
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3330303a3a2f34302d3430203d3e20313339393439.roa
File: 323430353a616163303a3330303a3a2f34302d3430203d3e20313339393439.roa (raw, json)
Hash identifier: 3LSZHo7KGcFIped77/dY/bj2hvD5BuU/fpoTjmswjh0=
Subject key identifier: C9:A2:86:EA:1D:70:5F:2B:F9:D3:D5:CF:E6:83:BF:BB:8D:6D:89:23
Certificate issuer: /CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
Certificate serial: 5C6C8D17883B70AD3BE57E459BC25157AB0E42A3
Authority key identifier: 0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3330303a3a2f34302d3430203d3e20313339393439.roa
Signing time: Sun 03 May 2026 02:28:16 +0000
ROA not before: Sun 03 May 2026 02:23:16 +0000
ROA not after: Sun 02 May 2027 02:28:16 +0000
asID: 139949
IP address blocks: 2405:aac0:300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl
rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:6c:8d:17:88:3b:70:ad:3b:e5:7e:45:9b:c2:51:57:ab:0e:42:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
Validity
Not Before: May 3 02:23:16 2026 GMT
Not After : May 2 02:28:16 2027 GMT
Subject: CN=C9A286EA1D705F2BF9D3D5CFE683BFBB8D6D8923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:33:bd:b7:06:54:7e:13:58:d5:76:50:f4:a2:
f6:6c:19:5e:76:14:38:32:5d:ed:3b:2c:a7:82:58:
da:61:12:59:59:cd:8c:81:91:76:9f:2a:07:ca:24:
57:16:ee:56:d1:d2:1d:91:ae:1d:fc:89:66:7c:72:
b9:e1:62:a4:53:a7:e4:21:ff:d5:ae:df:f6:11:f7:
f9:49:8a:77:03:1f:e5:e4:fb:c0:02:c2:8c:9e:69:
4d:2f:f5:54:a5:8c:fb:23:4b:8f:d8:98:76:ce:31:
cc:1d:fd:1b:43:8c:ef:20:03:15:f1:2a:8b:6b:15:
74:86:10:b0:6d:6b:0f:e6:3e:c7:00:02:11:99:22:
ec:dc:fd:11:e0:19:af:24:8e:5c:7c:2d:b6:2f:1a:
cf:d6:b7:80:c2:d3:3f:bb:b5:9f:56:c0:06:1a:9e:
0d:3e:f1:79:21:03:27:49:2f:a7:67:17:18:96:7d:
55:19:b5:7e:eb:c4:e5:9f:8a:0b:dc:d6:bc:4f:91:
cc:1b:aa:46:14:39:f2:ce:79:a2:5c:85:44:02:14:
35:57:c5:00:8d:4b:63:16:4f:da:6f:7c:fe:2a:35:
9d:4c:8b:19:97:de:d6:b0:98:cf:8e:8b:ec:76:ac:
38:89:59:97:75:34:c1:b4:b0:24:fd:5c:a1:0e:d9:
92:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A2:86:EA:1D:70:5F:2B:F9:D3:D5:CF:E6:83:BF:BB:8D:6D:89:23
X509v3 Authority Key Identifier:
keyid:0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a3330303a3a2f34302d3430203d3e20313339393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:aac0:300::/40
Signature Algorithm: sha256WithRSAEncryption
6e:27:7d:d5:d4:38:c8:be:bc:92:26:86:99:1a:de:07:2b:9d:
5d:e4:53:06:5f:4b:60:26:8d:c0:60:b1:2c:ad:00:4b:e8:0a:
f7:9f:13:a6:57:ec:0d:c8:05:9c:8f:62:25:ad:4d:f7:7d:aa:
