
$ rpki-client -vvf rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/323430353a316534303a3a2f34382d3438203d3e203538343735.roa
File: 323430353a316534303a3a2f34382d3438203d3e203538343735.roa (raw, json)
Hash identifier: 0OL8yRFc3dc/04Uo3qwJLQPh9f57dZz2AXVP9/HkiQ8=
Subject key identifier: A2:4F:C4:DF:D7:37:B1:47:49:4A:67:21:E9:BA:4A:C5:AF:A1:1F:16
Certificate issuer: /CN=7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136
Certificate serial: 465F1DBC1A4D24E109C6BFD42FBB9B735F014F5E
Authority key identifier: 7A:5A:58:68:0A:05:D7:CD:A6:8A:F7:C0:98:AA:5E:1D:1D:B6:51:36
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/323430353a316534303a3a2f34382d3438203d3e203538343735.roa
Signing time: Sun 03 May 2026 02:30:59 +0000
ROA not before: Sun 03 May 2026 02:25:59 +0000
ROA not after: Sun 02 May 2027 02:30:59 +0000
asID: 58475
IP address blocks: 2405:1e40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.crl
rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 11:10:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:5f:1d:bc:1a:4d:24:e1:09:c6:bf:d4:2f:bb:9b:73:5f:01:4f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136
Validity
Not Before: May 3 02:25:59 2026 GMT
Not After : May 2 02:30:59 2027 GMT
Subject: CN=A24FC4DFD737B147494A6721E9BA4AC5AFA11F16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dd:6e:5b:dc:42:f6:71:41:bb:f4:50:35:fd:
9d:b0:fd:ef:a3:f7:b3:4b:ef:8f:dd:36:20:b6:86:
ad:9b:87:7e:9b:09:67:09:c6:34:5b:7a:b6:24:a3:
b2:03:36:46:b4:cc:c0:a4:42:65:54:bc:1f:74:b1:
ab:37:e8:6c:e5:dc:71:f0:31:58:ce:47:1e:1f:36:
1b:36:6d:58:7b:cb:a9:f5:e3:34:f4:08:21:38:c2:
e0:6f:a1:8c:94:2d:47:32:74:5d:1a:f2:70:a1:79:
76:b3:8e:47:62:45:62:3c:7b:7b:f4:4c:36:83:a1:
71:8f:48:ee:77:4b:a5:5c:6e:e1:54:10:0a:1c:98:
75:5e:e0:32:08:48:dc:0c:ff:f7:22:56:d3:93:a8:
db:15:de:97:00:67:b9:84:d8:c9:7d:8a:ac:8c:f9:
43:da:15:be:e5:05:ac:d6:e7:7a:b4:9d:d9:16:c7:
cb:b2:a7:27:73:b6:cf:22:07:2f:e4:26:03:d8:d9:
ea:02:43:b1:cc:1c:23:6e:46:06:04:d6:b8:9e:b0:
10:f0:8d:d0:8b:fd:9a:1f:47:19:e3:f6:a8:f5:2a:
ee:17:d9:7b:a5:66:f9:a1:78:f8:ae:5e:f3:95:5d:
16:42:6e:2c:1c:e3:0e:42:e8:7d:ca:75:85:b9:80:
0e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4F:C4:DF:D7:37:B1:47:49:4A:67:21:E9:BA:4A:C5:AF:A1:1F:16
X509v3 Authority Key Identifier:
keyid:7A:5A:58:68:0A:05:D7:CD:A6:8A:F7:C0:98:AA:5E:1D:1D:B6:51:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7A5A58680A05D7CDA68AF7C098AA5E1D1DB65136.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/323430353a316534303a3a2f34382d3438203d3e203538343735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:1e40::/48
Signature Algorithm: sha256WithRSAEncryption
06:39:95:56:ab:72:c4:37:7f:e1:e6:9b:74:2b:39:d3:7c:b5:
b8:16:56:7b:82:2d:ea:8e:0a:5d:e9:fd:1c:82:dc:bd:bf:9f:
60:64:00:d7:b9:78:7b:eb:80:31:99:52:fc:57:25:71:bd:1c:
79:c9:74:4a:c9:95:9a:0d:2b:a4:36:49:76:d1:1b:cd:43:ed:
09:8a:79:ef:b2:0a:4c:56:65:4e:18:33:2f:49:c8:95:72:2b:
02:82:23:6b:1c:94:3c:5c:6b:d9:64:c2:af:1c:83:e8:5c:02:
7a:0e:44:20:d2:e7:45:eb:97:45:6d:b1:11:47:60:c8:a7:be:
5a:6e:1c:d0:46:50:b4:52:2a:2a:29:db:57:33:3e:4e:7d:44:
47:f0:fc:79:cd:12:95:d3:41:cc:85:0f:9f:2e:bb:70:08:9e:
c8:44:ec:91:4a:50:8f:c8:c4:76:24:80:47:e4:e6:82:4a:d1:
7a:2b:b7:d1:7e:a7:87:67:0c:ed:2b:8a:c2:21:4c:dc:eb:7d:
43:f7:1c:b4:2f:4f:80:8b:c3:75:ad:31:1c:88:dc:ea:3b:19:
45:59:46:b7:79:80:4a:c3:da:f8:82:c1:9f:21:6d:e6:df:49:
4a:41:80:12:b1:e1:54:a0:b7:89:90:3b:64:50:ad:d0:00:b3:
b0:89:3c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:24:52 2026 by rpki-client