
$ rpki-client -vvf rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/323430323a3738303a3130303a3a2f34302d3430203d3e203435373235.roa
File: 323430323a3738303a3130303a3a2f34302d3430203d3e203435373235.roa (raw, json)
Hash identifier: DodSCyr92zbHc4jJThsdzX3yx3+6ajPZugqg4e2XNgQ=
Subject key identifier: BB:50:E2:F9:BA:54:E1:2E:52:AD:66:3E:CB:C5:F8:75:B2:EF:16:07
Certificate issuer: /CN=62258C46C7EEF9427331E24A2D1EB9B699C68A9E
Certificate serial: 3CFB11611333F985650D7569EBA79CBFC658164E
Authority key identifier: 62:25:8C:46:C7:EE:F9:42:73:31:E2:4A:2D:1E:B9:B6:99:C6:8A:9E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/323430323a3738303a3130303a3a2f34302d3430203d3e203435373235.roa
Signing time: Sun 03 May 2026 02:39:11 +0000
ROA not before: Sun 03 May 2026 02:34:11 +0000
ROA not after: Sun 02 May 2027 02:39:11 +0000
asID: 45725
IP address blocks: 2402:780:100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.crl
rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:27:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:fb:11:61:13:33:f9:85:65:0d:75:69:eb:a7:9c:bf:c6:58:16:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62258C46C7EEF9427331E24A2D1EB9B699C68A9E
Validity
Not Before: May 3 02:34:11 2026 GMT
Not After : May 2 02:39:11 2027 GMT
Subject: CN=BB50E2F9BA54E12E52AD663ECBC5F875B2EF1607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b1:aa:73:00:90:23:ff:54:ab:72:a2:ae:8a:
12:20:da:7b:87:db:73:0b:f0:6a:76:f7:ed:83:89:
b1:79:c5:3f:66:40:87:a2:4d:94:49:ea:9d:f0:46:
db:5a:5c:ae:4a:54:01:28:03:66:2f:e4:e4:da:fa:
1c:92:62:71:98:2e:8f:fe:4a:3f:3b:b0:85:de:f7:
ca:a8:b5:6d:45:ba:bf:ff:03:1d:37:96:39:39:3c:
1b:91:b3:d7:82:d0:34:14:3d:a3:79:a7:30:ea:fb:
b9:4c:87:8b:64:f4:80:9a:56:fb:e8:a8:a1:11:4e:
c2:a6:c8:27:51:0e:46:e5:b1:6e:4c:50:f8:4e:b1:
dc:4b:75:7e:b0:23:80:76:ce:4b:f2:2c:0c:a1:f7:
99:0f:fc:d9:0d:b1:b3:70:f6:51:0a:7d:c2:54:10:
05:e7:d4:36:81:ab:da:f4:d4:a2:9b:d4:b2:bb:23:
ac:be:f0:26:cc:2f:e8:cd:94:a6:33:1b:28:c0:69:
97:39:3d:05:16:21:52:96:61:3d:d3:d4:2d:86:99:
f6:a8:d0:d2:ff:e3:83:41:90:91:2e:bf:61:65:10:
64:b8:23:21:d3:e5:8a:57:d9:93:01:34:fd:c7:8d:
49:13:93:c8:66:6c:e5:3f:b6:31:8b:20:57:11:f2:
31:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:50:E2:F9:BA:54:E1:2E:52:AD:66:3E:CB:C5:F8:75:B2:EF:16:07
X509v3 Authority Key Identifier:
keyid:62:25:8C:46:C7:EE:F9:42:73:31:E2:4A:2D:1E:B9:B6:99:C6:8A:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/323430323a3738303a3130303a3a2f34302d3430203d3e203435373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:780:100::/40
Signature Algorithm: sha256WithRSAEncryption
87:c2:ac:f4:c6:f4:0c:cc:21:bf:f0:42:65:d9:a0:0d:e2:ee:
25:ec:a1:23:60:7a:44:39:a3:7b:aa:ac:7a:5e:a2:09:1a:17:
50:ae:4f:8b:3c:34:4e:57:34:32:22:3b:ff:a4:a9:21:2e:37:
ad:7c:bc:0d:8b:74:b6:21:43:24:3d:fb:b1:5c:f5:4f:94:cd:
28:12:20:0a:6b:cc:10:1c:a4:43:22:0c:8e:b0:f3:19:34:da:
9e:38:a0:c8:21:e3:db:7e:ce:cf:43:b2:99:bc:4f:29:21:7e:
a2:21:87:69:97:2d:f4:73:5a:c2:46:78:d3:e8:48:17:7e:cd:
19:03:f1:07:35:3a:d0:3e:bf:62:29:93:f8:24:dd:1c:ea:f9:
19:3a:81:17:e6:43:ad:7e:c9:83:8e:4b:75:f3:d5:f9:8c:95:
60:88:5d:ce:de:44:5a:4b:6e:b1:31:77:4e:66:9b:6d:e3:53:
c5:33:89:66:c8:16:e7:5b:d2:50:c1:9b:f8:ff:d0:ed:e0:5d:
aa:9b:56:90:ff:2e:32:f5:b6:8a:eb:0e:2e:99:6c:06:0f:70:
f9:29:18:e9:ae:35:9b:bb:c6:d0:ea:d0:5c:63:c7:03:55:e7:
31:70:c8:c3:3a:ea:d2:06:9a:1d:85:b3:ba:b8:41:c9:69:bd:
ca:d6:22:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:22:36 2026 by rpki-client