
$ rpki-client -vvf rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/323430353a386530303a3a2f33322d3332203d3e203234323034.roa
File: 323430353a386530303a3a2f33322d3332203d3e203234323034.roa (raw, json)
Hash identifier: sqWc0G+az7rG1OKeMlrjkBetXfc6E3+lsrE6DeDNqXY=
Subject key identifier: C2:7C:80:C1:9D:6F:B1:58:99:AE:FC:22:8D:A2:5A:EA:5F:3C:23:8B
Certificate issuer: /CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9
Certificate serial: 6C6F4002328C27074E6760AC81E201F5BC6A5F3B
Authority key identifier: E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/323430353a386530303a3a2f33322d3332203d3e203234323034.roa
Signing time: Sun 03 May 2026 02:33:08 +0000
ROA not before: Sun 03 May 2026 02:28:08 +0000
ROA not after: Sun 02 May 2027 02:33:08 +0000
asID: 24204
IP address blocks: 2405:8e00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl
rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 18:49:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:6f:40:02:32:8c:27:07:4e:67:60:ac:81:e2:01:f5:bc:6a:5f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9
Validity
Not Before: May 3 02:28:08 2026 GMT
Not After : May 2 02:33:08 2027 GMT
Subject: CN=C27C80C19D6FB15899AEFC228DA25AEA5F3C238B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:62:37:9f:98:75:82:b5:70:71:41:01:44:
4c:92:61:c5:32:18:ec:ce:ac:db:b8:ea:54:9e:d5:
6f:9e:19:02:4e:ee:dc:70:d7:94:3f:70:1c:46:c8:
01:2d:c6:de:c1:64:fe:69:28:e8:09:1e:70:f4:22:
88:56:60:58:25:59:03:1a:ba:a9:fd:77:0c:24:d3:
d2:84:f3:81:38:1c:9b:83:38:88:18:25:3f:cc:6d:
c7:e4:98:b0:f3:f1:ec:02:ee:a6:d5:88:cb:cf:47:
88:03:59:28:f7:f5:92:da:14:35:dd:fd:eb:29:6a:
20:18:ff:8b:01:ce:01:3b:9f:ee:6b:c0:28:17:a2:
91:33:d6:f4:d1:ca:2f:60:6d:70:4e:a6:30:e8:31:
2b:bc:c8:c9:c3:2c:40:e9:ac:c0:f5:6e:81:29:b8:
98:e7:59:76:5b:73:af:3e:e5:72:0f:2f:e5:62:e4:
70:06:36:7b:3c:f9:e0:7d:bb:d8:9c:f7:6d:59:8b:
25:27:d4:fc:a7:4f:54:5e:a2:0c:4c:3d:c8:77:c6:
6a:99:0e:80:50:ed:62:27:ea:96:fa:b6:47:97:6b:
9f:e1:9f:71:1a:10:9f:50:cf:ae:c9:2a:e5:32:ca:
64:53:63:e0:4c:d5:3c:98:d9:54:fa:dd:8e:b9:66:
d0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7C:80:C1:9D:6F:B1:58:99:AE:FC:22:8D:A2:5A:EA:5F:3C:23:8B
X509v3 Authority Key Identifier:
keyid:E4:50:1E:7F:DB:C5:71:60:C6:DA:F0:D3:BE:92:FB:D3:B1:32:4A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4501E7FDBC57160C6DAF0D3BE92FBD3B1324AB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/323430353a386530303a3a2f33322d3332203d3e203234323034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:8e00::/32
Signature Algorithm: sha256WithRSAEncryption
2f:00:54:de:2e:33:93:a7:fb:4d:e1:ce:8d:c8:82:63:5f:e7:
7c:bf:f2:6e:9d:de:22:12:4f:43:2a:89:1c:49:98:e1:12:d8:
0f:8a:b1:8d:58:cd:99:c5:dc:0c:09:61:8f:0e:d1:a0:45:f4:
4e:2d:ec:0e:cc:73:39:2f:16:0e:94:8b:17:95:2c:b3:08:2f:
f9:92:d0:e4:0d:66:e3:06:df:c8:87:d9:a3:d8:25:c9:fb:dc:
c6:f5:09:31:29:fd:d4:7e:f2:16:2a:7e:ed:2c:6c:36:a3:ec:
02:d0:77:cf:61:56:9f:eb:16:c9:e9:3d:e9:2c:fe:5d:b5:4c:
1e:bb:1b:ce:8d:5d:45:e7:7d:69:d2:7c:7d:8f:be:b6:52:0a:
7c:0d:54:bd:7a:ee:2a:34:54:1d:b7:93:5f:99:24:bc:7c:82:
c1:06:6e:e5:d9:06:83:49:6b:08:25:4f:dd:75:49:0c:24:60:
7b:e9:90:ec:ad:ee:eb:7d:06:7b:e8:d9:95:3d:e0:78:42:d2:
e7:b5:d1:97:b4:3e:39:46:00:84:ae:f4:a0:a8:1b:be:a7:16:
04:91:38:28:92:b6:33:35:0e:28:0a:5b:a2:75:ec:19:97:a9:
e2:06:6c:35:65:d5:6c:96:3b:33:3e:7b:bd:24:23:fd:96:12:
a8:4a:4b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:46:03 2026 by rpki-client