
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313031623a3a2f34382d3438203d3e203633383639.roa
File: 323430323a383738303a313031623a3a2f34382d3438203d3e203633383639.roa (raw, json)
Hash identifier: vYET56HFYpChL6bGq11j5RB2Wr1FAT/zt+FKBjbdqwQ=
Subject key identifier: 9D:80:87:67:5D:09:52:13:E8:11:5B:B5:82:23:F1:8D:08:3E:B5:AE
Certificate issuer: /CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Certificate serial: 68E7C1172A8951755F1FC7EAE1CD275226D57B42
Authority key identifier: 63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313031623a3a2f34382d3438203d3e203633383639.roa
Signing time: Sun 03 May 2026 02:27:11 +0000
ROA not before: Sun 03 May 2026 02:22:11 +0000
ROA not after: Sun 02 May 2027 02:27:11 +0000
asID: 63869
IP address blocks: 2402:8780:101b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:e7:c1:17:2a:89:51:75:5f:1f:c7:ea:e1:cd:27:52:26:d5:7b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Validity
Not Before: May 3 02:22:11 2026 GMT
Not After : May 2 02:27:11 2027 GMT
Subject: CN=9D8087675D095213E8115BB58223F18D083EB5AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:39:59:38:d8:9a:51:f0:77:f9:1c:ce:29:62:
10:e2:ff:ee:dd:ce:27:b4:f2:5c:29:f6:e2:f8:22:
b1:4a:1a:04:fd:9d:5f:3c:0c:72:13:44:62:39:ec:
9a:06:8a:50:06:58:63:a3:c4:b3:98:7f:b4:18:8a:
38:87:f1:2f:e3:cd:c3:59:5c:01:98:de:b2:f3:97:
d2:d2:f7:9e:f9:59:65:2b:a4:6b:7e:e2:b0:0c:37:
40:9f:9a:80:ba:67:ad:fd:b9:e0:d8:ce:48:d8:1b:
11:d2:02:7b:a4:de:6a:dd:f1:a2:35:7a:9b:1d:5e:
41:e0:e1:bf:15:29:e6:7a:b0:1d:61:07:60:d0:94:
fb:ce:5a:71:14:85:71:ae:ad:57:79:61:82:ae:69:
d7:8e:9a:98:ba:06:00:2c:12:6c:15:2a:9a:76:32:
5b:99:2c:89:a6:37:c3:7e:0c:68:d5:05:e8:b8:32:
78:22:5a:8e:cd:07:20:80:9a:a0:c6:61:61:27:7b:
81:1c:2c:32:7d:f8:28:94:45:69:3b:0f:f2:37:69:
07:0f:6c:ac:57:2d:b8:62:66:b8:ce:ae:00:f2:1b:
5b:dc:11:95:aa:7e:7a:9b:fe:98:63:a0:40:5a:a8:
71:48:bd:3f:7a:7a:59:7d:ca:da:15:f7:74:14:ec:
99:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:80:87:67:5D:09:52:13:E8:11:5B:B5:82:23:F1:8D:08:3E:B5:AE
X509v3 Authority Key Identifier:
keyid:63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313031623a3a2f34382d3438203d3e203633383639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:8780:101b::/48
Signature Algorithm: sha256WithRSAEncryption
1b:8b:d8:be:f4:90:39:c0:bd:2c:fb:6e:3f:d2:65:bf:0a:9a:
2e:ed:bd:dd:5c:1d:cb:4f:cb:c9:80:ba:b1:34:05:21:83:ae:
cd:bf:04:24:2f:7b:ee:36:3e:f6:ca:eb:00:2a:fa:4c:ab:54:
23:4c:d7:34:07:19:41:56:3e:5f:56:f0:9b:38:97:ce:a0:6a:
b3:5e:30:a0:b6:be:26:6f:ea:51:92:68:c9:87:0c:c3:7d:a9:
6a:4a:7e:49:c3:e4:6e:b0:c2:c9:d6:3b:6b:0d:e5:51:a6:56:
17:e2:84:d6:01:d1:a0:ed:49:5c:67:12:c0:37:a0:37:21:66:
98:52:49:70:94:37:48:73:57:1f:ee:03:d6:41:69:e2:23:4c:
f0:a9:7a:29:7d:fb:a2:ff:73:9a:d8:b3:ff:f2:e5:f7:a9:fe:
8f:41:43:18:b9:5e:e6:a2:52:61:f5:ea:39:aa:fd:2b:b0:d3:
2c:ad:52:79:9f:1a:54:92:66:c3:d1:ba:00:de:29:50:44:10:
66:12:b1:01:ef:65:ac:73:5a:e1:27:46:ff:21:9f:4f:db:3f:
57:4a:57:6d:c5:06:e6:59:bf:f6:34:2e:8e:07:4c:22:0b:f5:
39:86:4e:59:03:60:3a:68:bb:99:3c:35:03:de:8d:85:ab:a6:
78:70:21:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:54:32 2026 by rpki-client