
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3130303a3a2f34382d3438203d3e20313339393439.roa
File: 323430353a616163303a3130303a3a2f34382d3438203d3e20313339393439.roa (raw, json)
Hash identifier: UgtghYKKKDTuSQQA5kpJNDjN8zk6XfG5zxbAoPcP27c=
Subject key identifier: 80:71:5A:EA:E9:1E:B1:EA:F4:DD:A4:5D:93:47:CB:91:79:02:BD:75
Certificate issuer: /CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
Certificate serial: 64234CEF85E5DD9093FC3D93965A706C06C1A8CF
Authority key identifier: 0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3130303a3a2f34382d3438203d3e20313339393439.roa
Signing time: Sun 03 May 2026 02:28:12 +0000
ROA not before: Sun 03 May 2026 02:23:12 +0000
ROA not after: Sun 02 May 2027 02:28:12 +0000
asID: 139949
IP address blocks: 2405:aac0:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl
rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:23:4c:ef:85:e5:dd:90:93:fc:3d:93:96:5a:70:6c:06:c1:a8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
Validity
Not Before: May 3 02:23:12 2026 GMT
Not After : May 2 02:28:12 2027 GMT
Subject: CN=80715AEAE91EB1EAF4DDA45D9347CB917902BD75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a6:e2:c6:df:0d:c8:fb:18:d8:c2:af:5a:4f:
d3:fe:7a:02:0e:8e:56:f3:fe:97:f0:6c:9d:c6:84:
f7:89:de:d5:86:8c:90:56:b5:b5:ff:41:be:e1:a4:
8c:be:79:ee:af:74:17:21:25:5e:29:ff:76:ab:a2:
4c:2e:36:04:70:1f:d3:f6:88:0e:20:6e:98:80:b3:
7d:9f:38:f4:a4:42:cf:30:bf:80:ec:64:e7:c3:39:
f7:b9:d6:b8:19:af:b3:d6:21:9f:da:1b:4e:be:19:
9d:92:da:82:f2:c7:ee:be:a9:3d:3b:ee:b9:22:f3:
11:f1:b0:45:21:30:7d:04:c8:35:4a:67:71:6f:c8:
7c:f3:0f:c6:59:0d:cc:ba:49:11:ec:ba:7d:c5:33:
78:30:db:2c:9a:f6:47:9e:d7:bb:65:f9:eb:c6:c9:
49:16:53:13:02:84:4d:1b:b5:2b:20:5f:10:ca:15:
0f:c8:c8:c3:f8:0a:18:d3:53:c8:bb:48:bf:0d:02:
04:cc:dd:96:3c:f8:d0:2f:b3:d8:64:1e:f5:68:30:
e0:0c:6b:b7:fd:8c:ac:a3:19:fa:d1:61:f5:f8:e6:
e9:e6:96:08:ef:29:a0:ea:17:58:9d:2b:96:b6:e9:
d2:21:97:aa:06:41:5d:5d:19:cb:b7:f4:62:77:a8:
0c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:71:5A:EA:E9:1E:B1:EA:F4:DD:A4:5D:93:47:CB:91:79:02:BD:75
X509v3 Authority Key Identifier:
keyid:0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3130303a3a2f34382d3438203d3e20313339393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:aac0:100::/48
Signature Algorithm: sha256WithRSAEncryption
5c:fc:97:40:f5:bf:02:d3:64:10:80:0e:15:4a:da:9e:54:3d:
78:ad:d7:05:81:a9:7c:7e:f9:45:00:ed:33:b0:65:25:a3:c2:
