
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/323030313a6466333a653630303a3a2f34382d3438203d3e203338373831.roa
File: 323030313a6466333a653630303a3a2f34382d3438203d3e203338373831.roa (raw, json)
Hash identifier: IbczqxcYZ+zxW3Aa+76klhFYL/3X9BCvNeRgAfb1vp4=
Subject key identifier: FB:74:6B:50:A3:3E:B2:EE:A5:CD:C7:49:FC:7F:EF:91:66:D8:B1:6D
Certificate issuer: /CN=B5B29AB56D2B927BDE3361B6CB58CD08539262B0
Certificate serial: 28000628774FC57879DFCD356DF547CB1DEF1D93
Authority key identifier: B5:B2:9A:B5:6D:2B:92:7B:DE:33:61:B6:CB:58:CD:08:53:92:62:B0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/323030313a6466333a653630303a3a2f34382d3438203d3e203338373831.roa
Signing time: Sun 03 May 2026 02:30:41 +0000
ROA not before: Sun 03 May 2026 02:25:41 +0000
ROA not after: Sun 02 May 2027 02:30:41 +0000
asID: 38781
IP address blocks: 2001:df3:e600::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.crl
rsync://rpki-rsync.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:24:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:00:06:28:77:4f:c5:78:79:df:cd:35:6d:f5:47:cb:1d:ef:1d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5B29AB56D2B927BDE3361B6CB58CD08539262B0
Validity
Not Before: May 3 02:25:41 2026 GMT
Not After : May 2 02:30:41 2027 GMT
Subject: CN=FB746B50A33EB2EEA5CDC749FC7FEF9166D8B16D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0a:22:c9:5b:8c:35:20:c4:8e:97:64:5e:13:
6a:b9:83:c2:d5:b3:cb:36:69:c5:5c:07:67:a5:20:
fb:45:87:d4:37:57:c7:a1:bb:38:96:1b:34:f8:a1:
38:70:44:ef:59:3c:64:e3:27:a7:96:d4:99:cf:b0:
21:d9:24:e0:62:6f:05:cc:22:ad:40:11:09:0f:0b:
2d:ed:f2:15:2d:71:67:be:cd:53:fc:b0:5c:39:a5:
3a:a7:ae:b4:a4:fa:cb:62:0d:d5:13:a2:fc:50:8c:
cb:77:3c:11:a0:93:16:f1:e1:36:83:d6:a5:d7:22:
5c:29:82:29:eb:f8:db:72:3c:89:99:e0:54:d1:7f:
c1:02:18:ab:fc:75:c3:92:c7:5a:b5:3f:c8:6f:a0:
fc:36:64:f2:7d:43:3a:67:57:1c:da:91:e5:78:9d:
77:85:b1:d4:f2:c6:b4:59:22:f7:31:ae:44:1e:fd:
da:9c:42:11:27:24:2b:3e:2c:d2:f0:17:c8:fb:9d:
3d:f8:c3:2d:b7:9a:0e:98:89:0e:ef:9d:25:a9:5d:
64:d8:16:f3:36:31:46:a5:16:41:6c:e2:56:90:f2:
b8:4a:ef:39:67:c6:0e:e6:e6:c3:b3:d7:b2:a6:de:
6c:e0:28:b7:9c:bf:4d:86:5b:3e:08:52:7a:f0:40:
d9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:74:6B:50:A3:3E:B2:EE:A5:CD:C7:49:FC:7F:EF:91:66:D8:B1:6D
X509v3 Authority Key Identifier:
keyid:B5:B2:9A:B5:6D:2B:92:7B:DE:33:61:B6:CB:58:CD:08:53:92:62:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5B29AB56D2B927BDE3361B6CB58CD08539262B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/323030313a6466333a653630303a3a2f34382d3438203d3e203338373831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:e600::/48
Signature Algorithm: sha256WithRSAEncryption
