
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313035373a3a2f34382d3438203d3e203633383539.roa
File: 323430323a383738303a313035373a3a2f34382d3438203d3e203633383539.roa (raw, json)
Hash identifier: 1ASrzbPmwcd/DHS8urHeUWc9E+d1UpvPQYSfQKHBx4w=
Subject key identifier: F2:E5:97:03:28:BC:F6:F2:67:AB:B3:21:32:DE:F3:CD:F0:9A:89:2E
Certificate issuer: /CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Certificate serial: 6E667266FAE63471F8BA57F4EFA16575F9FC7BC1
Authority key identifier: 63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313035373a3a2f34382d3438203d3e203633383539.roa
Signing time: Sun 03 May 2026 02:27:11 +0000
ROA not before: Sun 03 May 2026 02:22:11 +0000
ROA not after: Sun 02 May 2027 02:27:11 +0000
asID: 63859
IP address blocks: 2402:8780:1057::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:66:72:66:fa:e6:34:71:f8:ba:57:f4:ef:a1:65:75:f9:fc:7b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Validity
Not Before: May 3 02:22:11 2026 GMT
Not After : May 2 02:27:11 2027 GMT
Subject: CN=F2E5970328BCF6F267ABB32132DEF3CDF09A892E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:36:f2:3a:c9:a2:51:44:e2:9d:1a:66:ba:6d:
d9:d7:be:c5:89:e6:da:0b:00:20:19:4e:d5:b2:02:
cc:f0:2a:f2:72:0b:7b:17:cc:9a:dd:ce:58:a4:a3:
1c:57:2b:da:11:78:26:19:a8:76:2f:87:40:fd:33:
10:0b:37:87:83:67:d6:44:65:be:15:cf:1c:ee:87:
6d:9f:35:ad:e3:95:9a:54:85:b5:4d:ae:4a:6f:da:
f4:32:64:ec:ca:5c:fb:b9:53:cc:8b:62:62:ac:9a:
e5:3d:24:f8:76:78:87:7d:29:7a:fb:38:41:57:b7:
b3:98:0f:18:48:af:cc:d3:8b:66:75:ad:16:13:ec:
81:47:25:e0:e9:63:4f:59:4f:a8:f9:4b:2d:33:a8:
d5:30:7d:db:a8:72:17:cb:3a:98:d5:9c:24:c0:64:
51:2d:40:26:5d:70:20:40:45:b8:40:6e:de:e9:31:
bf:59:cd:58:a7:1b:12:3a:6d:cb:7d:ef:9d:b5:d6:
10:93:4f:b5:24:2d:76:a7:c7:a5:58:c1:b2:e9:d2:
8d:ff:2b:dd:1f:1b:a9:95:16:bd:ae:5a:36:b9:74:
43:ed:8c:6a:bd:38:a0:6c:db:b9:04:68:e6:e2:08:
41:11:39:82:b6:32:9c:85:d8:13:4a:fa:9f:9a:db:
8c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E5:97:03:28:BC:F6:F2:67:AB:B3:21:32:DE:F3:CD:F0:9A:89:2E
X509v3 Authority Key Identifier:
keyid:63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313035373a3a2f34382d3438203d3e203633383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:8780:1057::/48
Signature Algorithm: sha256WithRSAEncryption
d1:ea:ef:ae:b3:57:c0:aa:91:ec:e3:3b:04:7f:ae:d1:e3:53:
1c:87:07:da:42:63:69:0c:1b:80:bc:67:d9:16:f5:25:a9:6a:
f8:86:c7:c2:51:0e:71:f9:97:58:88:d7:fe:47:af:70:e9:69:
a2:37:bb:c9:2b:66:58:cd:ce:f8:ab:3e:6b:33:3e:8a:b4:90:
ec:c7:ae:b1:08:35:0b:41:f6:18:88:58:36:95:3d:84:eb:7f:
65:17:78:9f:9f:9e:ac:d0:af:86:35:fd:88:f9:11:06:4f:de:
77:47:d6:90:cc:cb:06:99:3c:a6:09:a9:6d:e6:56:36:a2:50:
ab:d2:ca:82:84:5b:3d:4a:ec:bb:cd:7c:a2:dd:61:32:e3:9f:
3c:41:68:81:65:30:fb:42:a0:97:ca:4a:19:78:0c:f1:4c:3b:
7e:37:e7:6e:c0:24:c3:30:f8:5f:6e:c4:bc:b8:26:4b:22:2a:
24:db:54:ba:a2:55:4c:7e:40:14:56:28:fa:fa:bc:ee:0f:ec:
08:7d:30:e8:09:aa:87:4d:da:83:e7:6f:39:5f:05:71:3d:ba:
c0:5d:8d:c7:d9:e2:96:d4:60:ff:6d:37:62:1a:55:29:a4:60:
85:96:f4:58:4d:8a:70:70:e3:bc:b8:2e:0e:c9:89:fa:71:d0:
98:38:3b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:16 2026 by rpki-client