
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/323430333a653063303a3a2f34382d3438203d3e20313338303839.roa
File: 323430333a653063303a3a2f34382d3438203d3e20313338303839.roa (raw, json)
Hash identifier: O7Jg3ekrKiPlwDIBfPqMERpdUxButyek7mBs/PaEfvA=
Subject key identifier: FB:AB:C8:56:EC:09:0F:41:06:45:55:35:67:81:09:EB:13:A2:52:DF
Certificate issuer: /CN=BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67
Certificate serial: 5F9CE83D3A9082305617E8B7CE585B3260231C26
Authority key identifier: BB:93:3B:FB:2B:0C:8A:3A:BD:4E:55:48:5B:CC:D9:E7:B4:48:6E:67
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/323430333a653063303a3a2f34382d3438203d3e20313338303839.roa
Signing time: Sun 03 May 2026 02:35:36 +0000
ROA not before: Sun 03 May 2026 02:30:36 +0000
ROA not after: Sun 02 May 2027 02:35:36 +0000
asID: 138089
IP address blocks: 2403:e0c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl
rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:9c:e8:3d:3a:90:82:30:56:17:e8:b7:ce:58:5b:32:60:23:1c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67
Validity
Not Before: May 3 02:30:36 2026 GMT
Not After : May 2 02:35:36 2027 GMT
Subject: CN=FBABC856EC090F4106455535678109EB13A252DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cf:e4:95:2d:a7:ee:c4:92:e0:00:2a:e0:35:
e9:a2:31:2e:cb:9f:db:f6:ed:a2:d6:0f:8f:9d:fe:
c4:c2:b0:de:10:32:46:0f:f9:19:c8:c9:45:e8:91:
06:f7:a5:ba:5a:f8:fe:26:c1:62:c2:f0:1b:6d:63:
05:69:34:59:c5:d8:eb:b5:2f:24:1a:1e:f9:27:c4:
8c:55:fc:96:8e:3f:3d:ee:d8:00:4f:a3:41:d0:64:
9a:cc:ea:d8:09:41:4c:4c:ae:36:60:fb:a9:f8:ea:
7b:1a:8e:4a:77:3c:87:0e:ec:b2:d6:60:e3:76:5c:
e1:6c:60:b9:a4:46:37:c9:a8:1f:12:54:11:5d:c6:
d4:6a:34:f8:1e:09:08:c2:a8:3d:e6:6d:5b:58:29:
67:2f:da:be:74:bb:49:58:00:26:68:ba:cd:34:29:
a6:6e:bf:4f:2f:d7:0e:59:a3:ff:12:b2:61:9d:3e:
40:fe:ef:b5:82:0a:e3:e3:1a:43:82:ab:c9:2c:a4:
05:68:16:a3:a9:c4:02:dc:4d:a8:e8:ba:39:f2:d8:
45:7a:58:c9:6a:01:8f:2e:49:c1:4e:41:bd:48:3f:
24:09:95:95:d1:db:e1:c1:93:21:b7:94:61:32:28:
d8:6c:ea:ba:7b:95:bf:10:8c:e4:64:e0:94:60:e4:
2d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AB:C8:56:EC:09:0F:41:06:45:55:35:67:81:09:EB:13:A2:52:DF
X509v3 Authority Key Identifier:
keyid:BB:93:3B:FB:2B:0C:8A:3A:BD:4E:55:48:5B:CC:D9:E7:B4:48:6E:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/323430333a653063303a3a2f34382d3438203d3e20313338303839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:e0c0::/48
Signature Algorithm: sha256WithRSAEncryption
c6:03:18:41:80:ff:90:bd:71:e4:f2:da:48:4b:e5:45:ec:16:
fc:ae:f5:77:3a:8d:9f:74:df:82:16:e2:2a:41:1b:6e:da:3c:
b8:4d:97:03:87:f0:7b:32:72:9c:46:58:91:0b:34:dd:b1:2f:
c0:1b:b3:bb:68:b5:ae:84:02:91:e5:8f:a8:ba:49:4b:75:3a:
e5:4a:76:66:91:c5:e6:0f:97:e9:90:22:4e:85:6c:bd:9d:8f:
ed:06:ab:83:d7:e9:97:f8:51:1a:97:00:a8:b0:66:46:5d:96:
70:3c:c1:b5:42:77:e8:c7:84:43:f5:85:4c:3a:75:a7:46:c5:
b2:7a:e3:03:d6:d7:9f:f2:0c:92:75:50:eb:19:d6:08:27:bc:
67:b2:2e:d2:a3:2f:ce:dc:92:1f:47:02:70:7c:a8:3a:5f:9a:
89:3a:31:6a:35:85:eb:86:a6:99:fb:29:8b:df:70:5f:aa:11:
5c:7a:32:8d:49:09:b2:59:2d:09:a5:6c:5e:fb:4a:f5:07:78:
ac:24:f3:fa:30:38:58:fa:ca:10:c8:fc:01:6a:36:1d:0e:0b:
a3:ba:ce:90:de:c9:cf:8f:e6:f4:08:8e:d3:e7:38:3a:ad:b5:
f2:94:e1:12:01:d9:74:d2:df:35:5a:f9:f9:89:cb:83:27:04:
46:40:47:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:36:05 2026 by rpki-client