
$ rpki-client -vvf rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a343030303a3a2f34382d3438203d3e20313331313137.roa
File: 323430323a393830303a343030303a3a2f34382d3438203d3e20313331313137.roa (raw, json)
Hash identifier: eKmdfSVIAX7d6QNGWH5Mve/2e7mmvmjR2isjzQSg+ho=
Subject key identifier: F7:41:35:2B:17:81:53:DB:57:F2:4C:15:DF:F1:81:35:53:2A:AA:C5
Certificate issuer: /CN=E6E6F523D42F21D74E4B720AEC452D61205E5B6A
Certificate serial: 6EEDC3843D9A99774CD3642FF0FB1813A3BAB6CA
Authority key identifier: E6:E6:F5:23:D4:2F:21:D7:4E:4B:72:0A:EC:45:2D:61:20:5E:5B:6A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a343030303a3a2f34382d3438203d3e20313331313137.roa
Signing time: Sun 03 May 2026 02:30:39 +0000
ROA not before: Sun 03 May 2026 02:25:39 +0000
ROA not after: Sun 02 May 2027 02:30:39 +0000
asID: 131117
IP address blocks: 2402:9800:4000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.crl
rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:ed:c3:84:3d:9a:99:77:4c:d3:64:2f:f0:fb:18:13:a3:ba:b6:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E6E6F523D42F21D74E4B720AEC452D61205E5B6A
Validity
Not Before: May 3 02:25:39 2026 GMT
Not After : May 2 02:30:39 2027 GMT
Subject: CN=F741352B178153DB57F24C15DFF18135532AAAC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:80:7d:bd:25:56:d0:23:0f:80:1d:a4:5d:17:
40:7e:75:92:d7:1d:4c:9a:b7:a6:89:ea:7a:57:4b:
ed:aa:63:6a:a9:cf:53:56:93:58:ab:cb:ee:33:43:
ea:91:c3:68:be:09:43:26:fb:03:12:74:9b:f5:dd:
14:1a:34:8d:43:b8:c0:53:32:1d:67:85:b3:37:4f:
8f:d9:de:b6:88:93:45:d1:c4:97:38:70:8b:8c:96:
65:f4:f1:0a:5a:78:64:23:01:b8:60:e4:a9:7c:10:
e4:28:b5:e1:60:79:0d:55:66:ff:1c:03:d6:8e:ba:
21:6a:1a:79:ef:c5:25:09:77:48:09:fa:17:7c:61:
65:4f:bc:c0:9a:c3:56:dd:15:c4:49:26:61:ee:ad:
8c:0a:6e:dd:ef:66:4d:fd:80:c2:99:e5:a7:f0:fc:
92:9d:5e:72:63:20:66:07:d4:93:4a:1b:44:00:77:
95:f1:6b:0c:9d:a4:3e:db:0e:2c:a3:1a:fd:ba:08:
31:22:82:73:83:d6:1a:e9:c3:2b:53:66:78:d3:c4:
46:15:77:ba:7e:93:f2:da:4a:6d:fb:6e:f0:23:58:
5a:56:a7:18:10:94:a2:20:6f:56:66:56:54:29:89:
42:d5:fa:dd:e3:8b:fc:e3:53:2a:bf:c8:31:d9:01:
4e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:41:35:2B:17:81:53:DB:57:F2:4C:15:DF:F1:81:35:53:2A:AA:C5
X509v3 Authority Key Identifier:
keyid:E6:E6:F5:23:D4:2F:21:D7:4E:4B:72:0A:EC:45:2D:61:20:5E:5B:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a343030303a3a2f34382d3438203d3e20313331313137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:9800:4000::/48
Signature Algorithm: sha256WithRSAEncryption
84:54:0f:ea:f0:29:c2:45:12:57:bd:8c:2b:2b:75:06:57:50:
