
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313036633a3a2f34382d3438203d3e203633383539.roa
File: 323430323a383738303a313036633a3a2f34382d3438203d3e203633383539.roa (raw, json)
Hash identifier: MlWAkCDNZTZEl14oCloyLy5YDRvWhR8KK3xXXVx2zXs=
Subject key identifier: D3:50:76:6A:9E:97:3F:A2:F7:B8:25:5C:80:59:E2:DD:7A:21:8A:13
Certificate issuer: /CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Certificate serial: 01A8DFF34F48677B3BFC8205F40B460E9D6486F2
Authority key identifier: 63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313036633a3a2f34382d3438203d3e203633383539.roa
Signing time: Sun 03 May 2026 02:27:14 +0000
ROA not before: Sun 03 May 2026 02:22:14 +0000
ROA not after: Sun 02 May 2027 02:27:14 +0000
asID: 63859
IP address blocks: 2402:8780:106c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a8:df:f3:4f:48:67:7b:3b:fc:82:05:f4:0b:46:0e:9d:64:86:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Validity
Not Before: May 3 02:22:14 2026 GMT
Not After : May 2 02:27:14 2027 GMT
Subject: CN=D350766A9E973FA2F7B8255C8059E2DD7A218A13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:19:e4:80:bf:e9:99:b1:ec:a1:08:80:41:f7:
28:bf:4b:82:48:a4:33:d9:2b:f6:65:81:27:08:08:
fe:52:e4:82:d5:c5:6d:60:5e:75:9e:b0:22:aa:e2:
ec:40:70:73:fa:4c:24:93:ff:09:04:2a:55:0c:11:
7a:97:5b:64:ef:c2:dd:18:54:8e:ed:b9:f6:41:0d:
79:cb:42:82:8a:aa:7b:44:4c:82:04:64:9f:a0:7e:
29:69:f4:28:56:00:69:15:58:bd:ec:91:cf:7a:09:
fb:61:b8:d4:db:8c:72:54:bb:35:85:a5:83:2c:61:
fa:87:0a:a1:f4:e9:84:8d:ce:54:e4:71:2a:b3:d7:
fd:fd:fc:a2:ac:fc:ad:6e:34:6c:66:72:f4:62:87:
ae:fd:6c:e6:bc:8e:2f:9c:50:b4:dd:c4:93:6c:35:
aa:e9:97:63:e7:12:2d:0c:ee:5f:10:19:5e:bf:d5:
9b:e8:c7:89:1c:20:c2:cc:e6:ed:db:ce:5b:f1:81:
c0:4e:83:68:08:3e:94:ff:93:ae:7b:63:44:5b:ad:
c3:cc:1d:e4:85:0c:9b:dc:7d:46:33:06:08:84:38:
1d:79:f2:ff:53:a9:19:f4:50:87:35:6d:6f:69:8b:
7a:48:e1:af:fb:ce:40:bd:16:25:50:8d:62:5e:de:
97:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:50:76:6A:9E:97:3F:A2:F7:B8:25:5C:80:59:E2:DD:7A:21:8A:13
X509v3 Authority Key Identifier:
keyid:63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313036633a3a2f34382d3438203d3e203633383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:8780:106c::/48
Signature Algorithm: sha256WithRSAEncryption
2e:16:20:2a:86:76:dd:54:4c:f0:9e:8c:fa:4b:a6:15:af:7d:
ef:5f:6e:19:cd:e8:dc:bb:52:d9:f6:7c:4c:36:84:a4:51:eb:
37:7b:2c:35:6d:84:0f:62:2f:ab:c5:6e:27:89:e4:c8:de:af:
bd:96:37:fb:83:77:44:2c:0c:27:9d:4b:ce:6d:64:ed:f6:83:
8f:76:5f:7b:6d:c7:3d:c6:d5:69:05:7c:9a:4e:57:4d:e6:ef:
31:15:0d:37:2d:30:2a:e4:29:c0:c5:01:52:e3:0b:12:8d:26:
b4:b0:a9:9e:00:fa:d4:c7:ba:6f:10:8b:f1:19:65:a8:48:6b:
4d:d8:1f:ad:ba:3e:9c:dc:dc:3f:40:d9:0e:df:a9:50:07:36:
31:99:6d:69:20:c8:95:e3:8a:fd:27:34:cd:e2:44:e2:b0:49:
d8:f6:cd:29:36:bc:15:c1:cb:af:9c:e6:a3:cd:c6:f1:80:fb:
d1:93:12:75:72:7c:0f:9d:32:3c:89:c1:e1:cb:ae:b7:e9:fc:
db:ac:85:cc:ad:a6:a0:87:bd:d8:07:3a:c3:50:73:f7:9a:62:
b3:50:e5:c1:1e:56:4b:2c:e1:8f:d7:4a:36:0a:e4:5a:bc:d8:
7c:73:9f:6c:c7:df:17:a9:fd:86:4a:2b:46:84:12:a6:fb:12:
41:0b:90:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:49 2026 by rpki-client