
$ rpki-client -vvf rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/323430373a646630303a313a3a2f34382d3438203d3e20313333383233.roa
File: 323430373a646630303a313a3a2f34382d3438203d3e20313333383233.roa (raw, json)
Hash identifier: +Eo6/X263G5Flhn1qAu9gyHoX0t17OxYpS6itJBlqnw=
Subject key identifier: 92:26:FB:D3:30:8F:36:3F:BB:3A:14:5F:FA:65:75:A1:3A:94:F2:5C
Certificate issuer: /CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454
Certificate serial: 2EFFD5A5B1D8B5C8534B86D22846928DFA72689E
Authority key identifier: DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/323430373a646630303a313a3a2f34382d3438203d3e20313333383233.roa
Signing time: Sun 03 May 2026 02:29:47 +0000
ROA not before: Sun 03 May 2026 02:24:47 +0000
ROA not after: Sun 02 May 2027 02:29:47 +0000
asID: 133823
IP address blocks: 2407:df00:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl
rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:54:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:ff:d5:a5:b1:d8:b5:c8:53:4b:86:d2:28:46:92:8d:fa:72:68:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454
Validity
Not Before: May 3 02:24:47 2026 GMT
Not After : May 2 02:29:47 2027 GMT
Subject: CN=9226FBD3308F363FBB3A145FFA6575A13A94F25C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:62:dc:53:23:a9:07:95:12:af:83:a6:04:cb:
0c:67:58:5a:3d:17:e0:96:06:1a:79:40:de:cb:61:
1d:b4:11:21:c0:36:51:e5:66:d1:f0:bc:94:79:e6:
02:41:80:81:62:6d:4f:01:0b:e5:60:51:02:51:78:
c0:72:37:ab:a4:6f:21:eb:f0:91:a7:fb:c2:fb:c1:
db:0f:72:81:78:2e:9d:7f:64:2b:40:20:e6:e8:ea:
02:06:a4:17:f4:f0:d6:22:7b:7a:7b:9e:45:72:a9:
85:b6:d9:ff:75:5f:df:45:ef:90:67:9b:a0:d4:7e:
3f:88:ba:ff:d0:62:06:64:6c:9b:e0:66:f3:08:60:
14:0f:b2:c9:56:a0:84:4b:98:ff:8d:66:ec:ac:9b:
d7:03:19:06:7e:79:9f:77:70:78:c2:1e:94:24:da:
42:be:2b:56:84:b9:19:d5:f6:cc:55:0d:32:d9:98:
d8:65:06:a6:b0:c8:35:90:e5:e6:1a:c8:8d:85:7c:
72:38:f3:dd:6b:2e:b2:bb:e8:67:11:1e:eb:66:78:
7a:c7:79:f3:89:f3:9a:7a:47:bd:5f:5c:54:5b:09:
4b:24:78:06:70:57:4b:27:4c:36:03:25:65:ee:14:
8c:b0:bf:de:96:ac:24:79:4b:65:d6:0d:fc:c4:84:
ff:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:26:FB:D3:30:8F:36:3F:BB:3A:14:5F:FA:65:75:A1:3A:94:F2:5C
X509v3 Authority Key Identifier:
keyid:DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/323430373a646630303a313a3a2f34382d3438203d3e20313333383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2407:df00:1::/48
Signature Algorithm: sha256WithRSAEncryption
68:75:7b:da:7e:95:47:f6:3e:08:f3:44:8b:f9:c2:73:88:82:
20:53:84:d6:0b:fc:9f:a2:d0:36:a7:0a:99:a9:e1:b9:4f:38:
f1:f7:59:21:9c:c2:33:8e:30:3e:43:f9:7e:9b:8a:57:e4:22:
db:cd:28:d3:48:15:cc:1f:47:5c:e5:af:d6:21:fb:f1:ca:27:
ac:99:99:04:6c:c3:2b:08:16:fd:0e:64:4f:b7:1d:1f:77:55:
18:78:64:c9:2c:45:02:51:cd:1d:34:72:99:41:94:51:3d:94:
4c:e5:73:8d:48:6e:86:96:b3:eb:38:4f:21:92:99:52:1d:01:
e2:a5:73:46:0e:91:08:d0:39:ec:bb:9b:af:d3:b3:0c:de:c2:
d5:05:c9:47:2d:d7:7d:61:32:9e:6f:59:9c:8f:6b:1d:ee:98:
5a:ea:d5:cf:02:89:c1:24:46:2a:48:4d:74:35:03:7c:c7:2e:
09:97:03:52:c4:e5:4e:cc:dc:f6:cc:86:83:6d:d5:1a:14:1f:
e9:2a:b8:2e:9f:39:f3:0f:ef:89:dc:69:66:0e:9d:d0:e5:6c:
40:35:68:c8:35:cb:2e:61:66:ed:f2:83:bb:41:95:d9:de:b3:
9e:ec:24:6d:68:5e:e7:04:d7:28:08:2a:cf:39:13:92:6f:df:
18:84:2a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:49:54 2026 by rpki-client