14:b5:d1:0b:01:a9:f7:c1:fe:cf:08:94:a4:e5:06:53:84:ff:
8f:56:d9:0d:d7:45:b4:13:bc:ec:fa:93:85:03:cd:dd:b0:6b:
81:9c:7e:34:1d:2e:aa:28:b3:2a:14:ca:c0:c5:e2:93:16:59:
63:3a:cf:d1:bf:81:f7:57:82:84:68:96:57:46:78:04:d5:da:
a9:c1:c6:96:d9:2b:15:58:d0:00:95:40:f3:b0:76:8f:b2:55:
63:54:7f:74:5b:16:13:a3:82:0e:64:4f:4a:e9:1b:c8:86:80:
c0:7f:b9:24:71:4f:8f:1d:36:f9:bf:bd:93:d2:7c:03:e8:2a:
f5:be:e7:cb:24:83:6e:3c:13:ec:03:a2:26:ee:67:c4:2c:a0:
a9:a5:9e:05:c0:6d:f7:e7:1b:be:69:f2:79:81:eb:9f:1c:19:
9e:a7:0f:d7:d1:3c:1a:06:50:56:a0:df:ba:bd:9d:6a:b3:01:
53:56:75:e7:7e:ee:0f:7f:59:23:88:fb:50:3e:b4:1e:90:61:
50:c7:06:18:31:91:b2:27:a5:bc:a7:b6:f3:59:b9:f0:88:ef:
52:cb:33:cb
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUZCNM74Xl3ZCT/D2TllpwbAbBqM8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEEwMjQ0NjJGRkRBN0UyNkU1RDM2NjYxQUFBREUyQzYw
MUQwNjRGMDAeFw0yNjA1MDMwMjIzMTJaFw0yNzA1MDIwMjI4MTJaMDMxMTAvBgNV
BAMTKDgwNzE1QUVBRTkxRUIxRUFGNEREQTQ1RDkzNDdDQjkxNzkwMkJENzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmpuLG3w3I+xjYwq9aT9P+egIO
jlbz/pfwbJ3GhPeJ3tWGjJBWtbX/Qb7hpIy+ee6vdBchJV4p/3arokwuNgRwH9P2
iA4gbpiAs32fOPSkQs8wv4DsZOfDOfe51rgZr7PWIZ/aG06+GZ2S2oLyx+6+qT07
7rki8xHxsEUhMH0EyDVKZ3FvyHzzD8ZZDcy6SRHsun3FM3gw2yya9kee17tl+evG
yUkWUxMChE0btSsgXxDKFQ/IyMP4ChjTU8i7SL8NAgTM3ZY8+NAvs9hkHvVoMOAM
a7f9jKyjGfrRYfX45unmlgjvKaDqF1idK5a26dIhl6oGQV1dGcu39GJ3qAz5AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUgHFa6ukeser03aRdk0fLkXkCvXUwHwYDVR0j
BBgwFoAUCgJEYv/afibl02Zhqq3ixgHQZPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2RlZGMwMzMtY2Q0ZC00NjIwLTkzNzItZTZlMDM5ZmMwNmI5LzAvMEEwMjQ0NjJG
RkRBN0UyNkU1RDM2NjYxQUFBREUyQzYwMUQwNjRGMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wQTAyNDQ2MkZGREE3RTI2RTVEMzY2NjFBQUFERTJDNjAxRDA2
NEYwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNkZWRjMDMzLWNkNGQtNDYyMC05
MzcyLWU2ZTAzOWZjMDZiOS8wLzMyMzQzMDM1M2E2MTYxNjMzMDNhMzEzMDMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM5MzkzNDM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAWq
wAEAMA0GCSqGSIb3DQEBCwUAA4IBAQBc/JdA9b8C02QQgA4VStqeVD14rdcFgal8
fvlFAO0zsGUlo8IUtdELAan3wf7PCJSk5QZThP+PVtkN10W0E7zs+pOFA83dsGuB
nH40HS6qKLMqFMrAxeKTFlljOs/Rv4H3V4KEaJZXRngE1dqpwcaW2SsVWNAAlUDz
sHaPslVjVH90WxYTo4IOZE9K6RvIhoDAf7kkcU+PHTb5v72T0nwD6Cr1vufLJINu
PBPsA6Im7mfELKCppZ4FwG335xu+afJ5geufHBmepw/X0TwaBlBWoN+6vZ1qswFT
VnXnfu4Pf1kjiPtQPrQekGFQxwYYMZGyJ6W8p7bzWbnwiO9SyzPL
-----END CERTIFICATE-----
Generated at Wed May 13 09:08:46 2026 by rpki-client