
$ rpki-client -vvf rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a343030353a3a2f34382d3438203d3e20313336313038.roa
File: 323430323a393830303a343030353a3a2f34382d3438203d3e20313336313038.roa (raw, json)
Hash identifier: NQfoOa5g+wYJSlXXIcYFJVoFneRCLVNd5C6f2YiincI=
Subject key identifier: 49:3F:0A:DF:CD:85:08:9E:3D:AD:86:0B:85:2A:F9:DA:0E:A2:55:D1
Certificate issuer: /CN=E6E6F523D42F21D74E4B720AEC452D61205E5B6A
Certificate serial: 176DFE557B539A0F5FCD651C51F0CFCC53178F8C
Authority key identifier: E6:E6:F5:23:D4:2F:21:D7:4E:4B:72:0A:EC:45:2D:61:20:5E:5B:6A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a343030353a3a2f34382d3438203d3e20313336313038.roa
Signing time: Sun 03 May 2026 02:30:38 +0000
ROA not before: Sun 03 May 2026 02:25:38 +0000
ROA not after: Sun 02 May 2027 02:30:38 +0000
asID: 136108
IP address blocks: 2402:9800:4005::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.crl
rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:6d:fe:55:7b:53:9a:0f:5f:cd:65:1c:51:f0:cf:cc:53:17:8f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E6E6F523D42F21D74E4B720AEC452D61205E5B6A
Validity
Not Before: May 3 02:25:38 2026 GMT
Not After : May 2 02:30:38 2027 GMT
Subject: CN=493F0ADFCD85089E3DAD860B852AF9DA0EA255D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:49:b1:f9:de:2c:ed:87:38:26:b1:8c:91:a4:
5a:16:54:4e:bd:d5:38:c5:2a:68:36:48:4b:e4:f7:
5a:44:1c:1b:8e:c3:2d:37:ce:65:9e:b2:4d:74:47:
92:93:17:52:31:d9:94:4f:59:e8:18:1c:01:f1:f5:
01:57:10:66:fb:d1:38:08:9d:6b:65:97:1b:60:f1:
d6:75:5b:da:e6:f6:46:41:e6:a5:f9:00:48:5d:d0:
e5:f7:fb:83:8e:42:f8:27:2c:8c:15:d2:65:51:2a:
99:84:f5:3a:98:40:72:61:22:8f:0d:ab:16:76:0e:
18:fb:c1:44:b3:1b:40:20:e1:09:bf:89:81:18:a0:
65:b8:09:56:9f:77:70:bc:a2:c2:30:ef:35:4b:39:
df:6c:0f:00:a0:24:1f:8d:b7:09:4c:52:03:71:c5:
0e:ef:ec:ce:cd:8e:a8:fd:97:8b:48:f5:04:88:11:
a7:3f:09:be:66:92:cb:6d:f1:d0:f8:81:c9:2c:8a:
c8:d0:44:2f:22:56:01:7a:2f:ce:89:77:18:34:18:
c2:2c:79:7e:ae:d3:17:ad:bb:0b:b9:23:48:d7:34:
07:a2:a9:b0:02:21:3d:88:c3:e7:fe:ee:e6:3e:2a:
8f:0b:e8:42:d5:4f:84:5b:8d:ad:92:a8:2d:2c:f3:
69:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3F:0A:DF:CD:85:08:9E:3D:AD:86:0B:85:2A:F9:DA:0E:A2:55:D1
X509v3 Authority Key Identifier:
keyid:E6:E6:F5:23:D4:2F:21:D7:4E:4B:72:0A:EC:45:2D:61:20:5E:5B:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6E6F523D42F21D74E4B720AEC452D61205E5B6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a343030353a3a2f34382d3438203d3e20313336313038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:9800:4005::/48
Signature Algorithm: sha256WithRSAEncryption
4b:a1:31:7a:a6:ac:70:d0:b9:ce:7f:27:1c:49:f2:84:01:76:
0a:64:fe:07:e5:60:41:33:82:83:42:15:a1:27:8a:75:d6:ba:
74:7d:63:f6:c2:48:d9:82:4e:0e:6a:1f:b3:20:f7:55:95:ec:
3e:25:b2:aa:4b:88:b6:9a:e9:1e:e2:d5:f7:23:4f:c7:b7:40:
af:db:a5:da:74:14:e0:5c:ca:eb:2d:03:f9:c6:03:4b:b5:33:
74:b8:d0:3a:49:c5:ea:48:7a:20:7f:cd:f8:0b:e3:82:6c:05:
04:d8:5b:e0:ec:64:fc:4f:7a:17:6f:0e:22:e0:cd:a7:00:ad:
eb:0d:0a:59:21:8f:70:b5:a0:db:7a:5f:ab:02:8e:80:2e:6d:
14:fa:ff:89:66:6c:39:0e:9f:04:b4:18:77:71:53:9e:46:69:
52:77:e2:01:92:0e:89:7c:cd:d6:6b:26:4e:68:1a:c2:48:1a:
77:8c:b8:13:3c:d9:a5:05:df:5e:cf:b4:4a:1e:be:f7:ca:ed:
fb:fc:fb:9d:48:6f:91:9c:68:93:ac:8c:7f:0a:e2:73:ed:40:
64:cd:89:63:ac:2a:02:04:7e:08:13:11:78:b7:df:b2:51:c7:
f0:7b:e9:ca:17:f7:fc:7f:7b:af:04:21:1f:bf:71:be:47:b7:
1f:56:50:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:18:45 2026 by rpki-client