
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313032393a3a2f34382d3438203d3e203633383539.roa
File: 323430323a383738303a313032393a3a2f34382d3438203d3e203633383539.roa (raw, json)
Hash identifier: E7tRyXIBozKmAWDPU94JKnpIjpmZW93mBbGB/vhSTfw=
Subject key identifier: B3:C3:6C:90:58:2A:60:7F:F4:D0:4F:B3:80:50:66:B0:1D:59:91:68
Certificate issuer: /CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Certificate serial: 3B964AAC58C46506944DBD2E9F97B2332B36DC29
Authority key identifier: 63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313032393a3a2f34382d3438203d3e203633383539.roa
Signing time: Sun 03 May 2026 02:27:09 +0000
ROA not before: Sun 03 May 2026 02:22:09 +0000
ROA not after: Sun 02 May 2027 02:27:09 +0000
asID: 63859
IP address blocks: 2402:8780:1029::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:96:4a:ac:58:c4:65:06:94:4d:bd:2e:9f:97:b2:33:2b:36:dc:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Validity
Not Before: May 3 02:22:09 2026 GMT
Not After : May 2 02:27:09 2027 GMT
Subject: CN=B3C36C90582A607FF4D04FB3805066B01D599168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:71:29:92:02:81:c0:60:1a:b5:74:d6:92:bc:
2a:7a:fb:92:18:bb:47:cb:e7:b1:e2:2d:93:d8:62:
18:1b:bb:2b:bb:ca:c6:f6:88:e3:07:63:1c:6d:05:
10:de:69:aa:a8:ee:ca:14:17:9f:6d:7f:d2:20:56:
07:91:f4:38:7b:38:61:4e:c9:a6:86:d7:78:19:fc:
b3:ba:46:ea:ac:1a:fb:07:ed:65:b8:b1:73:bd:2b:
d3:1f:4b:b3:52:3d:b8:5d:ef:68:8b:be:5c:52:13:
7d:74:a0:d4:a8:9f:41:c3:ee:42:46:b3:93:ef:f3:
62:57:fd:b5:cb:3c:24:2f:36:30:60:3b:d2:78:ae:
b9:93:41:dc:4a:79:80:79:0c:22:3e:3b:2a:8a:db:
e4:a7:28:f0:6f:f4:f8:0e:cb:33:7c:b7:0d:c9:1f:
ec:60:46:b2:02:4a:b5:22:7e:be:af:86:ab:52:d1:
a4:af:f2:f5:a3:f4:fd:36:33:fb:eb:c5:58:cf:4e:
ef:69:6f:bd:68:a1:e0:db:3e:ad:d6:d2:8f:91:33:
c5:50:d8:96:c6:f3:2c:cc:ba:92:06:b9:e2:d9:fd:
c7:77:9c:fb:6f:ba:a1:6b:81:75:9f:b8:6f:44:b1:
2d:4b:0f:89:84:0e:10:de:89:b0:05:e7:a1:af:a3:
0c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C3:6C:90:58:2A:60:7F:F4:D0:4F:B3:80:50:66:B0:1D:59:91:68
X509v3 Authority Key Identifier:
keyid:63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313032393a3a2f34382d3438203d3e203633383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:8780:1029::/48
Signature Algorithm: sha256WithRSAEncryption
a2:c6:ee:3f:85:8c:72:be:42:b2:69:bc:5e:b5:b1:cc:41:1e:
12:28:b8:3e:dd:16:82:42:c9:29:d2:db:9e:aa:de:13:da:92:
93:8b:95:b3:6c:e7:96:4f:72:f7:3f:bd:81:06:cd:e6:0e:06:
91:6c:51:b3:64:c2:00:56:af:1e:6a:91:a4:ad:84:2d:f2:41:
ea:25:e6:21:a9:9b:17:dc:72:d4:b3:50:04:5e:60:22:3a:b6:
2f:58:f5:23:6c:bd:e3:89:5b:e0:04:a8:bd:9a:59:e1:bf:99:
d2:ab:45:f1:90:68:93:06:c0:be:60:43:37:bf:4a:3b:86:55:
c2:25:41:6a:d9:d2:45:35:ce:a8:07:13:a8:26:fe:f8:61:f6:
3c:a2:f0:84:cf:22:01:5d:63:3a:e0:d4:38:90:96:ea:41:ee:
47:40:a1:64:25:29:4b:79:d5:9c:54:10:0c:24:14:e6:b0:39:
f2:72:48:40:62:ac:40:fd:c6:b2:65:b1:19:92:d8:9c:9a:de:
53:9d:e8:cd:bd:6d:f9:c3:84:14:37:c8:3e:6d:fe:d3:e4:04:
70:5d:f7:57:6f:d2:50:b9:ab:da:fc:2f:3e:b2:68:d1:6e:06:
53:d1:20:19:32:62:37:75:f9:94:5b:06:69:50:1d:f8:fc:a2:
ba:cb:5d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:28:53 2026 by rpki-client