
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa
File: 323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa (raw, json)
Hash identifier: aykb9pBBSkXI3tTi9mpSHn2tVZ0H++we7ChH689sRxg=
Subject key identifier: C4:9B:0C:EB:4B:38:46:77:CA:34:2D:F8:0C:DC:FE:7D:E0:87:33:B9
Certificate issuer: /CN=AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A
Certificate serial: 4857949E56EC1B0AE66263E1987ECAC6E6473872
Authority key identifier: AA:7E:83:DE:74:35:AB:78:AD:E6:13:7B:1E:AC:FD:C6:F6:BC:95:8A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa
Signing time: Sun 03 May 2026 02:35:20 +0000
ROA not before: Sun 03 May 2026 02:30:20 +0000
ROA not after: Sun 02 May 2027 02:35:20 +0000
asID: 138866
IP address blocks: 2404:fec0:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl
rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:23:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:57:94:9e:56:ec:1b:0a:e6:62:63:e1:98:7e:ca:c6:e6:47:38:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A
Validity
Not Before: May 3 02:30:20 2026 GMT
Not After : May 2 02:35:20 2027 GMT
Subject: CN=C49B0CEB4B384677CA342DF80CDCFE7DE08733B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:29:0e:8f:18:84:d3:a0:0d:c7:8b:57:b2:83:
ce:c7:52:fc:74:93:bf:73:ae:fe:bb:59:0d:ca:aa:
4f:50:ae:90:17:25:6f:6a:59:f9:97:d4:55:ca:f7:
43:72:7f:3e:f4:f0:a1:62:18:64:31:70:d8:ea:d5:
a3:3e:3f:45:7b:55:f3:cb:e0:44:a9:8b:3d:1e:3b:
a4:76:96:d8:ad:6a:c3:cd:b7:4e:08:c2:af:45:fc:
99:86:b5:93:10:95:32:6e:8a:a1:e8:b6:f9:81:e2:
1e:14:77:17:7f:f7:7c:55:1f:36:50:d3:bc:db:79:
22:10:43:50:53:ae:06:80:e3:f3:12:10:7b:6d:09:
41:d4:1a:7a:fc:21:a3:06:a6:27:c7:cc:47:e2:ff:
b3:05:cc:de:b3:68:c5:b9:fe:d4:c1:1e:c6:04:a5:
90:87:18:af:d5:01:a5:86:8b:4d:dc:f8:c0:d3:b6:
e9:3d:03:09:fd:50:a5:be:b8:32:3b:fd:ac:58:31:
4e:73:ca:f5:d3:36:37:7e:f2:17:e9:6f:e7:17:c7:
2b:db:08:6a:be:9e:82:6a:f0:6b:43:fc:f6:b2:24:
88:09:ac:a3:15:4d:99:fc:5e:7b:89:9d:8f:08:a7:
3f:2f:ae:6c:71:83:6d:22:c3:3a:63:30:86:c4:85:
78:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9B:0C:EB:4B:38:46:77:CA:34:2D:F8:0C:DC:FE:7D:E0:87:33:B9
X509v3 Authority Key Identifier:
keyid:AA:7E:83:DE:74:35:AB:78:AD:E6:13:7B:1E:AC:FD:C6:F6:BC:95:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AA7E83DE7435AB78ADE6137B1EACFDC6F6BC958A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:fec0:4::/48
Signature Algorithm: sha256WithRSAEncryption
2f:b6:8a:88:33:2b:b8:3f:99:ee:1e:4a:6f:58:3a:52:f8:cc:
39:c4:65:bb:d3:e2:bf:31:45:af:22:48:04:b0:98:8a:97:6c:
