
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313031363a3a2f34382d3438203d3e203633383539.roa
File: 323430323a383738303a313031363a3a2f34382d3438203d3e203633383539.roa (raw, json)
Hash identifier: 41vzNeJSTKVYMid2VrmfKQGDFALw1Z1aA0Bk6HWTfDA=
Subject key identifier: E7:AB:3A:1E:64:32:80:48:38:4C:16:94:34:61:1B:92:BB:83:69:54
Certificate issuer: /CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Certificate serial: 56362C275A29C6DBC59BEEDB64A69B06A6CFE0C9
Authority key identifier: 63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313031363a3a2f34382d3438203d3e203633383539.roa
Signing time: Sun 03 May 2026 02:27:07 +0000
ROA not before: Sun 03 May 2026 02:22:07 +0000
ROA not after: Sun 02 May 2027 02:27:07 +0000
asID: 63859
IP address blocks: 2402:8780:1016::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:36:2c:27:5a:29:c6:db:c5:9b:ee:db:64:a6:9b:06:a6:cf:e0:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Validity
Not Before: May 3 02:22:07 2026 GMT
Not After : May 2 02:27:07 2027 GMT
Subject: CN=E7AB3A1E64328048384C169434611B92BB836954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2f:14:16:29:0a:ec:79:a8:7b:f0:06:70:ce:
1f:5f:14:b6:34:04:df:cb:f1:e0:c7:cd:fa:0f:ab:
ce:1a:95:6f:c6:3d:ab:21:8c:27:87:c9:13:c0:6e:
78:cf:7c:19:ed:f5:c0:e8:34:8e:2f:e0:90:c3:74:
3f:56:b1:00:cf:a1:f6:89:84:15:18:f6:14:09:cd:
43:1f:ed:70:f7:b3:a0:6d:8b:d4:53:7e:35:69:63:
a7:74:fa:4b:9f:ee:51:a9:39:ec:cf:d9:7b:7b:61:
27:fc:45:ed:30:26:06:97:f9:67:1a:31:9c:52:5b:
9b:34:4e:51:24:ca:2f:b2:6d:90:de:c2:55:f9:10:
a8:ab:d4:4d:da:24:70:ad:94:f9:6e:3d:29:2b:c3:
c9:7d:f2:29:2a:07:2b:0e:de:58:67:41:b3:65:63:
2d:ee:76:b6:18:8a:e4:83:ba:ff:27:3b:f3:d4:bd:
1a:5b:8a:65:a5:a1:5e:13:c1:42:7d:82:c0:30:6a:
cc:74:b1:f0:7a:58:0e:a6:e0:e0:7c:be:b5:10:82:
2a:17:c7:7f:0c:17:84:77:59:9e:c8:20:ea:ce:d3:
73:65:19:fd:e7:de:19:78:73:56:9f:22:6f:09:c1:
18:57:28:94:a7:e4:9b:da:2b:d5:f0:0e:ae:75:5e:
1c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AB:3A:1E:64:32:80:48:38:4C:16:94:34:61:1B:92:BB:83:69:54
X509v3 Authority Key Identifier:
keyid:63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313031363a3a2f34382d3438203d3e203633383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:8780:1016::/48
Signature Algorithm: sha256WithRSAEncryption
31:03:75:b1:4c:9e:35:d1:8f:48:a1:16:59:9f:b3:f7:53:85:
8d:c4:cf:8a:4c:59:3b:18:eb:2d:ce:c6:e9:b3:7b:9a:ec:a0:
e0:a2:23:6c:d9:36:bf:c4:e5:fc:07:e3:7d:52:c9:90:1a:3e:
2f:b5:2d:e7:79:0f:57:ba:e4:62:c2:da:0e:37:40:d1:e0:1f:
48:23:b8:b5:4b:9b:ec:53:90:54:0c:6d:d5:b1:63:f3:f3:53:
7c:a7:90:39:eb:9e:31:63:5d:51:af:4e:cf:e5:be:10:b7:74:
ff:89:e2:fb:f5:54:ef:62:74:9b:c2:a6:4d:ff:55:ab:8c:61:
d3:cd:d0:9f:04:e3:f7:e0:0c:36:71:95:70:98:13:f6:34:ff:
a5:44:9d:af:34:62:52:8f:1e:97:9c:d5:86:b0:10:65:a3:32:
56:be:39:49:f7:b8:43:3d:ff:81:18:89:93:c6:8a:d0:38:64:
78:ba:f3:e2:7a:47:61:ab:66:98:c7:16:c9:1f:0f:e1:da:33:
00:e9:ce:0e:ef:73:46:dd:ae:d6:ad:d1:3d:be:0f:76:11:04:
44:6e:7a:d2:ad:b3:55:f3:74:14:33:a7:e2:83:d6:06:fa:9f:
69:48:07:7c:df:93:64:85:98:cf:8f:a0:fa:fa:17:e0:4b:e9:
9f:14:f4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:26:12 2026 by rpki-client