
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a383a3a2f34382d3438203d3e20313339393439.roa
File: 323430353a616163303a383a3a2f34382d3438203d3e20313339393439.roa (raw, json)
Hash identifier: Tqgt3drK7GXDeIa386l7SvcEvHjLdUOZAMzwjcI/FPU=
Subject key identifier: 3A:9A:E1:6B:62:94:97:64:5E:A6:37:04:98:EF:B2:9F:3F:8A:0E:91
Certificate issuer: /CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
Certificate serial: 33C82CDF1DE3B5A47712E93B147447F775316315
Authority key identifier: 0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a383a3a2f34382d3438203d3e20313339393439.roa
Signing time: Sun 03 May 2026 02:28:18 +0000
ROA not before: Sun 03 May 2026 02:23:18 +0000
ROA not after: Sun 02 May 2027 02:28:18 +0000
asID: 139949
IP address blocks: 2405:aac0:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl
rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:c8:2c:df:1d:e3:b5:a4:77:12:e9:3b:14:74:47:f7:75:31:63:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
Validity
Not Before: May 3 02:23:18 2026 GMT
Not After : May 2 02:28:18 2027 GMT
Subject: CN=3A9AE16B629497645EA6370498EFB29F3F8A0E91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:26:62:38:49:00:89:9c:cd:3d:30:2c:59:40:
0d:56:b7:82:85:9b:ad:ef:61:ca:c5:6b:d2:7f:fe:
c8:70:38:55:a1:ca:a5:cc:df:7b:f3:96:be:9a:48:
04:ef:7e:a7:39:55:16:c8:70:34:fb:9c:b5:ef:e6:
16:a9:bf:44:1c:e9:31:83:f5:89:f5:c2:fd:26:4c:
09:e5:ac:ac:ac:09:4c:f2:78:c6:56:a6:ff:7d:60:
e6:c7:76:9f:3e:10:41:3e:b1:b5:af:ef:d0:24:1c:
ef:5c:e1:fa:14:f9:c0:35:cd:df:d1:39:7a:a2:3c:
70:f6:d1:12:8c:7f:31:8f:67:7e:57:07:88:83:32:
b8:4a:45:69:2a:71:a6:7f:26:d9:09:1d:cc:cd:11:
4e:78:b2:a8:47:79:11:8f:6a:7f:40:dc:de:ee:1e:
c4:2a:e2:57:6e:bd:2f:44:76:80:93:ad:cf:74:85:
ff:76:53:39:7e:38:ed:56:a0:49:3e:70:42:15:1a:
3a:ea:4d:a1:26:a9:b0:67:10:21:96:65:7b:af:2e:
04:dd:da:22:c9:29:6b:45:5b:b9:0c:84:51:b8:d3:
fe:2c:da:15:46:9d:d8:23:be:c9:c6:df:0d:74:d4:
7c:7a:f3:77:bf:35:19:b3:96:0f:a3:b4:44:d4:bd:
7e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9A:E1:6B:62:94:97:64:5E:A6:37:04:98:EF:B2:9F:3F:8A:0E:91
X509v3 Authority Key Identifier:
keyid:0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a383a3a2f34382d3438203d3e20313339393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:aac0:8::/48
Signature Algorithm: sha256WithRSAEncryption
7c:08:53:8f:8d:84:d7:f8:4a:8b:f8:b1:9a:49:54:01:61:4b:
fa:a8:70:a2:f6:6b:8d:48:fe:39:53:aa:ac:b7:95:72:ac:3c:
8e:9b:8b:5f:c6:e8:3d:d5:f2:21:ac:85:a7:04:4c:cd:a8:d0:
01:1e:ad:e0:92:bd:5c:08:99:62:f2:b3:7e:2d:80:c2:fe:db:
0b:68:79:7a:e9:4a:e9:58:76:9b:5e:c6:a5:98:c6:ff:9b:3f:
3e:e7:a3:24:aa:59:87:d7:26:ce:38:fa:97:cf:4b:26:0c:9f:
17:7c:8c:f1:95:ab:13:61:64:cf:23:72:f6:99:c6:0c:68:6c:
26:cd:c5:5f:a4:29:0a:66:81:a4:01:0c:cd:08:0e:d6:d5:88:
c4:5d:84:3f:2c:32:eb:36:5e:e3:f9:d7:c3:e9:19:5d:f2:90:
97:a3:ff:4e:3b:27:ad:35:3a:19:b3:68:7e:eb:c1:12:86:bc:
c0:6d:d5:cd:99:5e:2c:a5:61:8f:79:95:89:66:59:da:46:2e:
87:7a:9e:f9:0f:9c:78:6f:e9:f7:40:52:b2:8b:c4:77:36:98:
af:98:a1:88:3a:0c:57:f4:de:b9:d9:94:7d:26:7b:dd:c0:0e:
5a:6b:c5:b6:1d:28:a7:92:95:91:86:93:56:d6:89:f8:27:44:
f6:1e:d1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:46:47 2026 by rpki-client