22:c0:08:1e:6d:aa:90:26:0d:d5:80:90:16:6d:ce:58:3f:b9:
f2:1f:20:65:af:98:22:f0:7e:34:6a:f8:1d:b4:08:f9:74:0f:
4a:98:f9:6f:20:a3:0c:3e:b9:c8:e2:e5:de:c3:e4:24:2d:83:
90:c3:9e:21:80:d5:7d:b9:5b:38:06:1a:bd:d5:f5:6e:dc:97:
88:84:d4:cb:36:70:3d:ce:5b:1a:37:ab:c7:b2:f7:b4:a7:f5:
97:09:e5:07:38:c6:00:59:3e:a7:90:17:13:3d:9e:7f:74:e4:
18:22:86:10:b5:ab:eb:c3:db:81:c2:bd:0c:aa:72:50:91:da:
c4:65:75:4c:1a:ec:57:13:4d:bf:04:7b:a2:6c:0e:8a:00:a0:
27:d4:2e:a2:18:8c:22:96:a9:ad:5e:4c:ae:52:f7:c4:14:60:
4b:98:14:e9:8f:28:da:bd:8a:c1:e0:fb:6e:e1:b4:d2:79:2a:
d4:3d:a7:de:8f:a7:33:66:43:a6:f5:de:87:37:2e:a7:dc:49:
bb:9d:cf:13:ed:1c:70:f4:09:fd:15:b8:c8:f4:44:3d:3c:6f:
2a:fc:f5:54:13:03:69:a5:54:14:3e:9e:3d:8a:0f:00:6c:5c:
df:40:1d:0b:22:8e:b4:93:4d:03:6d:48:ac:69:08:9e:18:e7:
93:6c:45:8c
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUKAAGKHdPxXh53801bfVHyx3vHZMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVCMjlBQjU2RDJCOTI3QkRFMzM2MUI2Q0I1OENEMDg1
MzkyNjJCMDAeFw0yNjA1MDMwMjI1NDFaFw0yNzA1MDIwMjMwNDFaMDMxMTAvBgNV
BAMTKEZCNzQ2QjUwQTMzRUIyRUVBNUNEQzc0OUZDN0ZFRjkxNjZEOEIxNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmCiLJW4w1IMSOl2ReE2q5g8LV
s8s2acVcB2elIPtFh9Q3V8ehuziWGzT4oThwRO9ZPGTjJ6eW1JnPsCHZJOBibwXM
Iq1AEQkPCy3t8hUtcWe+zVP8sFw5pTqnrrSk+stiDdUTovxQjMt3PBGgkxbx4TaD
1qXXIlwpginr+NtyPImZ4FTRf8ECGKv8dcOSx1q1P8hvoPw2ZPJ9QzpnVxzakeV4
nXeFsdTyxrRZIvcxrkQe/dqcQhEnJCs+LNLwF8j7nT34wy23mg6YiQ7vnSWpXWTY
FvM2MUalFkFs4laQ8rhK7zlnxg7m5sOz17Km3mzgKLecv02GWz4IUnrwQNmzAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU+3RrUKM+su6lzcdJ/H/vkWbYsW0wHwYDVR0j
BBgwFoAUtbKatW0rknveM2G2y1jNCFOSYrAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDc5MzY4NmItMzM4NC00NDEyLThlN2MtZTlkMWI4NTJhYTFlLzAvQjVCMjlBQjU2
RDJCOTI3QkRFMzM2MUI2Q0I1OENEMDg1MzkyNjJCMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CNUIyOUFCNTZEMkI5MjdCREUzMzYxQjZDQjU4Q0QwODUzOTI2
MkIwLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYGCCsGAQUFBzALhoGJcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQ3OTM2ODZiLTMzODQtNDQxMi04
ZTdjLWU5ZDFiODUyYWExZS8wLzMyMzAzMDMxM2E2NDY2MzMzYTY1MzYzMDMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzMzODM3MzgzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDfPm
ADANBgkqhkiG9w0BAQsFAAOCAQEAIsAIHm2qkCYN1YCQFm3OWD+58h8gZa+YIvB+
NGr4HbQI+XQPSpj5byCjDD65yOLl3sPkJC2DkMOeIYDVfblbOAYavdX1btyXiITU
yzZwPc5bGjerx7L3tKf1lwnlBzjGAFk+p5AXEz2ef3TkGCKGELWr68PbgcK9DKpy
UJHaxGV1TBrsVxNNvwR7omwOigCgJ9QuohiMIpaprV5MrlL3xBRgS5gU6Y8o2r2K
weD7buG00nkq1D2n3o+nM2ZDpvXehzcup9xJu53PE+0ccPQJ/RW4yPREPTxvKvz1
VBMDaaVUFD6ePYoPAGxc30AdCyKOtJNNA21IrGkInhjnk2xFjA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:46:44 2026 by rpki-client