
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a31343a3a2f34382d3438203d3e20313339393439.roa
File: 323430353a616163303a31343a3a2f34382d3438203d3e20313339393439.roa (raw, json)
Hash identifier: 2uItblLkmHUtUXNvF9T75S0Y41mhc0tiaoJz8UwHxqo=
Subject key identifier: 75:2E:5E:AF:CF:D8:6E:80:0D:70:40:A7:1B:B5:C7:CC:09:97:BC:19
Certificate issuer: /CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
Certificate serial: 2734D5FA290E023E08F2DCB5225C95C3E5221FA2
Authority key identifier: 0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a31343a3a2f34382d3438203d3e20313339393439.roa
Signing time: Sun 03 May 2026 02:28:19 +0000
ROA not before: Sun 03 May 2026 02:23:19 +0000
ROA not after: Sun 02 May 2027 02:28:19 +0000
asID: 139949
IP address blocks: 2405:aac0:14::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl
rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:34:d5:fa:29:0e:02:3e:08:f2:dc:b5:22:5c:95:c3:e5:22:1f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
Validity
Not Before: May 3 02:23:19 2026 GMT
Not After : May 2 02:28:19 2027 GMT
Subject: CN=752E5EAFCFD86E800D7040A71BB5C7CC0997BC19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:00:47:4a:cf:9e:74:b6:d6:54:a7:53:59:14:
a3:46:ee:b1:cd:30:1d:bc:ea:2a:26:29:a2:a8:f4:
7f:78:5d:13:c1:b4:aa:4c:44:6b:85:3c:17:a1:0b:
ce:8a:9d:e4:bd:4c:d1:b2:31:34:7e:b5:e6:f7:10:
11:8e:ca:6d:51:b1:a8:8b:d9:a5:ae:9e:4a:6b:45:
f8:54:99:ed:a0:8a:6a:0a:25:9d:31:88:01:68:da:
85:60:ab:1a:3b:af:1c:da:88:b7:e4:13:a1:e4:22:
ca:e2:87:cd:68:ac:ee:cd:9a:aa:d8:05:bd:ac:0b:
63:1f:ec:ca:ee:7b:8b:e1:18:c0:ae:77:1d:8f:89:
14:c8:30:25:1d:34:50:7b:20:ee:d1:6f:13:c0:b4:
62:a3:54:00:70:84:05:48:88:c5:2b:21:29:1a:87:
dc:48:ca:31:23:73:55:b9:09:c9:d6:b9:11:8c:e9:
e0:86:fa:f7:a4:b3:5d:14:9e:e7:68:9d:60:a0:91:
be:e9:68:de:c3:7a:27:d8:ef:95:8f:91:cc:f2:3a:
42:cf:04:00:c0:ae:39:4e:3c:f0:3f:2a:0f:c7:4b:
ea:e1:d4:ec:60:99:ba:68:c1:10:13:e0:70:db:82:
2b:59:cb:99:bb:9d:09:4f:82:30:df:7a:da:f8:d6:
b4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2E:5E:AF:CF:D8:6E:80:0D:70:40:A7:1B:B5:C7:CC:09:97:BC:19
X509v3 Authority Key Identifier:
keyid:0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a31343a3a2f34382d3438203d3e20313339393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:aac0:14::/48
Signature Algorithm: sha256WithRSAEncryption
12:89:96:58:d4:59:7b:ee:5b:28:99:e7:69:19:7f:a6:54:87:
5c:fe:12:81:51:2a:a5:7b:08:49:3d:cc:19:df:b1:a8:09:da:
a5:b4:1c:3f:70:20:f6:90:a8:97:4f:88:16:e1:75:2d:fe:96:
03:c1:44:78:c9:ae:19:3c:b1:14:82:f0:fa:ba:57:7b:08:91:
44:c3:6e:15:50:7e:c3:6c:b9:7c:75:fb:97:35:f8:4c:c4:fb:
37:8d:3f:d8:16:d1:95:00:2a:32:b9:85:2b:db:59:41:b1:64:
c0:4f:61:be:b8:53:fd:7b:23:6c:3d:1b:d4:3c:63:99:69:61:
b1:1f:10:25:31:ff:a1:5d:4b:bd:62:56:c2:8d:f9:69:c6:4a:
d5:f9:e7:a6:44:ae:31:e3:21:ba:9d:cf:72:71:3d:0f:eb:c0:
63:0e:38:21:aa:88:05:90:55:87:6a:ae:6a:34:54:7a:16:ab:
8a:d9:8f:f0:c0:ef:fd:7b:5d:ba:f4:9c:20:be:e8:8b:4c:4b:
44:eb:16:47:e0:1b:b4:65:59:5f:6b:3a:24:1c:00:c3:7a:85:
74:39:1a:04:97:54:39:e7:06:ca:b9:ff:1a:fd:38:7e:2a:1d:
b4:ca:bd:c9:ba:76:4b:17:db:10:6c:9c:93:6b:df:44:2b:95:
3e:61:b8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:04:25 2026 by rpki-client