ae:17:c6:bd:93:b2:c1:f6:9d:76:a0:b9:f8:85:bb:68:b0:e6:
38:5f:46:57:00:e6:eb:33:0e:e2:46:50:a3:96:59:d7:24:7b:
1f:d3:fd:57:b8:9d:f3:94:72:fc:45:89:ed:d7:90:0a:da:90:
3d:13:ee:bf:87:30:e8:be:a3:b0:db:95:29:5c:19:60:58:83:
b6:33:1f:b9:75:88:4b:ad:de:d2:1b:82:82:7b:13:7b:9c:10:
9b:b0:23:fa:e0:dd:c5:a5:59:9c:78:45:09:a5:0b:22:06:25:
49:07:e1:75:3c:70:3e:9a:1f:e5:b3:ac:9f:db:9b:69:05:d6:
6d:24:af:38:8e:cd:30:e6:c9:cb:26:14:d5:e5:31:3c:6c:87:
3c:5a:96:27:d1:95:7a:3a:dc:ec:4f:6c:72:60:fd:4b:f5:a2:
8e:2f:ca:5d:91:de:a3:81:bc:27:17:e8:4f:36:13:9a:e2:32:
1b:70:ea:16:aa:69:78:e4:fc:1a:8c:12:8e:ea:9b:6e:86:91:
e9:11:c0:b3:7a:33:4e:6e:9f:75:e0:49:fa:75:e5:6e:89:a7:
62:11:83:c8
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUSFeUnlbsGwrmYmPhmH7KxuZHOHIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUE3RTgzREU3NDM1QUI3OEFERTYxMzdCMUVBQ0ZEQzZG
NkJDOTU4QTAeFw0yNjA1MDMwMjMwMjBaFw0yNzA1MDIwMjM1MjBaMDMxMTAvBgNV
BAMTKEM0OUIwQ0VCNEIzODQ2NzdDQTM0MkRGODBDRENGRTdERTA4NzMzQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLKQ6PGITToA3Hi1eyg87HUvx0
k79zrv67WQ3Kqk9QrpAXJW9qWfmX1FXK90Nyfz708KFiGGQxcNjq1aM+P0V7VfPL
4ESpiz0eO6R2ltitasPNt04Iwq9F/JmGtZMQlTJuiqHotvmB4h4Udxd/93xVHzZQ
07zbeSIQQ1BTrgaA4/MSEHttCUHUGnr8IaMGpifHzEfi/7MFzN6zaMW5/tTBHsYE
pZCHGK/VAaWGi03c+MDTtuk9Awn9UKW+uDI7/axYMU5zyvXTNjd+8hfpb+cXxyvb
CGq+noJq8GtD/PayJIgJrKMVTZn8XnuJnY8Ipz8vrmxxg20iwzpjMIbEhXhZAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUxJsM60s4RnfKNC34DNz+feCHM7kwHwYDVR0j
BBgwFoAUqn6D3nQ1q3it5hN7Hqz9xva8lYowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWE1MTlhZWItNWM1Ni00Y2IzLTk0YTAtMGY0MDBlYTZhMzc1LzAvQUE3RTgzREU3
NDM1QUI3OEFERTYxMzdCMUVBQ0ZEQzZGNkJDOTU4QS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BQTdFODNERTc0MzVBQjc4QURFNjEzN0IxRUFDRkRDNkY2QkM5
NThBLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVhNTE5YWViLTVjNTYtNGNiMy05
NGEwLTBmNDAwZWE2YTM3NS8wLzMyMzQzMDM0M2E2NjY1NjMzMDNhMzQzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzgzODM2MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBP7AAAQw
DQYJKoZIhvcNAQELBQADggEBAC+2iogzK7g/me4eSm9YOlL4zDnEZbvT4r8xRa8i
SASwmIqXbK4Xxr2TssH2nXagufiFu2iw5jhfRlcA5uszDuJGUKOWWdckex/T/Ve4
nfOUcvxFie3XkArakD0T7r+HMOi+o7DblSlcGWBYg7YzH7l1iEut3tIbgoJ7E3uc
EJuwI/rg3cWlWZx4RQmlCyIGJUkH4XU8cD6aH+WzrJ/bm2kF1m0krziOzTDmycsm
FNXlMTxshzxalifRlXo63OxPbHJg/Uv1oo4vyl2R3qOBvCcX6E82E5riMhtw6haq
aXjk/BqMEo7qm26GkekRwLN6M05un3XgSfp15W6Jp2IRg8g=
-----END CERTIFICATE-----
Generated at Wed May 13 10:30:05 2026 by rpki-client