7:d7:17:ea:21:39:fe:cb:8a:45:c7:c4:d9:b7:90:64:f4:02:
9b:2e:4d:55:76:93:04:75:c7:a4:e3:b3:0a:b3:9a:5c:c0:8d:
b3:17:d1:31:16:23:cc:de:da:20:d6:d0:0f:1d:08:00:4a:9f:
97:28:e0:45:d8:ff:f5:8c:93:d4:73:a8:c6:11:88:c7:dd:23:
8f:4d:a4:87:97:4d:e0:28:fb:d4:fe:6f:5c:ee:b4:7b:bc:fa:
86:97:7a:36:cc:2a:a9:e7:0a:bc:69:ad:7c:f5:01:04:a0:1a:
f3:26:8b:56:69:87:ed:fb:7a:99:d9:27:0e:73:a4:e1:67:fe:
48:24:d6:05:f1:b5:ba:64:3a:dd:03:5d:2f:32:e5:d4:64:8e:
cd:61:b7:0f:bc:4a:6b:ce:bb:a5:27:4e:7f:ba:99:d2:2a:80:
65:ed:f4:d1:7a:92:d5:aa:2b:7a:17:8b:cc:19:20:57:8a:e0:
32:7e:04:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:38 2026 by rpki-client