
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/323430303a313838303a3a2f33322d3438203d3e203137363730.roa
File: 323430303a313838303a3a2f33322d3438203d3e203137363730.roa (raw, json)
Hash identifier: 7JThFy92/VpEXEDJA9kwrgcgGhSHAfaM/+d1+Zp5aK8=
Subject key identifier: 6A:F0:E9:74:C8:8F:98:4B:5A:AA:A2:DF:55:05:DC:CB:1A:CA:8B:49
Certificate issuer: /CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA
Certificate serial: 7A8B57A615DE29ED3DEEE7E5192FC0DD97B95D34
Authority key identifier: 70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/323430303a313838303a3a2f33322d3438203d3e203137363730.roa
Signing time: Sun 03 May 2026 02:37:17 +0000
ROA not before: Sun 03 May 2026 02:32:17 +0000
ROA not after: Sun 02 May 2027 02:37:17 +0000
asID: 17670
IP address blocks: 2400:1880::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl
rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:8b:57:a6:15:de:29:ed:3d:ee:e7:e5:19:2f:c0:dd:97:b9:5d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA
Validity
Not Before: May 3 02:32:17 2026 GMT
Not After : May 2 02:37:17 2027 GMT
Subject: CN=6AF0E974C88F984B5AAAA2DF5505DCCB1ACA8B49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:24:dc:61:9f:29:71:28:70:5e:a8:8e:3b:90:
53:12:52:c6:10:d2:d7:e5:2d:4c:f4:c8:ca:f7:1c:
56:d7:1d:4c:0e:ab:d6:91:eb:e8:68:2f:90:e0:d3:
44:42:01:03:c0:05:22:af:c7:ea:1b:3a:e6:d2:19:
5b:6d:fb:a9:83:57:04:e5:7c:c5:16:2e:53:93:6a:
7e:b5:2d:45:e9:89:01:df:c7:e6:e4:7e:8f:74:52:
47:00:5d:26:bf:1b:7a:36:bb:79:57:61:03:aa:ca:
37:5c:ad:bb:ad:df:07:8a:5b:2f:2e:e6:bb:d4:e0:
84:8b:f4:ad:bc:62:b6:e3:56:84:bf:84:26:4a:10:
58:f3:bb:c2:f4:2a:f8:3a:18:fe:d5:24:65:65:38:
e2:45:8c:c1:70:75:3b:85:0c:ac:78:ec:53:ed:79:
3e:eb:70:e6:3f:31:3d:ee:51:f5:e1:ef:50:72:01:
51:f7:69:23:0e:b9:b1:69:6c:46:04:77:1d:d1:6a:
02:0f:66:db:9d:88:17:f2:64:aa:27:f7:4c:8a:75:
18:98:bb:a7:75:21:fb:40:f6:10:91:15:26:69:b5:
d1:e0:de:ee:ec:a5:14:c1:c2:b4:0d:4c:97:4c:c5:
ce:9b:88:ba:cc:87:44:a8:c9:e4:3e:2c:3c:16:8e:
97:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F0:E9:74:C8:8F:98:4B:5A:AA:A2:DF:55:05:DC:CB:1A:CA:8B:49
X509v3 Authority Key Identifier:
keyid:70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/323430303a313838303a3a2f33322d3438203d3e203137363730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:1880::/32
Signature Algorithm: sha256WithRSAEncryption
93:19:c0:ec:fa:20:37:4a:2d:30:89:c5:88:31:d2:55:d6:fb:
db:82:b1:59:ce:8a:c1:12:70:1c:8c:fc:16:33:07:41:bf:45:
7c:69:76:70:58:bd:34:12:e1:c6:6c:77:46:8e:89:57:d7:da:
73:bd:8c:30:ed:ca:c9:f7:4f:a1:0d:fe:89:8a:fd:0b:db:17:
14:69:58:12:09:a0:b9:fc:18:9d:f1:6e:ff:d5:fd:d7:67:11:
d5:75:0e:46:67:2a:a0:23:a8:6d:82:5a:be:ae:46:bc:99:df:
5d:10:26:b4:47:cd:d6:d6:1f:d0:1c:17:2c:e3:7b:e1:1e:49:
2a:c6:bb:6f:df:49:aa:e6:4a:64:5d:51:9e:27:8e:7c:c5:19:
97:68:65:3a:b6:de:0f:f6:97:9e:e6:77:82:ad:ca:69:2c:2b:
06:3e:fb:9b:d6:c5:bc:85:12:39:5f:fd:c0:27:da:2e:cf:b6:
60:f5:1f:0a:f6:32:05:a7:32:76:1d:d9:1e:1c:a2:5f:95:7e:
10:f4:7d:bb:2c:8c:3a:1b:56:53:0b:8b:dd:55:7e:46:ab:ff:
27:e2:58:d8:9c:89:f5:d0:10:51:c6:c9:32:1d:a7:85:9d:73:
7a:0e:62:ff:2c:07:13:1c:83:63:05:c1:30:2a:5a:b5:46:c3:
79:11:17:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:25:38 2026 by rpki-client