58:72:dc:b9:bb:08:1f:b9:ac:4c:2c:46:a3:47:66:88:3c:0c:
f2:8b:e9:ee:d4:08:e9:02:a8:f2:98:98:51:79:a0:68:8d:15:
1e:e0:24:ef:44:57:27:a3:20:81:c0:b6:4e:c7:ad:bf:02:11:
1d:77:56:c0:7f:85:10:5b:22:97:2d:e3:b9:61:2a:a7:8f:e8:
21:7c:08:41:25:0a:24:3c:7d:e4:3d:29:c2:08:be:19:9b:f3:
47:6e:8f:8e:be:ce:16:72:83:d3:e0:02:65:8a:bf:15:af:4b:
e0:63:17:60:8c:ba:d0:44:c3:86:34:2f:51:ee:6d:c5:4a:9e:
65:1c:a7:04:a9:ae:e9:cd:3b:d1:86:92:ca:06:a1:30:53:e8:
3f:00:41:4f:35:90:05:a8:c0:ef:0a:66:29:32:3a:bc:bd:bd:
bd:fb:83:7f:e3:14:f4:55:a3:11:56:88:b5:d5:f2:2f:77:ca:
ae:ae:ba:a1:aa:a7:11:e6:aa:9b:06:33:2b:9b:3c:81:65:ba:
67:6d:05:c0
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXGyNF4g7cK075X5Fm8JRV6sOQqMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEEwMjQ0NjJGRkRBN0UyNkU1RDM2NjYxQUFBREUyQzYw
MUQwNjRGMDAeFw0yNjA1MDMwMjIzMTZaFw0yNzA1MDIwMjI4MTZaMDMxMTAvBgNV
BAMTKEM5QTI4NkVBMUQ3MDVGMkJGOUQzRDVDRkU2ODNCRkJCOEQ2RDg5MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCM723BlR+E1jVdlD0ovZsGV52
FDgyXe07LKeCWNphEllZzYyBkXafKgfKJFcW7lbR0h2Rrh38iWZ8crnhYqRTp+Qh
/9Wu3/YR9/lJincDH+Xk+8ACwoyeaU0v9VSljPsjS4/YmHbOMcwd/RtDjO8gAxXx
KotrFXSGELBtaw/mPscAAhGZIuzc/RHgGa8kjlx8LbYvGs/Wt4DC0z+7tZ9WwAYa
ng0+8XkhAydJL6dnFxiWfVUZtX7rxOWfigvc1rxPkcwbqkYUOfLOeaJchUQCFDVX
xQCNS2MWT9pvfP4qNZ1MixmX3tawmM+Oi+x2rDiJWZd1NMG0sCT9XKEO2ZJDAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUyaKG6h1wXyv509XP5oO/u41tiSMwHwYDVR0j
BBgwFoAUCgJEYv/afibl02Zhqq3ixgHQZPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2RlZGMwMzMtY2Q0ZC00NjIwLTkzNzItZTZlMDM5ZmMwNmI5LzAvMEEwMjQ0NjJG
RkRBN0UyNkU1RDM2NjYxQUFBREUyQzYwMUQwNjRGMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wQTAyNDQ2MkZGREE3RTI2RTVEMzY2NjFBQUFERTJDNjAxRDA2
NEYwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUFBzALhoGLcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNkZWRjMDMzLWNkNGQtNDYyMC05
MzcyLWU2ZTAzOWZjMDZiOS8wLzMyMzQzMDM1M2E2MTYxNjMzMDNhMzMzMDMwM2Ez
YTJmMzQzMDJkMzQzMDIwM2QzZTIwMzEzMzM5MzkzNDM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAWq
wAMwDQYJKoZIhvcNAQELBQADggEBAG4nfdXUOMi+vJImhpka3gcrnV3kUwZfS2Am
jcBgsSytAEvoCvefE6ZX7A3IBZyPYiWtTfd9qlhy3Lm7CB+5rEwsRqNHZog8DPKL
6e7UCOkCqPKYmFF5oGiNFR7gJO9EVyejIIHAtk7Hrb8CER13VsB/hRBbIpct47lh
KqeP6CF8CEElCiQ8feQ9KcIIvhmb80duj46+zhZyg9PgAmWKvxWvS+BjF2CMutBE
w4Y0L1HubcVKnmUcpwSprunNO9GGksoGoTBT6D8AQU81kAWowO8KZikyOry9vb37
g3/jFPRVoxFWiLXV8i93yq6uuqGqpxHmqpsGMyubPIFlumdtBcA=
-----END CERTIFICATE-----
Generated at Wed May 13 06:11:58 2026 by rpki-client