2d:ed:97:b9:af:26:04:0e:08:77:f7:ad:9e:ae:91:10:dc:7d:
2c:fb:51:44:82:7e:93:0d:ba:3e:fa:4c:7b:a8:e9:cd:79:e0:
1f:87:5b:ba:dc:72:3c:44:62:80:94:2d:91:b4:71:03:c5:56:
f0:e6:83:2f:1a:4d:f2:e9:25:b6:dc:12:31:bc:cd:da:ba:c5:
15:df:fa:18:3b:af:d2:14:97:b8:71:bb:60:59:69:fb:77:ea:
ae:0c:ac:2e:9b:99:d6:f7:36:c0:f0:9a:32:fa:58:a7:13:3f:
3a:41:dc:04:57:48:d8:64:54:81:ce:e1:96:da:1e:ca:32:ba:
c7:ae:09:03:1b:96:46:48:8e:31:0a:a1:08:a4:3a:36:37:c7:
15:c4:09:57:65:54:82:f7:65:e2:84:e6:60:05:75:77:1a:8a:
10:12:16:62:75:56:c1:01:37:ce:29:3f:9c:8b:16:54:dc:92:
41:be:3c:0b:4e:06:a2:d0:e8:20:fc:a1:b1:ea:48:09:a4:d5:
1f:85:64:d2:be:c0:7c:95:bb:d8:38:6f:4c:d5:e8:6c:3f:97:
d4:86:3a:de:0a:a1:d0:23:c9:e3:23:44:0b:5b:b1:8e:24:bf:
b5:56:93:95
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUbu3DhD2amXdM02Qv8PsYE6O6tsowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTZFNkY1MjNENDJGMjFENzRFNEI3MjBBRUM0NTJENjEy
MDVFNUI2QTAeFw0yNjA1MDMwMjI1MzlaFw0yNzA1MDIwMjMwMzlaMDMxMTAvBgNV
BAMTKEY3NDEzNTJCMTc4MTUzREI1N0YyNEMxNURGRjE4MTM1NTMyQUFBQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhgH29JVbQIw+AHaRdF0B+dZLX
HUyat6aJ6npXS+2qY2qpz1NWk1iry+4zQ+qRw2i+CUMm+wMSdJv13RQaNI1DuMBT
Mh1nhbM3T4/Z3raIk0XRxJc4cIuMlmX08QpaeGQjAbhg5Kl8EOQoteFgeQ1VZv8c
A9aOuiFqGnnvxSUJd0gJ+hd8YWVPvMCaw1bdFcRJJmHurYwKbt3vZk39gMKZ5afw
/JKdXnJjIGYH1JNKG0QAd5XxawydpD7bDiyjGv26CDEignOD1hrpwytTZnjTxEYV
d7p+k/LaSm37bvAjWFpWpxgQlKIgb1ZmVlQpiULV+t3ji/zjUyq/yDHZAU4PAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU90E1KxeBU9tX8kwV3/GBNVMqqsUwHwYDVR0j
BBgwFoAU5ub1I9QvIddOS3IK7EUtYSBeW2owDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDc4ZmQ0YWYtZmU2Ny00NWM4LTgwYjctMDZmYzExOGRmOGUyLzAvRTZFNkY1MjNE
NDJGMjFENzRFNEI3MjBBRUM0NTJENjEyMDVFNUI2QS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FNkU2RjUyM0Q0MkYyMUQ3NEU0QjcyMEFFQzQ1MkQ2MTIwNUU1
QjZBLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUFBzALhoGNcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQ3OGZkNGFmLWZlNjctNDVjOC04
MGI3LTA2ZmMxMThkZjhlMi8wLzMyMzQzMDMyM2EzOTM4MzAzMDNhMzQzMDMwMzAz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzEzMTMxMzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk
ApgAQAAwDQYJKoZIhvcNAQELBQADggEBAIRUD+rwKcJFEle9jCsrdQZXUC3tl7mv
JgQOCHf3rZ6ukRDcfSz7UUSCfpMNuj76THuo6c154B+HW7rccjxEYoCULZG0cQPF
VvDmgy8aTfLpJbbcEjG8zdq6xRXf+hg7r9IUl7hxu2BZaft36q4MrC6bmdb3NsDw
mjL6WKcTPzpB3ARXSNhkVIHO4ZbaHsoyuseuCQMblkZIjjEKoQikOjY3xxXECVdl
VIL3ZeKE5mAFdXcaihASFmJ1VsEBN84pP5yLFlTckkG+PAtOBqLQ6CD8obHqSAmk
1R+FZNK+wHyVu9g4b0zV6Gw/l9SGOt4KodAjyeMjRAtbsY4kv7VWk5U=
-----END CERTIFICATE-----
Generated at Wed May 13 12:24:11 2026 by rpki-client