
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a35363a3a2f34382d3438203d3e20313339393439.roa
File: 323430353a616163303a35363a3a2f34382d3438203d3e20313339393439.roa (raw, json)
Hash identifier: kvPmkHg80Y42Kmf/Fnmg9nfxSrysPpOetVrslvSXQbc=
Subject key identifier: 76:FF:E0:68:48:89:14:6E:AD:C0:39:74:9F:5C:19:96:25:6D:47:38
Certificate issuer: /CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
Certificate serial: 59F92AD5AA5339EA727C467A86CD0A26042512E5
Authority key identifier: 0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a35363a3a2f34382d3438203d3e20313339393439.roa
Signing time: Sun 03 May 2026 02:28:15 +0000
ROA not before: Sun 03 May 2026 02:23:15 +0000
ROA not after: Sun 02 May 2027 02:28:15 +0000
asID: 139949
IP address blocks: 2405:aac0:56::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl
rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:f9:2a:d5:aa:53:39:ea:72:7c:46:7a:86:cd:0a:26:04:25:12:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
Validity
Not Before: May 3 02:23:15 2026 GMT
Not After : May 2 02:28:15 2027 GMT
Subject: CN=76FFE0684889146EADC039749F5C1996256D4738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5b:ba:e8:2c:f7:ce:7b:3f:5f:19:f2:6f:c7:
10:ea:cc:f5:72:d3:80:c1:f3:1f:ea:05:b0:91:0b:
65:d5:fa:e5:a7:e6:5c:34:62:5d:c2:7d:b6:5f:bd:
ea:bd:85:f9:94:43:57:e4:b1:dc:9c:5b:cc:2d:ba:
87:71:0b:f7:fc:27:6d:9b:08:ae:ff:d6:54:55:ba:
f2:13:5c:a1:e2:d8:fd:70:44:84:6f:3d:fc:72:c4:
50:f0:f4:6b:00:46:36:68:29:3c:1a:df:14:94:03:
1a:21:ec:aa:b3:20:3b:b8:0f:5b:0a:d6:ef:39:07:
1e:7a:a6:5b:88:93:26:8f:b4:39:51:ee:e7:b6:53:
a2:8e:9d:8f:cd:e0:23:ac:f2:e1:74:a9:2c:82:32:
2f:03:69:90:7b:a5:6c:84:8c:99:05:a6:92:50:28:
c8:60:c8:20:98:f3:82:4e:22:3f:d4:9f:4e:02:22:
d8:3e:85:28:5b:98:bd:e7:d6:32:c3:70:fb:f4:30:
97:a3:98:49:4a:a6:b0:4f:52:7b:5b:7e:62:4c:70:
72:57:08:3b:a8:27:e0:65:98:6d:16:ed:74:b9:d4:
31:a6:73:8b:f3:98:88:4d:11:51:71:ab:de:17:fe:
cb:02:3b:8f:fd:a0:ca:b0:f9:7a:79:8a:49:c4:cb:
04:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FF:E0:68:48:89:14:6E:AD:C0:39:74:9F:5C:19:96:25:6D:47:38
X509v3 Authority Key Identifier:
keyid:0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a35363a3a2f34382d3438203d3e20313339393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:aac0:56::/48
Signature Algorithm: sha256WithRSAEncryption
4c:e7:f8:77:33:fa:db:c6:68:ff:de:67:5f:de:37:53:8c:1a:
3a:75:fc:05:11:fd:03:ca:8b:29:5b:a6:34:b7:d7:0d:9d:74:
26:c2:c9:3e:0e:6b:ff:fd:e9:9e:0d:85:3b:80:c3:07:e3:5a:
16:70:13:9c:b6:f4:3f:b8:9b:1e:98:7c:ed:cc:d0:d9:61:81:
e5:a6:8e:12:fa:f9:9a:92:42:eb:02:bd:b3:75:93:83:53:1f:
2e:af:2c:f0:c1:55:2b:13:06:ba:d2:ed:63:f9:9f:06:60:90:
93:af:be:4f:ef:31:3b:a4:fd:dc:ee:8a:73:37:1e:80:43:0c:
bd:e9:aa:05:1d:6b:ba:a9:7f:c9:89:e5:31:c8:d9:9f:20:19:
6f:ca:36:1f:10:92:04:1b:ce:c7:c0:25:af:c5:a5:54:9e:e2:
f6:c9:d7:b5:2a:87:2d:42:e6:1f:14:ab:12:f6:b9:82:65:3b:
a9:92:88:1a:55:ce:37:bd:38:b6:83:02:54:95:46:07:4f:a5:
d5:e5:dc:31:88:f6:d1:df:10:4a:c5:3e:38:74:47:eb:7b:9c:
e8:e2:78:61:56:37:54:bc:34:f4:57:bb:3e:c2:4d:ed:a8:a5:
85:10:ca:6c:83:d4:50:a7:77:2b:ca:95:d4:e2:40:82:59:d1:
fc:28:b7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:50:52 2026 by rpki-client