
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/323430363a376163303a3a2f33322d3332203d3e20313431303738.roa
File: 323430363a376163303a3a2f33322d3332203d3e20313431303738.roa (raw, json)
Hash identifier: adl429vFkP0oWDwTvPnmag7OFx0zxihqimWJrrJGrRE=
Subject key identifier: 24:A8:7E:B7:B0:B9:BA:7C:79:8A:F6:10:5D:70:E0:59:BB:7A:87:8D
Certificate issuer: /CN=872439399C3ADEB5FD342E7B6286CED219899CA2
Certificate serial: 32C1D6EFB41DF8D0DF59897B78D8E913C426C0E2
Authority key identifier: 87:24:39:39:9C:3A:DE:B5:FD:34:2E:7B:62:86:CE:D2:19:89:9C:A2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/323430363a376163303a3a2f33322d3332203d3e20313431303738.roa
Signing time: Sun 03 May 2026 02:31:54 +0000
ROA not before: Sun 03 May 2026 02:26:54 +0000
ROA not after: Sun 02 May 2027 02:31:54 +0000
asID: 141078
IP address blocks: 2406:7ac0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.crl
rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:16:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:c1:d6:ef:b4:1d:f8:d0:df:59:89:7b:78:d8:e9:13:c4:26:c0:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=872439399C3ADEB5FD342E7B6286CED219899CA2
Validity
Not Before: May 3 02:26:54 2026 GMT
Not After : May 2 02:31:54 2027 GMT
Subject: CN=24A87EB7B0B9BA7C798AF6105D70E059BB7A878D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:15:c8:4b:34:34:6c:ae:0a:cb:f9:3e:72:fa:
a4:1f:7d:22:a9:63:9a:a2:8b:02:60:4c:8c:10:3b:
50:8b:73:00:84:c7:63:2a:f2:06:ff:b0:6b:c2:14:
1d:d3:5f:01:7f:1c:93:a3:e4:41:a8:69:dd:94:cb:
8b:d4:a1:0f:0f:2b:c8:e4:2b:27:96:7f:55:a0:2f:
13:64:d9:a6:36:b7:f7:fd:9a:1d:de:b4:f1:e9:69:
3c:a8:fc:6d:25:44:83:c1:f6:7d:c6:1d:ad:99:81:
83:44:fd:7e:c0:e5:94:21:e6:a3:c7:3a:63:ac:dd:
3e:6f:17:26:8e:d2:1f:50:f3:c3:66:b8:57:5a:43:
da:7f:b0:7e:32:ef:a8:70:20:c8:1b:44:34:bf:f8:
0c:8a:ed:d9:0b:e0:a2:be:f0:26:1f:78:33:47:94:
1c:86:8a:91:bb:e4:7d:11:b4:7c:54:80:bc:65:6f:
3b:71:ca:f2:7f:6d:ad:b9:7a:52:85:0e:13:5b:a8:
c6:39:af:9f:57:c1:4a:13:78:25:54:ee:33:d4:20:
d6:20:92:4b:67:a0:1e:ab:f6:9b:65:b9:06:9f:ae:
f4:b4:4a:87:4e:4d:e4:50:31:93:dd:05:b2:4c:95:
e4:d0:02:e1:12:73:a1:53:45:2a:72:95:df:58:03:
29:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A8:7E:B7:B0:B9:BA:7C:79:8A:F6:10:5D:70:E0:59:BB:7A:87:8D
X509v3 Authority Key Identifier:
keyid:87:24:39:39:9C:3A:DE:B5:FD:34:2E:7B:62:86:CE:D2:19:89:9C:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/872439399C3ADEB5FD342E7B6286CED219899CA2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872439399C3ADEB5FD342E7B6286CED219899CA2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/323430363a376163303a3a2f33322d3332203d3e20313431303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:7ac0::/32
Signature Algorithm: sha256WithRSAEncryption
78:ca:6f:d6:e2:9f:9f:59:0e:a9:0c:e2:06:5f:16:0f:eb:0b:
73:4e:a0:f4:55:dd:43:2f:d3:cf:b4:e6:e9:78:b5:6b:4e:cf:
46:fd:5f:67:75:04:a9:ca:dd:1e:c6:a1:24:9e:e1:b8:4f:11:
ab:bc:b8:95:2c:a6:8f:8e:36:6e:1e:cc:c5:ed:0e:3b:46:26:
c4:31:09:87:c2:93:0f:e0:64:c2:a1:fe:9a:9e:d6:34:0b:50:
a0:69:69:92:e6:2c:14:82:25:17:3a:d4:1f:ff:ae:29:c8:5c:
8a:7c:33:54:a1:bf:a0:30:5f:2d:9b:e9:e1:66:b5:80:34:9a:
05:f4:22:e2:8e:08:bf:4a:c8:1b:88:4c:cc:9d:e4:9d:26:89:
80:b2:5e:f7:32:a1:1e:42:c5:e6:06:51:3c:3f:16:95:a4:5b:
ae:fa:75:cf:91:65:c0:7f:01:20:88:50:e2:46:39:a7:72:36:
a3:39:d3:e6:49:a9:56:dc:7f:4c:3d:e1:9c:1e:6c:f7:b1:a6:
d9:98:76:05:04:3a:79:92:b1:7e:52:be:ee:7b:d8:26:ce:6a:
14:57:ea:4e:55:a1:ed:6e:fc:30:02:d3:cf:8e:a8:fa:cc:d9:
f1:5b:bc:35:cf:16:99:76:d1:2f:b7:e1:ac:5c:27:06:f3:e8:
bb:ce:24:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:40:54 2026 by rpki-client