
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a31303a3a2f34382d3438203d3e20313339393439.roa
File: 323430353a616163303a31303a3a2f34382d3438203d3e20313339393439.roa (raw, json)
Hash identifier: u0O5vTBofznHSsZnXIqEqyWifadBtav5TUAMlqeY8Jg=
Subject key identifier: 72:A9:0C:9F:B4:5F:58:1C:C8:CB:74:35:60:F5:F2:F0:C0:49:F7:04
Certificate issuer: /CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
Certificate serial: 6D7F966BBAF9AAB147CCBDEF94216663A7AA7CE6
Authority key identifier: 0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a31303a3a2f34382d3438203d3e20313339393439.roa
Signing time: Sun 03 May 2026 02:28:15 +0000
ROA not before: Sun 03 May 2026 02:23:15 +0000
ROA not after: Sun 02 May 2027 02:28:15 +0000
asID: 139949
IP address blocks: 2405:aac0:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl
rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:7f:96:6b:ba:f9:aa:b1:47:cc:bd:ef:94:21:66:63:a7:aa:7c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
Validity
Not Before: May 3 02:23:15 2026 GMT
Not After : May 2 02:28:15 2027 GMT
Subject: CN=72A90C9FB45F581CC8CB743560F5F2F0C049F704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6d:bf:3c:c3:ba:69:21:53:6a:ca:76:0b:a4:
90:97:ee:ab:10:4a:48:3c:88:4e:b9:73:42:e9:61:
4d:b9:6d:6d:f5:ae:1b:42:9e:25:66:8e:6b:7b:d1:
df:00:bd:a7:93:bc:ca:0f:74:5a:dd:de:a7:c3:26:
cc:d7:ed:10:b2:1a:cf:1b:42:c0:7a:a7:ad:39:29:
3a:1a:07:01:45:b2:1e:b5:df:cb:b3:73:02:7a:69:
4e:b9:f8:1d:05:72:c9:00:ac:2a:ef:c4:6f:1f:5b:
d5:f0:9d:91:56:ff:ae:89:99:f8:8f:3f:54:16:23:
30:be:ad:89:75:dd:0e:e0:df:6c:9e:d9:bc:d2:e0:
e6:27:61:8e:a5:97:f3:11:bc:16:c7:9a:1c:1b:f8:
c6:16:26:a5:c9:3d:02:3e:a1:d8:fe:4d:46:04:ea:
64:ff:63:02:8e:a5:bf:1f:69:a0:ee:0d:77:7e:ca:
8f:23:02:3e:25:cd:67:b9:1b:8e:ef:ce:5c:8d:f5:
4e:73:b2:0c:6f:03:f6:e2:1b:5b:3a:a0:56:44:29:
86:18:aa:8b:b0:dd:e2:fa:d7:7c:fa:c2:2d:a1:1e:
c8:7d:da:c3:36:e9:6a:67:aa:46:94:e3:1f:be:98:
09:29:b9:ae:00:a6:0d:a0:eb:89:0c:a5:a5:2f:a8:
e2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A9:0C:9F:B4:5F:58:1C:C8:CB:74:35:60:F5:F2:F0:C0:49:F7:04
X509v3 Authority Key Identifier:
keyid:0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a31303a3a2f34382d3438203d3e20313339393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:aac0:10::/48
Signature Algorithm: sha256WithRSAEncryption
18:2f:35:52:45:a7:dc:b4:7d:bd:21:a6:3c:3e:03:eb:bf:9a:
fa:e4:3c:7b:5b:8c:b7:54:18:9c:f5:87:f7:9c:6f:2a:40:47:
79:bf:1f:c4:45:b6:59:01:b8:36:7d:c0:78:37:2a:df:b2:73:
7e:52:b4:8d:55:9e:8c:d1:7b:6d:a6:df:7e:2c:7e:66:16:cf:
bc:22:ac:35:d2:cb:88:6c:42:1e:0f:4d:d9:db:b9:b4:ca:27:
4d:7d:01:da:c4:d1:b2:0f:fb:87:ae:28:68:9e:a8:c8:21:2a:
e6:2c:75:7d:d3:12:9a:6e:18:80:42:70:c6:4f:e4:22:91:fe:
c2:2a:ab:9c:90:df:5b:63:76:74:59:f8:55:76:a2:b4:f1:2a:
db:12:f9:62:7e:81:33:01:8b:89:e6:5f:3c:2a:28:8e:2f:8d:
da:e2:7c:3a:38:03:6e:69:12:56:f2:08:fc:d8:3b:29:df:a7:
c3:38:ac:5b:a8:ef:56:cf:5b:69:bf:b0:ac:a0:00:a4:86:38:
c4:1e:03:98:35:3e:64:1b:29:99:04:a2:ba:35:4f:a3:89:10:
73:ad:a3:61:5c:c5:2e:b6:25:25:51:09:c1:9c:cc:82:06:5a:
06:0c:ec:0b:fe:c1:a8:e5:c1:ea:a3:8e:c5:dd:6e:a4:25:fe:
e9:85:06:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:36:00 2026 by rpki-client