
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313037393a3a2f34382d3438203d3e203633383539.roa
File: 323430323a383738303a313037393a3a2f34382d3438203d3e203633383539.roa (raw, json)
Hash identifier: LPbZZDjsgtFNtJ3osMn5sdN6+owdYw48/PzxXoM+D8Y=
Subject key identifier: C7:A1:81:C3:E3:27:AE:90:1E:61:72:11:6B:94:8A:70:4C:9C:16:3A
Certificate issuer: /CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Certificate serial: 3BB6D6E621B27A3FED4F7EB426567103062EE123
Authority key identifier: 63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313037393a3a2f34382d3438203d3e203633383539.roa
Signing time: Sun 03 May 2026 02:27:13 +0000
ROA not before: Sun 03 May 2026 02:22:13 +0000
ROA not after: Sun 02 May 2027 02:27:13 +0000
asID: 63859
IP address blocks: 2402:8780:1079::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:b6:d6:e6:21:b2:7a:3f:ed:4f:7e:b4:26:56:71:03:06:2e:e1:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63C42504F704E536ADDF4D41DF027965A62F7B11
Validity
Not Before: May 3 02:22:13 2026 GMT
Not After : May 2 02:27:13 2027 GMT
Subject: CN=C7A181C3E327AE901E6172116B948A704C9C163A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:70:ea:54:8a:2f:d6:fb:4c:b8:d4:5e:02:5c:
7b:63:ad:bf:7a:83:58:9d:56:6b:86:ea:c3:04:ca:
b3:ce:84:03:9f:8f:f5:c7:99:34:12:c6:0e:a2:8f:
c8:f3:fe:e6:68:54:15:1a:16:47:30:85:02:9e:fd:
9b:42:86:1d:37:13:77:3f:04:6c:a8:2f:e3:a9:19:
03:15:c1:e1:38:63:b0:e5:e1:9a:7c:08:81:3c:a6:
f2:ee:51:6f:f4:2f:cd:a6:b1:2b:3b:e0:69:fd:48:
2f:40:b0:6a:25:62:b1:f0:1b:e6:f2:62:ea:06:1b:
2e:f6:20:bf:0e:c5:08:a2:3b:37:ba:70:47:fa:31:
71:71:93:e1:c9:b2:58:47:78:45:22:e0:e0:80:e2:
d9:43:ce:a5:cb:65:2d:cd:a8:db:54:3d:1f:b3:82:
29:dd:6a:f7:1d:59:97:f3:2c:49:35:f9:49:9a:96:
87:03:7a:5f:5b:af:4f:11:ac:53:56:cf:35:cf:2c:
70:16:b6:1b:70:6b:71:ce:1b:c8:42:27:c3:09:ff:
98:eb:c5:25:62:ae:6d:05:c3:81:d5:fb:6c:2f:e3:
86:81:c7:2f:9b:ea:66:fe:29:15:84:bf:c9:67:11:
df:2c:73:92:70:1b:33:46:a8:9e:9f:73:f8:fd:85:
3d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A1:81:C3:E3:27:AE:90:1E:61:72:11:6B:94:8A:70:4C:9C:16:3A
X509v3 Authority Key Identifier:
keyid:63:C4:25:04:F7:04:E5:36:AD:DF:4D:41:DF:02:79:65:A6:2F:7B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/63C42504F704E536ADDF4D41DF027965A62F7B11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/63C42504F704E536ADDF4D41DF027965A62F7B11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/323430323a383738303a313037393a3a2f34382d3438203d3e203633383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:8780:1079::/48
Signature Algorithm: sha256WithRSAEncryption
ab:01:75:b6:7e:54:9d:7b:1b:a5:64:af:4c:31:80:2c:23:f6:
a9:ec:fe:a6:25:f3:25:1d:20:05:21:5a:35:ee:d2:1f:db:47:
56:bc:99:b7:76:50:ae:49:61:b8:c8:7c:09:dc:4e:25:66:e7:
d7:d3:85:81:c8:89:f3:f0:16:68:6d:01:2e:07:d6:91:5e:ba:
b2:06:a0:72:84:56:74:37:d2:33:7e:6f:c0:42:d4:7e:d5:c9:
15:a5:59:c3:26:4e:7e:76:49:9e:be:00:63:1f:75:2d:52:97:
72:43:6f:71:38:30:71:9b:0c:ca:0a:8f:2e:5b:65:17:c1:7e:
59:c7:40:1c:23:28:2e:a4:e0:c0:01:08:5d:17:4c:9a:2f:fc:
14:61:30:48:78:55:a5:90:22:c9:91:6c:83:28:c3:7b:d2:ff:
46:a5:3e:d4:9d:86:5c:ee:9b:d0:fb:58:52:e7:8f:2b:b8:76:
d2:36:e6:4d:d5:de:b8:a1:90:4e:68:d0:4c:fd:54:27:f4:7e:
28:05:cd:c3:3b:c0:7c:99:0f:07:21:b6:ab:07:05:26:18:bc:
ff:59:6c:6c:1f:1b:7e:e6:d7:d6:b9:76:71:d5:37:25:91:24:
ab:53:c5:c6:b7:1f:9a:05:65:a1:1f:5f:22:03:1a:9b:cc:5d:
c9:20:b8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:47:16 2026 by rpki-client