
$ rpki-client -vvf rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/323430373a336538303a3a2f33322d3438203d3e203338373638.roa
File: 323430373a336538303a3a2f33322d3438203d3e203338373638.roa (raw, json)
Hash identifier: /6iiyBTTzA+gJYo5W8sFnueJYX/K6dQcso0XDUc2u/0=
Subject key identifier: 94:51:EF:03:56:93:A3:AF:D7:BC:2B:21:1B:E1:DD:FA:A3:3E:F9:5F
Certificate issuer: /CN=2C1233B548C07507C6EF58E2A03DD8309F820753
Certificate serial: 0A73E21B5D73B37886B3029EF6C6F58DFFB10748
Authority key identifier: 2C:12:33:B5:48:C0:75:07:C6:EF:58:E2:A0:3D:D8:30:9F:82:07:53
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/323430373a336538303a3a2f33322d3438203d3e203338373638.roa
Signing time: Sun 03 May 2026 02:32:57 +0000
ROA not before: Sun 03 May 2026 02:27:57 +0000
ROA not after: Sun 02 May 2027 02:32:57 +0000
asID: 38768
IP address blocks: 2407:3e80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.crl
rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:73:e2:1b:5d:73:b3:78:86:b3:02:9e:f6:c6:f5:8d:ff:b1:07:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C1233B548C07507C6EF58E2A03DD8309F820753
Validity
Not Before: May 3 02:27:57 2026 GMT
Not After : May 2 02:32:57 2027 GMT
Subject: CN=9451EF035693A3AFD7BC2B211BE1DDFAA33EF95F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:19:2f:60:00:98:e1:c9:8e:40:68:aa:4d:37:
fd:0b:b5:7c:c8:1b:36:0b:68:2c:d7:b6:2b:62:43:
9f:a8:7e:26:16:09:b2:2a:cb:f2:57:dc:0a:2c:2f:
6d:ca:75:ba:44:9e:64:a9:ab:1a:21:5b:b5:99:c9:
ed:e8:c7:fb:28:58:bd:dc:76:87:71:b4:07:c2:34:
e0:81:e7:cb:3d:1e:c4:27:2b:21:85:d3:e1:4e:83:
43:d0:ef:51:32:2c:19:4a:2e:23:8a:f6:4f:72:fe:
73:94:a6:9a:6e:cc:aa:04:21:95:2f:54:02:7a:14:
39:18:77:c0:d8:1c:f5:b6:36:a1:ca:35:7b:20:65:
6d:b2:72:dd:e3:21:ba:2d:8f:de:1b:5f:23:a2:59:
fc:b1:67:85:08:07:e1:52:a7:2e:ee:77:b5:95:99:
c5:91:7d:02:01:ef:36:a4:37:11:20:c9:8f:af:f0:
13:26:77:ab:20:90:60:1a:cc:e4:06:02:a8:73:9c:
d1:e5:16:67:b9:19:5c:e8:c3:47:1e:2c:03:f6:96:
41:25:f4:c7:cd:74:66:1b:3f:f4:ae:b0:d8:a2:6a:
cc:80:c8:58:5e:dc:96:e7:ab:8e:e7:35:dc:d0:e9:
67:2a:8e:6f:0c:f5:87:6e:bf:b8:16:51:74:42:b1:
f7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:51:EF:03:56:93:A3:AF:D7:BC:2B:21:1B:E1:DD:FA:A3:3E:F9:5F
X509v3 Authority Key Identifier:
keyid:2C:12:33:B5:48:C0:75:07:C6:EF:58:E2:A0:3D:D8:30:9F:82:07:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/2C1233B548C07507C6EF58E2A03DD8309F820753.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2C1233B548C07507C6EF58E2A03DD8309F820753.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/323430373a336538303a3a2f33322d3438203d3e203338373638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2407:3e80::/32
Signature Algorithm: sha256WithRSAEncryption
24:9e:0f:56:16:94:8b:33:82:c4:be:71:08:4c:7c:4d:da:32:
0f:bc:fd:8e:0e:4a:41:9a:56:7a:a9:94:76:fc:c1:1d:22:f6:
a7:4d:60:b8:10:d4:5a:c4:54:29:f9:40:5d:a7:c3:0d:c1:c2:
5d:a5:21:6e:24:d5:58:cb:1d:a9:f1:19:bf:ea:66:ea:d1:1e:
36:31:0a:7c:b6:99:e7:df:e2:e4:db:a5:24:63:58:21:2a:e1:
d3:73:3a:b0:13:de:50:12:47:49:a6:98:9a:7c:19:a3:44:5d:
ed:bb:df:48:cb:33:cc:35:9c:7b:a4:9f:0d:94:68:ff:38:aa:
1b:1c:c0:8f:d8:e3:26:5b:c8:df:63:11:0f:36:7a:6b:cb:65:
11:c4:20:90:cb:02:04:0c:aa:1a:45:0a:5e:8a:1b:c9:72:3c:
6b:e7:73:70:c0:92:21:17:b7:66:a6:e8:88:53:18:20:82:2b:
a9:81:f9:eb:f9:e7:8d:ad:cb:3e:80:c1:aa:65:6d:4e:a4:69:
38:3f:64:58:09:8a:13:97:d9:54:60:04:56:6c:01:7a:d3:db:
7f:7d:ef:91:3d:86:3b:e5:9f:d3:0f:d3:21:d3:19:35:e7:db:
e4:5e:8b:af:6b:02:7b:c5:6b:f4:a5:4d:e3:c3:9f:58:3a:62:
23:8d:62:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:27:18 2026 by rpki-client