
$ rpki-client -vvf rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/323030313a6466373a616130303a3a2f34382d3438203d3e20313333383030.roa
File: 323030313a6466373a616130303a3a2f34382d3438203d3e20313333383030.roa (raw, json)
Hash identifier: NUr5zEr4YzxkTQ8Y53f2vd4+rpGC5VIJU6v6ZJ3ymFI=
Subject key identifier: 1E:3B:09:65:BA:69:E8:92:7C:FA:27:99:09:79:F5:D3:2B:D5:D5:C4
Certificate issuer: /CN=F831F8D1B7EB333E836D19E2C6659AA968449902
Certificate serial: 14582D3C6271B6B4A677A9F2CFD8E20AAC903A0F
Authority key identifier: F8:31:F8:D1:B7:EB:33:3E:83:6D:19:E2:C6:65:9A:A9:68:44:99:02
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F831F8D1B7EB333E836D19E2C6659AA968449902.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/323030313a6466373a616130303a3a2f34382d3438203d3e20313333383030.roa
Signing time: Sun 03 May 2026 02:33:39 +0000
ROA not before: Sun 03 May 2026 02:28:39 +0000
ROA not after: Sun 02 May 2027 02:33:39 +0000
asID: 133800
IP address blocks: 2001:df7:aa00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/F831F8D1B7EB333E836D19E2C6659AA968449902.crl
rsync://rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/F831F8D1B7EB333E836D19E2C6659AA968449902.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F831F8D1B7EB333E836D19E2C6659AA968449902.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:58:2d:3c:62:71:b6:b4:a6:77:a9:f2:cf:d8:e2:0a:ac:90:3a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F831F8D1B7EB333E836D19E2C6659AA968449902
Validity
Not Before: May 3 02:28:39 2026 GMT
Not After : May 2 02:33:39 2027 GMT
Subject: CN=1E3B0965BA69E8927CFA27990979F5D32BD5D5C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3d:25:af:cc:1f:76:b7:96:26:92:32:53:04:
7e:87:b9:87:20:20:df:cb:95:7a:a1:b2:43:14:fc:
85:ae:76:a5:63:7e:51:39:43:b5:ed:63:66:7c:9e:
20:42:d4:3e:9f:16:10:a7:7d:de:83:82:ba:ba:e0:
86:90:95:fd:7d:c9:36:d6:2b:8d:6b:b7:a4:62:f7:
9b:df:37:a1:dc:9b:bd:7d:66:29:41:38:c6:f2:13:
db:6e:5f:2e:88:28:92:56:67:da:7b:02:c0:be:4d:
f9:52:35:f4:48:1f:d7:d4:16:3d:a5:bd:2c:fb:0f:
54:e1:4f:de:14:c8:3d:a8:7a:82:b5:ee:2e:f0:2d:
b6:4d:89:e7:14:48:df:bb:4f:95:eb:ce:4d:4d:bc:
ac:e4:33:5e:c5:1f:46:19:a2:4f:b5:1e:2d:40:5f:
b4:09:05:a9:50:3e:d5:0a:eb:7a:65:fb:98:00:60:
ec:94:f0:ca:85:c9:cc:c3:97:b2:53:61:77:10:16:
11:82:6a:cc:3a:5f:15:14:07:42:95:b8:43:12:d4:
a6:5d:3c:d7:b1:c9:68:09:57:8f:c0:cf:31:8b:39:
f6:68:35:89:7a:ec:af:ba:93:67:da:f3:c6:be:e7:
ad:3c:fb:f3:09:23:64:16:ae:51:c2:60:b5:31:2b:
a0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3B:09:65:BA:69:E8:92:7C:FA:27:99:09:79:F5:D3:2B:D5:D5:C4
X509v3 Authority Key Identifier:
keyid:F8:31:F8:D1:B7:EB:33:3E:83:6D:19:E2:C6:65:9A:A9:68:44:99:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/F831F8D1B7EB333E836D19E2C6659AA968449902.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F831F8D1B7EB333E836D19E2C6659AA968449902.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/323030313a6466373a616130303a3a2f34382d3438203d3e20313333383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:aa00::/48
Signature Algorithm: sha256WithRSAEncryption
03:af:ea:85:76:dc:75:7d:fd:38:d6:a0:01:b2:b3:9a:56:26:
8f:ca:40:15:1a:e2:65:25:fa:28:0f:d1:7d:4f:be:72:d0:da:
bd:ed:24:2a:38:6a:c2:1a:c8:e8:31:4b:21:aa:76:75:66:b0:
e1:d8:f2:1d:88:b2:e1:40:e4:8e:9a:94:b9:e3:69:38:1a:29:
d4:0b:68:55:cc:00:bc:2c:d4:79:ba:64:a3:1c:e2:f7:04:81:
05:77:97:a0:70:d9:8a:21:36:88:0d:e7:22:7c:08:3d:58:be:
3e:37:9b:b5:cb:04:c3:c2:89:b6:77:1c:e0:b1:47:2e:8c:10:
e1:da:54:c3:ca:32:a9:b7:9a:28:9a:74:ec:9f:69:eb:82:ef:
cb:a7:21:aa:78:c7:5e:26:d3:e5:38:01:a9:f2:4e:b6:c6:c0:
20:f9:04:04:b3:32:d7:a7:e3:0d:4c:c7:c7:74:18:50:01:42:
be:3c:3c:8f:0a:24:b4:a1:ad:54:c1:c3:e6:ab:aa:3a:b0:8e:
95:9d:82:e4:59:45:0d:fc:40:e3:84:49:dc:13:76:43:d7:f3:
c8:3f:73:99:df:d6:4f:93:60:55:db:0d:2f:68:39:b1:e1:ed:
76:b2:4e:09:c2:fa:6f:3c:b6:5f:c2:8b:dc:59:c3:3e:d4:8f:
d5:71:61:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:36:49 2026 by rpki-client