
$ rpki-client -vvf rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/323430323a3738303a3a2f34382d3438203d3e203435373235.roa
File: 323430323a3738303a3a2f34382d3438203d3e203435373235.roa (raw, json)
Hash identifier: cLBM/jgpuytTS3KxuREMbUMsRAKbxC8I6mXbLxApRxw=
Subject key identifier: 48:AE:43:25:33:C0:35:DF:D4:80:D5:83:A0:FF:03:79:43:D9:8F:B3
Certificate issuer: /CN=62258C46C7EEF9427331E24A2D1EB9B699C68A9E
Certificate serial: 3E81DA565EDF0CAC3F1C3EF2C3CB4CAB32D7C5DC
Authority key identifier: 62:25:8C:46:C7:EE:F9:42:73:31:E2:4A:2D:1E:B9:B6:99:C6:8A:9E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/323430323a3738303a3a2f34382d3438203d3e203435373235.roa
Signing time: Sun 03 May 2026 02:39:11 +0000
ROA not before: Sun 03 May 2026 02:34:11 +0000
ROA not after: Sun 02 May 2027 02:39:11 +0000
asID: 45725
IP address blocks: 2402:780::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.crl
rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 17:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:81:da:56:5e:df:0c:ac:3f:1c:3e:f2:c3:cb:4c:ab:32:d7:c5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62258C46C7EEF9427331E24A2D1EB9B699C68A9E
Validity
Not Before: May 3 02:34:11 2026 GMT
Not After : May 2 02:39:11 2027 GMT
Subject: CN=48AE432533C035DFD480D583A0FF037943D98FB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9d:27:c9:f0:11:53:35:fa:42:6d:9f:17:ba:
7e:13:32:67:24:00:40:79:92:08:f3:3f:71:f1:82:
c0:d6:1b:3f:f4:5f:09:2c:4d:73:df:77:36:31:0c:
0e:13:04:2d:b4:27:29:89:d7:33:b4:9e:9f:44:96:
c3:8a:74:5f:7a:bd:1a:73:35:18:7e:f8:39:e7:59:
82:3d:c9:81:b6:0d:26:7b:ba:42:80:fb:42:a5:40:
4e:9c:ca:d1:62:03:ec:ed:df:30:f3:64:d6:46:8b:
75:96:48:f9:1a:88:e0:dd:40:d2:07:5c:b0:b5:af:
64:79:dd:14:2d:07:7b:3f:46:af:4a:04:4a:42:73:
57:c6:9f:fb:f1:9e:e6:07:bc:59:9e:36:df:76:a6:
7c:17:66:ad:b3:55:14:a5:d7:b4:51:40:e9:07:06:
dd:45:bd:03:a9:aa:ef:46:f0:79:31:89:72:fa:2b:
d5:af:ce:46:f5:a2:40:49:6a:02:8a:1d:51:fa:d8:
8f:7b:2d:03:89:ce:ed:93:79:1a:a3:14:46:5b:3b:
30:69:1f:c9:3c:e5:a5:00:28:35:e0:e3:f4:1d:e8:
cd:30:5d:8f:5e:0d:08:5d:59:1a:ab:87:7c:d9:1d:
63:b4:e4:29:e0:00:2a:1b:23:92:16:75:3d:60:ad:
37:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AE:43:25:33:C0:35:DF:D4:80:D5:83:A0:FF:03:79:43:D9:8F:B3
X509v3 Authority Key Identifier:
keyid:62:25:8C:46:C7:EE:F9:42:73:31:E2:4A:2D:1E:B9:B6:99:C6:8A:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/323430323a3738303a3a2f34382d3438203d3e203435373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:780::/48
Signature Algorithm: sha256WithRSAEncryption
3c:a0:65:43:9d:51:1c:98:0d:8d:ae:75:02:56:e7:03:ff:06:
d1:de:2a:88:f8:93:30:e5:66:d7:dd:9f:31:51:41:27:79:43:
5a:93:f8:46:f5:19:ff:a6:67:e0:3d:5b:39:fd:2e:71:80:30:
43:0d:6d:c0:5b:8d:3c:94:ba:f0:25:12:04:b5:d4:c3:7f:89:
64:ea:a9:a4:71:26:89:cc:3c:0a:8d:dd:37:a6:07:0c:18:6e:
95:88:01:cc:81:b8:90:f8:4c:45:ed:b5:57:fa:9c:88:19:a3:
94:f6:46:7f:c6:7e:a4:dc:9d:6c:37:dc:ec:69:61:90:8a:c9:
5d:94:d9:16:0e:38:2d:c7:52:2d:59:b4:3a:e7:55:d5:bb:cf:
fa:69:df:e2:42:8d:91:16:9a:02:15:67:21:10:56:6c:eb:91:
05:50:2f:ae:7e:a6:0b:b1:d1:5a:73:c0:8c:31:af:da:f4:fd:
55:87:98:10:c5:92:2f:db:f6:d2:f4:40:f1:f2:42:f2:aa:53:
8a:dd:be:9d:08:09:2d:b3:3a:65:75:6f:a1:8a:83:50:e2:ab:
b6:f9:7e:09:aa:2a:60:de:83:3c:3c:c4:b8:2e:69:73:b8:d5:
6d:83:73:d3:ac:57:07:4f:5e:25:22:b9:ec:97:e9:0a:07:be:
95:c7:ce:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:39:29 2026 by rpki-client