
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a31333a3a2f34382d3438203d3e20313339393439.roa
File: 323430353a616163303a31333a3a2f34382d3438203d3e20313339393439.roa (raw, json)
Hash identifier: 86KYh5c/IuLAigWeCuMUAIuQFk/EhQGZhdAQOuiZKLs=
Subject key identifier: F0:F2:06:59:EC:6A:09:15:A9:98:CF:FB:FF:95:D8:93:F5:78:B4:FE
Certificate issuer: /CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
Certificate serial: 094C118E4A730360C30517045DB304D66E0CC41B
Authority key identifier: 0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a31333a3a2f34382d3438203d3e20313339393439.roa
Signing time: Sun 03 May 2026 02:28:20 +0000
ROA not before: Sun 03 May 2026 02:23:20 +0000
ROA not after: Sun 02 May 2027 02:28:20 +0000
asID: 139949
IP address blocks: 2405:aac0:13::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl
rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:4c:11:8e:4a:73:03:60:c3:05:17:04:5d:b3:04:d6:6e:0c:c4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
Validity
Not Before: May 3 02:23:20 2026 GMT
Not After : May 2 02:28:20 2027 GMT
Subject: CN=F0F20659EC6A0915A998CFFBFF95D893F578B4FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5c:f5:e8:75:43:3b:ad:ea:76:f2:99:fa:d4:
1b:df:c1:cc:05:d4:7a:ce:03:a0:78:f9:7b:6f:3e:
db:2f:cf:73:62:1d:60:21:fa:ba:c1:d8:5b:20:a3:
b1:89:10:d2:ae:e6:19:9e:6f:c6:bb:5b:fa:7f:04:
83:e4:a2:71:30:09:b0:87:7b:52:b9:54:0e:66:c7:
34:1d:d7:0c:4c:95:11:c2:08:f8:1b:95:f9:94:b8:
73:7f:3a:75:cc:95:21:fe:c2:09:cb:72:51:8c:09:
e9:40:b8:93:5c:c2:f7:93:c8:58:20:37:2a:32:1d:
33:bb:b8:51:01:06:a2:5c:ab:ae:48:d5:92:02:a1:
79:45:74:51:8f:ed:9a:65:70:1a:5a:df:18:6a:a4:
56:cb:83:25:c7:d1:3a:da:8f:8e:50:67:18:c4:06:
8a:2c:13:67:41:9d:3f:87:0a:3c:97:d7:a2:68:8c:
06:9b:f2:a0:8f:ac:ec:4e:db:0f:a3:04:e0:e5:b8:
ac:54:fa:7d:ca:9f:56:55:e0:20:ad:1e:38:d0:58:
a1:b0:27:35:e0:0c:2a:7b:3b:6f:d6:f4:c7:69:7d:
06:b7:54:69:fa:c9:2b:a4:4b:70:f2:cb:cb:50:d6:
37:68:dd:31:95:17:08:de:b9:6c:8d:86:7e:51:41:
60:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F2:06:59:EC:6A:09:15:A9:98:CF:FB:FF:95:D8:93:F5:78:B4:FE
X509v3 Authority Key Identifier:
keyid:0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a31333a3a2f34382d3438203d3e20313339393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:aac0:13::/48
Signature Algorithm: sha256WithRSAEncryption
3e:84:8a:87:d0:3d:d3:fc:ab:0c:5c:b7:32:7c:8d:a5:59:1a:
2b:2c:e5:13:6a:e8:db:13:72:79:c5:49:da:fe:5e:f6:43:39:
1d:73:5f:cd:58:eb:11:e6:61:f5:34:0f:82:02:32:da:a1:c4:
14:d7:c4:c6:2e:e6:94:e4:7d:c0:6f:95:18:67:05:d1:f4:a9:
46:69:72:a7:be:3c:6b:cb:c4:da:d2:af:a8:e8:ee:b8:e1:92:
7d:8f:f3:39:d0:be:e4:ac:7f:db:c2:86:91:66:82:f6:06:43:
c8:0a:15:85:13:68:6a:10:5d:7d:55:6c:61:c7:a6:5f:89:0d:
43:ad:8d:a2:e4:cf:30:de:ee:ab:87:60:28:df:b2:e6:6b:6b:
bf:5e:59:04:33:d3:dc:27:3c:72:cb:6a:26:07:b6:a5:e7:ef:
cb:e7:d8:d4:d3:b7:37:b1:f5:0b:5f:89:93:8c:4e:86:03:a7:
57:68:3b:d1:c1:af:0c:69:b5:36:c0:bb:39:b4:d6:29:86:ff:
95:af:ca:a0:1c:eb:dc:13:e2:ee:4d:93:5e:c5:25:74:6b:bc:
74:e6:b5:7d:b1:d7:c5:c2:33:6e:65:3f:31:4f:34:9c:26:36:
e2:21:bb:8d:bc:bc:6a:40:55:d4:83:3c:1d:08:aa:4f:41:d0:
ef:d0:74:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:50:17 2026 by rpki-client