
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313035363a3a2f34382d3438203d3e203633383539.roa
File: 323430323a383738303a313035363a3a2f34382d3438203d3e203633383539.roa (raw, json)
Hash identifier: I4hXtaqkriV2QirRqH9cwQ/d2faPVKnfLsriv/RsIUs=
Subject key identifier: CF:39:BB:B7:94:B4:45:8D:95:11:21:56:1B:61:2C:F2:CB:EE:7C:93
Certificate issuer: /CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Certificate serial: 123E6E724BA95174DF06A48E2D4B1E04A472CC0C
Authority key identifier: 63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313035363a3a2f34382d3438203d3e203633383539.roa
Signing time: Sun 03 May 2026 02:27:10 +0000
ROA not before: Sun 03 May 2026 02:22:10 +0000
ROA not after: Sun 02 May 2027 02:27:10 +0000
asID: 63859
IP address blocks: 2402:8780:1056::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:3e:6e:72:4b:a9:51:74:df:06:a4:8e:2d:4b:1e:04:a4:72:cc:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Validity
Not Before: May 3 02:22:10 2026 GMT
Not After : May 2 02:27:10 2027 GMT
Subject: CN=CF39BBB794B4458D951121561B612CF2CBEE7C93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d3:7f:93:71:21:c5:c4:88:bf:2b:2e:84:33:
5b:08:a6:a1:86:8e:01:26:30:7e:bc:ad:00:5c:79:
c4:15:f5:40:e5:ef:b4:2b:c0:bc:fb:ee:d3:75:b9:
3b:10:29:33:23:3c:50:3c:3a:59:35:c7:4f:05:f3:
ec:1d:87:2e:46:00:81:c5:aa:74:a5:e1:05:a9:64:
c4:4b:27:94:4a:62:45:65:b8:ad:3b:52:60:a3:05:
2a:05:c5:50:c2:33:7b:27:20:71:ba:e8:f4:e5:39:
43:da:12:b0:dd:c7:6a:fa:e1:29:47:a1:5d:8f:45:
22:86:de:f0:46:ab:ef:a3:f2:96:8d:9d:ff:45:cc:
af:4d:11:20:75:c6:f7:d4:18:c4:4d:68:30:20:79:
35:6d:ed:04:93:87:84:ac:ba:85:a7:3b:e1:d5:88:
ec:ce:18:5f:1b:c7:7e:29:02:01:d1:3a:81:c3:6e:
36:10:05:8e:b3:05:55:e8:f3:c2:e7:94:bf:93:95:
6c:06:44:05:c5:94:ec:d8:ee:38:76:1e:89:49:0f:
d4:28:b8:72:af:94:69:bd:0d:9a:69:b3:6a:74:16:
74:9d:cf:5d:ab:35:19:0f:2f:35:f4:f7:3b:a3:a4:
bd:ae:5d:88:b0:b6:a6:f0:61:db:4a:7c:89:4e:97:
c0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:39:BB:B7:94:B4:45:8D:95:11:21:56:1B:61:2C:F2:CB:EE:7C:93
X509v3 Authority Key Identifier:
keyid:63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313035363a3a2f34382d3438203d3e203633383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:8780:1056::/48
Signature Algorithm: sha256WithRSAEncryption
5f:0b:97:c7:03:4f:68:c0:24:86:34:5d:12:c8:56:e9:35:b8:
c6:6c:a0:5c:90:f1:df:6d:98:88:13:79:96:16:70:4b:63:6e:
88:d6:e2:e8:0a:12:57:fc:33:9e:47:48:c1:2b:e2:ab:3f:8b:
52:2d:fa:8e:df:4a:ce:69:56:3e:ec:ef:ae:60:61:19:b8:42:
ce:93:5d:38:0e:4b:b9:ac:61:22:54:a9:a4:82:52:dc:55:24:
a0:e3:c6:00:39:97:53:31:be:0b:2e:e0:df:ab:9d:6e:57:ab:
b4:c3:b4:a9:33:66:97:73:94:c5:d0:54:e4:db:75:46:cd:25:
8c:78:92:33:75:74:64:a7:f1:f1:9e:b7:88:71:f8:8f:bf:5a:
8e:71:88:e6:9b:32:af:cd:bd:0c:db:02:f9:ed:8c:2d:43:1b:
56:0e:11:e7:af:72:78:8f:44:b1:20:50:c6:81:05:0e:e1:26:
96:06:54:52:6c:82:84:0e:87:cf:d5:c4:1b:53:0f:5e:a0:31:
46:c7:ae:12:42:9a:7e:7f:9e:97:d3:6e:f9:b5:4c:38:08:60:
f4:a8:5b:93:3f:af:2b:09:e2:df:fb:e2:2e:90:32:b6:48:c4:
d3:c2:18:15:63:f0:9e:4c:07:77:0a:69:1f:e0:00:04:61:f5:
fa:14:44:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:25:40 2026 by rpki-client