
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a66653a3a2f34382d3438203d3e20313339393439.roa
File: 323430353a616163303a66653a3a2f34382d3438203d3e20313339393439.roa (raw, json)
Hash identifier: 4PKU8D4LDtx+JijJab3nhgdhfIOpu2XH2Kk8Q5hpOLI=
Subject key identifier: 84:8A:3B:20:5E:A8:A0:E0:DF:D6:34:15:FE:1D:46:3E:CD:53:F7:DB
Certificate issuer: /CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
Certificate serial: 19F2A2395C56037E43099DFEF7D9BF7DDF007F13
Authority key identifier: 0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a66653a3a2f34382d3438203d3e20313339393439.roa
Signing time: Sun 03 May 2026 02:28:14 +0000
ROA not before: Sun 03 May 2026 02:23:14 +0000
ROA not after: Sun 02 May 2027 02:28:14 +0000
asID: 139949
IP address blocks: 2405:aac0:fe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl
rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:f2:a2:39:5c:56:03:7e:43:09:9d:fe:f7:d9:bf:7d:df:00:7f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A024462FFDA7E26E5D36661AAADE2C601D064F0
Validity
Not Before: May 3 02:23:14 2026 GMT
Not After : May 2 02:28:14 2027 GMT
Subject: CN=848A3B205EA8A0E0DFD63415FE1D463ECD53F7DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:ca:00:80:c4:9c:5d:69:60:2a:8a:24:80:
46:7a:a5:05:8f:a2:e0:db:14:58:a0:04:d8:6c:e8:
4f:09:58:b7:f1:d6:a5:d5:26:9d:10:e2:c1:76:24:
b5:85:e8:66:c7:6e:5c:11:1e:40:19:ab:07:09:23:
af:5a:98:a7:07:dc:dc:4b:e8:21:62:06:2a:3e:17:
65:5b:81:60:78:4a:f9:b6:07:1b:61:b2:f5:07:47:
e8:48:f6:b7:39:68:41:37:da:8e:43:38:8b:b7:55:
5e:84:78:58:a6:85:7b:e8:06:e0:62:ab:02:23:ba:
be:00:f8:5a:94:02:48:c8:4e:65:b6:35:0e:83:8f:
ff:d4:53:73:3e:92:ad:83:2c:70:be:c9:b2:85:37:
21:7e:fd:95:20:f4:fb:17:b0:67:20:53:9c:89:75:
a4:65:93:98:81:65:ba:5f:78:99:fb:94:6e:9a:bd:
8c:28:ea:ff:ac:31:3c:ed:8d:78:a4:61:39:26:2b:
4b:92:01:20:a8:0a:a2:97:94:5e:2c:f2:67:c8:f9:
0f:da:97:8a:3d:ac:3e:41:51:6c:cd:2c:9c:1c:dd:
97:ed:e6:51:57:8c:9f:c0:6c:01:7d:a6:ef:57:e9:
be:92:fb:1a:3d:ff:4a:f6:41:b3:92:ca:3f:b5:b3:
91:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8A:3B:20:5E:A8:A0:E0:DF:D6:34:15:FE:1D:46:3E:CD:53:F7:DB
X509v3 Authority Key Identifier:
keyid:0A:02:44:62:FF:DA:7E:26:E5:D3:66:61:AA:AD:E2:C6:01:D0:64:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/0A024462FFDA7E26E5D36661AAADE2C601D064F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A024462FFDA7E26E5D36661AAADE2C601D064F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/323430353a616163303a66653a3a2f34382d3438203d3e20313339393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:aac0:fe::/48
Signature Algorithm: sha256WithRSAEncryption
