
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3232343a3a2f34382d3438203d3e20313339393439.roa
File: 323430353a616163303a3232343a3a2f34382d3438203d3e20313339393439.roa (raw, json)
Hash identifier: ByNHObLn5iawwqUssg4fznvmFNVGWZf3GbNxjGk0nAU=
Subject key identifier: 72:E9:02:C3:6B:FD:87:DF:BD:77:CF:C4:4A:3E:FC:9F:39:DE:ED:E5
Certificate issuer: /CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
Certificate serial: 2DC914457D99DD9475881AF9384A47DE3AD6CBA8
Authority key identifier: 0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3232343a3a2f34382d3438203d3e20313339393439.roa
Signing time: Sun 03 May 2026 02:28:11 +0000
ROA not before: Sun 03 May 2026 02:23:11 +0000
ROA not after: Sun 02 May 2027 02:28:11 +0000
asID: 139949
IP address blocks: 2405:aac0:224::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl
rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:c9:14:45:7d:99:dd:94:75:88:1a:f9:38:4a:47:de:3a:d6:cb:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
Validity
Not Before: May 3 02:23:11 2026 GMT
Not After : May 2 02:28:11 2027 GMT
Subject: CN=72E902C36BFD87DFBD77CFC44A3EFC9F39DEEDE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4f:19:91:0e:0f:58:fa:c0:cb:3b:6f:b1:b4:
84:31:44:12:43:f5:f4:9e:59:bd:0c:30:0d:e6:1c:
16:b7:7b:f0:fc:d7:9c:aa:90:21:cf:27:f6:04:10:
2b:80:a4:71:a4:82:8a:d5:29:b6:ce:a2:71:4c:7a:
a7:74:b4:27:4d:ff:3e:74:91:c5:8d:7f:16:d4:10:
a7:b2:29:1d:38:dd:8a:64:d3:3d:83:00:d4:51:fe:
14:84:90:84:7c:dc:99:5d:a7:d0:37:07:ff:97:52:
13:94:40:bb:68:4a:46:46:52:11:99:93:de:fa:b2:
f9:7e:43:c1:a1:cf:76:6a:b2:5f:d3:33:05:48:31:
c7:a1:fa:f3:1b:94:6d:8e:a3:b4:a1:42:b0:ea:37:
dd:48:75:8c:34:d5:a3:01:71:dc:ff:94:47:4c:04:
f2:e8:19:50:7b:c6:f0:57:1e:12:77:a3:da:0b:d3:
d0:70:4c:ab:e3:59:55:9a:9b:68:19:a4:57:ab:e8:
94:58:88:62:92:72:43:ae:a4:6a:c4:1d:aa:e3:54:
bb:1b:e6:43:24:8e:f6:77:52:0b:43:3f:86:31:f0:
8d:cb:cc:44:5e:dd:3b:8d:c0:40:e5:ba:49:06:e7:
2f:9f:89:73:99:7b:9b:dc:20:2e:28:e6:2d:ba:7b:
18:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E9:02:C3:6B:FD:87:DF:BD:77:CF:C4:4A:3E:FC:9F:39:DE:ED:E5
X509v3 Authority Key Identifier:
keyid:0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3232343a3a2f34382d3438203d3e20313339393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:aac0:224::/48
Signature Algorithm: sha256WithRSAEncryption
ae:21:79:08:82:f6:d2:be:ec:18:78:77:a9:79:7c:c5:b1:f1:
f5:f8:af:2f:75:db:c2:0b:72:86:bc:59:c6:bf:21:6c:4c:b0:
a0:74:70:a1:84:33:ff:47:26:ed:71:1b:d2:8c:06:c7:08:1f:
16:a6:19:89:59:bf:a8:bf:d0:79:bb:00:8a:8d:ef:9c:04:c8:
89:b8:f8:e2:64:ef:fb:6a:b3:9f:ed:01:cb:71:a7:3b:6a:a0:
10:3c:21:a2:e8:3e:6d:c9:09:1f:af:71:0f:cf:93:53:c2:54:
12:f4:1c:2f:b4:c0:f6:bb:9b:1a:4b:03:21:61:1e:94:bc:10:
2c:d6:14:8f:00:b3:10:ce:a2:61:9a:2f:18:f7:57:c3:fe:8f:
56:80:ff:47:8f:8f:eb:8c:4e:94:00:77:d7:f0:73:8d:5d:fb:
09:de:08:25:f5:6a:c9:9d:b9:07:44:d8:93:2b:5f:5d:3c:11:
05:c5:64:b6:9c:cd:c8:e1:79:e6:bb:ac:f9:7b:12:dc:ce:c6:
ac:60:1f:c3:e7:49:2c:7a:cc:39:4a:e8:92:9a:c6:f6:06:1d:
bb:81:f1:fd:e9:9c:02:6e:c5:b6:23:a7:06:08:39:35:e1:1d:
b6:b2:18:76:c9:8c:45:4e:6b:c2:bd:a1:3a:89:bd:ed:c9:fb:
66:94:af:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:10:30 2026 by rpki-client