43:69:d2:88:8f:d3:88:cb:c8:0b:f7:41:b7:88:b6:f9:47:83:
30:07:a9:2b:89:35:73:4b:e5:0f:2c:ec:2b:30:fc:e4:f6:b0:
2d:62:d1:31:af:76:1f:fa:ba:d0:56:6b:07:d4:45:df:04:72:
a4:90:22:2d:48:01:f5:66:70:ea:76:75:56:7c:88:be:3f:ac:
ad:13:3d:43:0e:5b:64:d4:18:20:c5:a1:cb:80:39:c5:73:63:
96:9e:b3:c4:8e:c2:99:02:53:0e:80:79:73:44:f4:f5:9a:b2:
2d:3e:15:0f:89:e1:b6:65:5d:79:69:cf:a5:05:05:c1:5a:e1:
2e:55:91:08:8f:17:71:00:44:e0:0a:98:2a:81:9b:fa:1a:70:
26:2d:ec:4f:05:d5:02:6d:0f:27:a8:d3:ae:5a:79:5e:66:27:
99:c1:a1:56:fc:ac:27:f5:88:3d:3f:34:90:97:2b:e6:e7:16:
6d:d2:6a:3e:86:5a:24:7c:61:94:53:82:69:fa:7c:5d:3b:4f:
c9:d7:9b:49:4b:1d:3e:aa:12:87:85:29:45:14:49:19:13:3c:
13:2f:0c:5c:3f:e3:42:e8:35:ae:9f:1d:45:9f:01:b9:95:82:
aa:51:4c:42:b7:ef:58:ff:65:ef:91:19:3b:f6:a0:e6:bc:bf:
48:db:64:1c
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUGfKiOVxWA35DCZ3+99m/fd8AfxMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEEwMjQ0NjJGRkRBN0UyNkU1RDM2NjYxQUFBREUyQzYw
MUQwNjRGMDAeFw0yNjA1MDMwMjIzMTRaFw0yNzA1MDIwMjI4MTRaMDMxMTAvBgNV
BAMTKDg0OEEzQjIwNUVBOEEwRTBERkQ2MzQxNUZFMUQ0NjNFQ0Q1M0Y3REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxecoAgMScXWlgKookgEZ6pQWP
ouDbFFigBNhs6E8JWLfx1qXVJp0Q4sF2JLWF6GbHblwRHkAZqwcJI69amKcH3NxL
6CFiBio+F2VbgWB4Svm2BxthsvUHR+hI9rc5aEE32o5DOIu3VV6EeFimhXvoBuBi
qwIjur4A+FqUAkjITmW2NQ6Dj//UU3M+kq2DLHC+ybKFNyF+/ZUg9PsXsGcgU5yJ
daRlk5iBZbpfeJn7lG6avYwo6v+sMTztjXikYTkmK0uSASCoCqKXlF4s8mfI+Q/a
l4o9rD5BUWzNLJwc3Zft5lFXjJ/AbAF9pu9X6b6S+xo9/0r2QbOSyj+1s5HzAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUhIo7IF6ooODf1jQV/h1GPs1T99swHwYDVR0j
BBgwFoAUCgJEYv/afibl02Zhqq3ixgHQZPAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
M2RlZGMwMzMtY2Q0ZC00NjIwLTkzNzItZTZlMDM5ZmMwNmI5LzAvMEEwMjQ0NjJG
RkRBN0UyNkU1RDM2NjYxQUFBREUyQzYwMUQwNjRGMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8wQTAyNDQ2MkZGREE3RTI2RTVEMzY2NjFBQUFERTJDNjAxRDA2
NEYwLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNkZWRjMDMzLWNkNGQtNDYyMC05
MzcyLWU2ZTAzOWZjMDZiOS8wLzMyMzQzMDM1M2E2MTYxNjMzMDNhNjY2NTNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzOTM5MzQzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQFqsAA
/jANBgkqhkiG9w0BAQsFAAOCAQEAQ2nSiI/TiMvIC/dBt4i2+UeDMAepK4k1c0vl
DyzsKzD85PawLWLRMa92H/q60FZrB9RF3wRypJAiLUgB9WZw6nZ1VnyIvj+srRM9
Qw5bZNQYIMWhy4A5xXNjlp6zxI7CmQJTDoB5c0T09ZqyLT4VD4nhtmVdeWnPpQUF
wVrhLlWRCI8XcQBE4AqYKoGb+hpwJi3sTwXVAm0PJ6jTrlp5XmYnmcGhVvysJ/WI
PT80kJcr5ucWbdJqPoZaJHxhlFOCafp8XTtPydebSUsdPqoSh4UpRRRJGRM8Ey8M
XD/jQug1rp8dRZ8BuZWCqlFMQrfvWP9l75EZO/ag5ry/SNtkHA==
-----END CERTIFICATE-----
Generated at Wed May 13 06:26:13 2026 by rpki-client